{"report_id":"6af49f12-db92-4683-b66f-f9d6c27c5b25","version":0,"status":"done","tags":["capitalone","financial","phishing"],"date":"2026-07-19T15:07:45Z","url":{"schema":"http","addr":"baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","fqdn":"baocaocongviec.thaibinhweb.com","domain":"thaibinhweb.com","tld":"com"},"ip":{"addr":"103.57.223.70","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","fqdn":"baocaocongviec.thaibinhweb.com","domain":"thaibinhweb.com","tld":"com"},"title":"Capital One Sign In: Log in to access your account(s)","dom":{"size":374248,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (33409)","md5":"c84cac28587bd3456115840d2e99aa61","sha1":"b4832946ce04ee35a6eb34df310252b8a591761f","sha256":"d8947a6b692e6628db36789131c62b5ad6ee559528261689383d405f9cd20c98","sha512":"49cbf87847339d23ffa51738c6a6a1a01dc5cd8e82518dd07d5d09657bcae018f2a2ad9ff8869756d96dd13abad45034bf505874ce2adb30d1f4c14451556fdd","ssdeep":"3072:7vS17UGS17+u8jnS17ifS17yS17MS17hADZS177mS17eS17jS173:7mwNYuP1nzvtBOL","tlshash":"00841e05f68254af72679d7d3062b7af650808c0b7c90bf9b05f38bdbd1b983827a591","dom_hash":"domhash9923ea72bfe9b9bfcb170dbb4c270c9e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","fqdn":"baocaocongviec.thaibinhweb.com","domain":"thaibinhweb.com","tld":"com"},"ip":{"addr":"103.57.223.70","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T15:07:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Capital One","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Capital One phishing","tags":["capitalone","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Capital One","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Capital One phishing","tags":["capitalone","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"baocaocongviec.thaibinhweb.com","ip":{"addr":"103.57.223.70","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"domain_registered":"2015-12-31","domain_rank":0,"first_seen":"2026-07-19T15:07:45.679776Z","last_seen":"2026-07-19T15:07:45.679776Z","alert_count":1,"request_count":1,"received_data":374629,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ecm.capitalone.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1995-03-13","domain_rank":70099,"first_seen":"2017-02-01T17:32:51Z","last_seen":"2026-07-10T13:26:57.955964Z","alert_count":0,"request_count":4,"received_data":18149,"sent_data":2382,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"verified.capitalone.com","ip":{"addr":"13.249.8.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-03-13","domain_rank":11125,"first_seen":"2017-01-03T13:44:34Z","last_seen":"2026-07-15T10:09:53.845109Z","alert_count":0,"request_count":1,"received_data":15960,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Capital One","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Capital One phishing","tags":["capitalone","financial","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","fqdn":"baocaocongviec.thaibinhweb.com","domain":"thaibinhweb.com","tld":"com"},"ip":{"addr":"103.57.223.70","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T15:07:08.322Z","timestamp":1784473628322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baocaocongviec.thaibinhweb.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 20:37:43 GMT","end":"Thu, 15 Oct 2026 20:37:42 GMT"},"fingerprint":{"sha1":"BA:64:7B:12:74:FC:51:55:B5:E5:2D:CB:70:5F:C5:D7:A6:57:15:FF","sha256":"97:57:4F:E1:21:2D:84:DD:C5:D7:5C:65:65:B8:09:78:37:33:91:78:C8:99:28:E5:C0:9F:86:84:54:3A:E0:1E"}}},"request":{"raw":"GET /temp/mail.capitalone.html HTTP/1.1\r\nHost: baocaocongviec.thaibinhweb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.28.1\r\ndate: Sun, 19 Jul 2026 15:07:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 18 Jul 2026 17:55:34 GMT\r\netag: W/\"6a5bbe16-5b67f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374399,"size_decoded":71707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (33390), with