{"report_id":"721fff93-4a15-45f0-87a0-595329b37504","version":6,"status":"done","tags":[],"date":"2026-04-03T21:51:16Z","url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":0,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"title":"Member Account Login | USAA","dom":{"size":16683,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2794)","md5":"9b24a81e109dce65a27f9b2c5767be3e","sha1":"4ba217495681761706b049461aa618ff251afddf","sha256":"f3f8d8526574f6aeae4c8062a99d252e7faa4566e71daf6cd98549968289bf5b","sha512":"99660f6a495c1b4e16f4a9697e39616199cd38338008b8d8e046b588ad8de7385129d0138ceabe2b4c7f3453a48a1f40b40c0c9f6ed692503737fbe07a5e5560","ssdeep":"384:ToD3y0g09aWECcXBnRIijMc6W3mfibkxIj2/MxKpCI88b8re2kzV99/X/YcANn2h:MDi0g0sWCp9Wbf","tlshash":"9c72d662410c6dbb140386eab5e96f1a304f8dbade52c069f2f717e40bebcd4dd16129","dom_hash":"domhashb52125226c01976aa0b3e0fbfea3fd55","first_seen":"2026-03-10T23:21:42.05633Z","last_seen":"2026-04-03T21:51:18.209382Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":0,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-08T21:51:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tongdaicuuho119.vn","ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-10T12:58:46.34159Z","last_seen":"2026-04-03T21:51:01.752386Z","alert_count":30,"request_count":10,"received_data":1162339,"sent_data":6446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":1,"received_data":96808,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-19T00:02:19.427152Z","times_seen":56330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a9c0ea9cbe00811478fe5786dcd2373","sha1":"1f17fc5b217786f9e6e305f2f37ddd0150e3319b","sha256":"a65683756582b3ba411032f507ea8d7c69485491115437fe5548b93b4ac4c2ce","sha512":"123af934940a514dadee7633011a0b8d4c3c1bd6fb2c46a85ecd868e9323cd0b3eee4f625a07443667f0823a805067b70cf18fcf06eb09dc51ae899c2638d6ed","ssdeep":"","tlshash":"d1118c82df4c30478027b238682a65de80dea67688444caa3cb6970559e187d57b9578","size":888,"data":"","first_seen":"2023-03-10T18:25:55Z","last_seen":"2026-04-03T21:51:18.220394Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/js/ent-unified-logon-web.e63f19f998f87f5ec5b6.js","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f2ae3cba049320ba0f251c4a0988a74","sha1":"fa8d96e4ac429f8ed6859be2d8af5bf48489f45b","sha256":"0d9dbf5dc1144f19f565030d7cb4594fed352546eac7af8ccc9cc5a34057215a","sha512":"2ed9a9eaf573ad6db29fd972d22b9aa823f71c328578fa1ca8b2e40936a3dd377abcb0e73b00290da4f217c6bab012b3879049b9da111ce8be7649889b5d1d0c","ssdeep":"6144:/AlLqON5Mvd6vQTZAYEZom8PVBeXhEenB68AzUd3FrCdJof99ua3gTI4:/AlYesPihEenBWzUD3gTI4","tlshash":"9115e6cd76e1f0a207e331b5403f150bf37a6968a85d9080e265d8e4bcb959e9237f2d","size":914697,"data":"","first_seen":"2023-12-02T13:31:21Z","last_seen":"2026-04-03T21:51:18.212931Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcb04fbe0103b1b9bbf464c4bf09d64f","sha1":"c7d1671759e4687039aec9867b12bb24afcfc2f5","sha256":"0c6b76b46fd68e7ba5a6760262cd141f527c3d9b4a506ac8fb82b96ebf9c68ef","sha512":"629e8592c652336a9aaf7a391ef47215d8ea500df64a066821ea3fd8480c594ffe1e714e6699e72649f2add5a04c276959c0878007e8b8df12df73a90210b293","ssdeep":"","tlshash":"eaf0e2d8d78cea2309bb31f14d6e11de123da470488748bbfeedb6c16c8722d4611c18","size":529,"data":"","first_seen":"2026-03-10T23:21:42.074511Z","last_seen":"2026-04-03T21:51:18.221074Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T21:50:53.