CRLF line terminators","md5":"1ef515f99d6535208a3a0bde32fa8fc0","sha1":"3a1145ddfb2ba5ece7392246dc6527ee2e88e84b","sha256":"d3e06c02a3ba1cc97d4da78c227c5b7352905fae7940a58cd5dbd9e088d7b568","sha512":"3cf6f0713469942bc9ad0d7b0202a5a48f15a612dbfa0ce6e7ea059a97f502e461d8cdf09b0433b6c5d8f8da627807abe3a675f8609ce6f81d26566047de8e70","ssdeep":"3072:jkS17BCS17Tu8WnS17JHS17yS17TS17zDsoS17e3S177S172S17q:jrN5yu41GgS+uRO","tlshash":"3d841e05f68254af72679d7d3062b7af650808c0b7c90bf9b05f38bdbd1b983827a591","first_seen":"2026-07-15T10:09:55.66175Z","last_seen":"2026-07-19T15:41:56.191578Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1883,"timings":{"blocked":-1,"dns":450,"connect":287,"send":0,"wait":564,"receive":0,"ssl":581},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Capital One","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Capital One phishing","tags":["capitalone","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ecm.capitalone.com/CI_Common/assets/images/logos/capital-one-logo.svg","fqdn":"ecm.capitalone.com","domain":"capitalone.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","date":"2026-07-19T15:07:10.522Z","timestamp":1784473630522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ecm.capitalone.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:22:F6:23:30:B5:E5:BF:C1:63:60:FC:0D:A4:56:0C:24:22:67:36","sha256":"4C:28:BA:95:21:CE:FE:56:76:79:70:D3:80:15:BE:6C:D4:C1:E4:D2:D4:36:45:E7:0D:16:FF:C7:EF:83:0B:4A"}}},"request":{"raw":"GET /CI_Common/assets/images/logos/capital-one-logo.svg HTTP/1.1\r\nHost: ecm.capitalone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baocaocongviec.thaibinhweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 20 Jan 2021 18:06:43 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8LzbBBEj8zCeatCBoYuv1q1dFFpTcVNl\r\nserver: AmazonS3\r\netag: W/\"f0b7ad81821effc52540e39cafda48f9\"\r\nvary: accept-encoding\r\nx-amz-cf-pop: MXP63-P4\r\nx-amz-cf-id: OWmXwXglZgt5IWvKjSfFVOa-vQVYHGEWeDX2uy_zlGtDWs5dy_zyKw==\r\ncontent-length: 1726\r\ncache-control: max-age=1615049\r\nexpires: Fri, 07 Aug 2026 07:44:39 GMT\r\ndate: Sun, 19 Jul 2026 15:07:10 GMT\r\nstrict-transport-security: max-age=15768000\r\naccess-control-request-method: POST,GET,PUT,DELETE\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3971,"size_decoded":2535,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (3967), with CRLF line terminators","md5":"f0b7ad81821effc52540e39cafda48f9","sha1":"33d64bc7001f414f12bd92e740a45e5ced239add","sha256":"57dfca5b95599a613da940f4a49ab6378fcf0586366a47cae679796930bf0eed","sha512":"ada921382d19becb6bb1efe43c7024f1bb995c84fb8c91e245731de68ab23e7959df759dc53fab8459b91eb3004334a6bd96194eb11c956a81a99b486252b727","ssdeep":"","tlshash":"a3819c79c390d3b9eed69bbc9f3260b4d08fd1ae90e5d35482a4c56035d20d8b25ecd9","first_seen":"2023-05-05T00:40:48Z","last_seen":"2026-07-20T03:21:49.011205Z","times_seen":516,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":5,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecm.capitalone.com/CI_Common/assets/images/feature-icons/touch-id.svg","fqdn":"ecm.capitalone.com","domain":"capitalone.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","date":"2026-07-19T15:07:10.536Z","timestamp":1784473630536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ecm.capitalone.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:22:F6:23:30:B5:E5:BF:C1:63:60:FC:0D:A4:56:0C:24:22:67:36","sha256":"4C:28:BA:95:21:CE:FE:56:76:79:70:D3:80:15:BE:6C:D4:C1:E4:D2:D4:36:45:E7:0D:16:FF:C7:EF:83:0B:4A"}}},"request":{"raw":"GET /CI_Common/assets/images/feature-icons/touch-id.svg HTTP/1.1\r\nHost: ecm.capitalone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baocaocongviec.thaibinhweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 5198\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 18 Mar 2025 15:51:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 07tJ5_bi_f.Y7du8E3MhKGcRxQGsQv.Z\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\netag: \"a57d41b5fcb544863f7e0f9592921aea\"\r\nx-amz-cf-pop: MXP63-P7\r\nx-amz-cf-id: dwIDfiSxQe4xW0KOduUm4Tip1krovhclJqCwoiwCdaLBJYmgeN-IYQ==\r\ndate: Sun, 19 Jul 2026 15:07:10 GMT\r\nstrict-transport-security: max-age=15768000\r\naccess-control-request-method: POST,GET,PUT,DELETE\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5198,"size_decoded":5943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a57d41b5fcb544863f7e0f9592921aea","sha1":"25fbe0039fb34019228da65578b316ea2fcd15c6","sha256":"ec3e7170a5b7aef9d016cd4347bce759b2aafa33eac77e358f8e617a9f0825f5","sha512":"c9432ed70da699f03eb061aab3cb5304962bf40644c9f2c849c87db94c459f5a60c57a2019d360da671efce6405bd344e67d7fc84b14e6b8ccb8586f00878e33","ssdeep":"96:BZKiialiMzx1XyDhBdnNhMYMDrkrwY2x6cw8oNt/FRJ9+N6h+YApe7oE+YwOl:BZKHki4xdyDhvN+YMPkUY2BoLD7jGpeP","tlshash":"99b175d5b3e9e2e0e823a7f44547a87c374320ff2837ce51caa47994e9064ad0c86cd5","first_seen":"2026-07-15T10:09:55.657608Z","last_seen":"2026-07-19T15:41:56.193146Z","times_seen":5,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":305,"receive":60,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecm.capitalone.com/CI_Common/assets/images/footer/fdic.svg","fqdn":"ecm.capitalone.com","domain":"capitalone.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","date":"2026-07-19T15:07:10.595Z","timestamp":1784473630595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ecm.capitalone.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:22:F6:23:30:B5:E5:BF:C1:63:60:FC:0D:A4:56:0C:24:22:67:36","sha256":"4C:28:BA:95:21:CE:FE:56:76:79:70:D3:80:15:BE:6C:D4:C1:E4:D2:D4:36:45:E7:0D:16:FF:C7:EF:83:0B:4A"}}},"request":{"raw":"GET /CI_Common/assets/images/footer/fdic.svg HTTP/1.1\r\nHost: ecm.capitalone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baocaocongviec.thaibinhweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 28 Jun 2019 00:26:05 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: orPapKez3DQzc23UgHVDuHOXBsYzJB.c\r\nserver: AmazonS3\r\netag: W/\"508681d436b6b42ca2fe4f037d575129\"\r\nvary: accept-encoding\r\nx-amz-cf-pop: MXP63-P4\r\nx-amz-cf-id: dnU3E4bAMR1FLBFIZwSrsa6KdAu4oNeiN2699oNWx8h7zIQCCU3zuA==\r\ncontent-length: 977\r\ncache-control: max-age=595027\r\nexpires: Sun, 26 Jul 2026 12:24:17 GMT\r\ndate: Sun, 19 Jul 2026 15:07:10 GMT\r\nstrict-transport-security: max-age=15768000\r\naccess-control-request-method: POST,GET,PUT,DELETE\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2063,"size_decoded":1784,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"508681d436b6b42ca2fe4f037d575129","sha1":"78a4d0e58d49cfce4ed992dcd7265548c1fa7814","sha256":"628de643d113e225cf4347ed2571ee813cb0919a3895d1902ee18e6f63d539f1","sha512":"df7c1e9e92eb80149dbe18c26674e4b08db8ab56329d901d48bd22ad20ae20aa5877549968878c4181690836f15513ba3b2880c6c3fc8365690324f15dcc7737","ssdeep":"","tlshash":"6541ba2d4600d2fcaae68eacfe1a15a5958d928ad1c6d3918329c1b1e1d30dcf68ec84","first_seen":"2023-05-05T00:40:48Z","last_seen":"2026-07-20T03:21:49.013513Z","times_seen":105,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecm.capitalone.com/CI_Common/assets/images/footer/equal_housing_lender.svg","fqdn":"ecm.capitalone.com","domain":"capitalone.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","date":"2026-07-19T15:07:10.598Z","timestamp":1784473630598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ecm.capitalone.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 06 Jan 2026 00:00:00 GMT","end":"Tue, 05 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"99:22:F6:23:30:B5:E5:BF:C1:63:60:FC:0D:A4:56:0C:24:22:67:36","sha256":"4C:28:BA:95:21:CE:FE:56:76:79:70:D3:80:15:BE:6C:D4:C1:E4:D2:D4:36:45:E7:0D:16:FF:C7:EF:83:0B:4A"}}},"request":{"raw":"GET /CI_Common/assets/images/footer/equal_housing_lender.svg HTTP/1.1\r\nHost: ecm.capitalone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baocaocongviec.thaibinhweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-length: 3739\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 14 Sep 2021 15:49:17 GMT\r\netag: \"0a9caf42835ab4b61876bddec69ce0de\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XG4pMShX73zW4T_TRLuyNSZfIW5svUU8\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: MXP63-P7\r\nx-amz-cf-id: 99HPeUSMcMSAI-vwFacobJbAy8xe2ptKPNf9cPYRPMnHnVwT-bfyGA==\r\ncache-control: max-age=1683299\r\nexpires: Sat, 08 Aug 2026 02:42:09 GMT\r\ndate: Sun, 19 Jul 2026 15:07:10 GMT\r\nstrict-transport-security: max-age=15768000\r\naccess-control-request-method: POST,GET,PUT,DELETE\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3739,"size_decoded":4556,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a9caf42835ab4b61876bddec69ce0de","sha1":"d30fd829250e6439b36ddd5e1b2354a52f309a4e","sha256":"6043dfa194d29e8e22dc4aeed56d87b6a9a7623b97c3334592031570f4281d89","sha512":"3cc1d1a0a65ad9164a1a5938040324d27a622a4f07e297d2a666f1614d8012b8e015808c5c8882139cae821a7155308971e873218e908e4e62ca5f33ccff4ea0","ssdeep":"","tlshash":"237152c54320d7ad8ae9d4afbf35e8e83579a0dda5b1d1c6879f93404c4bcd97308612","first_seen":"2023-05-05T00:40:48Z","last_seen":"2026-07-20T03:21:49.014085Z","times_seen":102,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verified.capitalone.com/auth/favicon.ico","fqdn":"verified.capitalone.com","domain":"capitalone.com","tld":"com"},"ip":{"addr":"13.249.8.49","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baocaocongviec.thaibinhweb.com/temp/mail.capitalone.html","date":"2026-07-19T15:07:10.706Z","timestamp":1784473630706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verified.capitalone.com","organization":""},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 02 Sep 2025 00:00:00 GMT","end":"Tue, 01 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:42:FD:45:AE:09:84:4F:AD:36:B9:D5:21:B6:BD:85:46:8D:51:DD","sha256":"8C:0A:54:64:23:8C:12:58:1A:B9:F7:31:F2:43:AB:B5:F4:FA:4F:87:09:C4:EE:91:02:6C:33:EB:5A:0A:F0:CF"}}},"request":{"raw":"GET /auth/favicon.ico HTTP/1.1\r\nHost: verified.capitalone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baocaocongviec.thaibinhweb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 15086\r\nlast-modified: Thu, 09 Jul 2026 03:30:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: qRFAf9qKHHyGPhs7da8mxnt_wLTzsg_t\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 daf01c71790f42e645ae4024c607941e.cloudfront.net (CloudFront), 1.1 61fc49e1e80578044a885d20767ef3da.cloudfront.net (CloudFront)\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31622400; includeSubDomains\r\ndate: Sun, 19 Jul 2026 15:07:10 GMT\r\netag: \"d27e1739c7477b10ec6917546ae61f1d\"\r\nage: 7\r\nvary: Accept-Encoding,Origin, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: FRA56-P12, ARN53-P3\r\nx-amz-cf-id: oyRwriqesrTmJTVeYy_TTUL0IDWfbpdDVMceYeqe-QuSo9X__Azr0A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":15960,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"d27e1739c7477b10ec6917546ae61f1d","sha1":"bb36ab8bce726ce72a2d74a8529526bca0fa515d","sha256":"5f2123af80970c0478de7f373c9d861d886e070592ebcd55fa372d8dfc9752ec","sha512":"f8905a386f0d492e37d086fefd9e0eca1ef915551242554b70803f3fe89d4d7173565820f391f14f392d71861c8c43f3f8ecb4c5569491db9a2006f80bd0f64d","ssdeep":"96:WnvwwlPwSVOJilFV9HNya8arOd9e9DAthhrXTF14/sKFVNe4WiInwjr:Mf9DNF2e9DALhrjFeUmNlWz4","tlshash":"2e6262a362824eb4d8671530e9569b2dc272efea8df4fd042d387a2b4b352c5500b7c1","first_seen":"2023-04-18T09:27:51Z","last_seen":"2026-07-20T03:21:49.012092Z","times_seen":708,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":36,"connect":8,"send":0,"wait":37,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}