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:54 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 25 Jul 2025 07:45:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6883360e-428b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17035,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2794), with CRLF line terminators","md5":"6f0b63ca34cd85bf6008112c9f42cfa0","sha1":"73700eb4fd00639db13db0de4e0dfffcd60b3976","sha256":"2d18afb73286ed7ab8268863171a0e01b361899de7389432334e8ea6e814d751","sha512":"e383f73fe64fb7d6762a38477a8f7d2cae8dba64c0db6b1c7fe5d872088b7f79cb0e49e507adf30c16f045e4002de5aef3ccbb06864f642cc427dc51e6b1ba38","ssdeep":"384:va0t4M09aWECc4KDB4Z3TMcrzgHmfig5WPgz4YWfeC9Iw8b3I435fSY/a0/55dDU:C0OM0sWCtIIP0TV+","tlshash":"1772a262310ca5bb050386eba5f96f19704fcdb9cb928069f2f427f706ebcd49d16129","first_seen":"2026-03-10T23:21:42.065788Z","last_seen":"2026-04-03T21:51:18.210665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1173,"timings":{"blocked":468,"dns":1,"connect":225,"send":0,"wait":236,"receive":0,"ssl":240},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64f13a8e-1a057\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106583,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37768)","md5":"d6eb77ffee6d01fe301078831a4e4f78","sha1":"0526bc070ea356d7ab38d8c473d7eb5579da240d","sha256":"df07849713be184d71b4606f9ddada2c5ad56b475a562ce689c3b580872cba54","sha512":"6b7036f9c19269ab098e53dd156a1e47e29392119e9a484bfde3145d347c6915c088d63e3667ae2c4fab9b96db8bc2d2a01e759fdf52f5083c53636f8ff1ef3d","ssdeep":"3072:DTO8ipJmVLhszEr1vexxC4W3oqJH9oKnwKMBNETNvuQsjNHG9XaIW9mY/Rb6w1w8:DTO8ipJmVLhszEr1vexxC4W3oqJH9oKK","tlshash":"82a3d923961035a56e6bf45de4c13b787b308172ec2241aff71754df8af66a9c623b08","first_seen":"2023-11-21T02:58:16Z","last_seen":"2026-04-03T21:51:18.21149Z","times_seen":29,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/js/ent-unified-logon-web.e63f19f998f87f5ec5b6.js","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/js/ent-unified-logon-web.e63f19f998f87f5ec5b6.js HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:54 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64f13a8e-df509\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":914697,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65436)","md5":"5f2ae3cba049320ba0f251c4a0988a74","sha1":"fa8d96e4ac429f8ed6859be2d8af5bf48489f45b","sha256":"0d9dbf5dc1144f19f565030d7cb4594fed352546eac7af8ccc9cc5a34057215a","sha512":"2ed9a9eaf573ad6db29fd972d22b9aa823f71c328578fa1ca8b2e40936a3dd377abcb0e73b00290da4f217c6bab012b3879049b9da111ce8be7649889b5d1d0c","ssdeep":"6144:/AlLqON5Mvd6vQTZAYEZom8PVBeXhEenB68AzUd3FrCdJof99ua3gTI4:/AlYesPihEenBWzUD3gTI4","tlshash":"9115e6cd76e1f0a207e331b5403f150bf37a6968a85d9080e265d8e4bcb959e9237f2d","first_seen":"2023-12-02T13:31:21Z","last_seen":"2026-04-03T21:51:18.212931Z","times_seen":18,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/E83D71A074DF776F4.woff2","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/E83D71A074DF776F4.woff2 HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21772\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\netag: \"64f13a8e-550c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21772,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21772, version 1.19726","md5":"44b3494f8911fb677721629bb389f472","sha1":"bc7a73021fea8900614b3645113b03c582067928","sha256":"008889d286feafdf1773721c82309aeef1573bc92096f12e43674ddaae27b1c6","sha512":"1429b04711f2795615fdaf9fae7c63c471dbb6e460563aef8cdf714f2da437add79acffb8bd2a133a383bcce0c09277571abf4d735480de7b6a7aa613acce1a9","ssdeep":"384:x+MgEbej6YQUSyVmcbkU2PAd6aW/dPbgwieNtQF6fHFO3woNcY+n4FTTfPVRgyrZ:x+MxeXVmwkU2Pu6rP8t+tOQFO3H+nyT5","tlshash":"7ba2e14e06b92dacd2d5ed9e6c12472c0204cea7dd25bfb3341456cfe624c8f0d51eaa","first_seen":"2023-07-22T04:52:38Z","last_seen":"2026-08-15T09:38:47.966668Z","times_seen":223,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/favicon.ico","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:55.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1192\r\nx-powered-by: PHP/7.4.30\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2674,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9916bebb72561213cbda9fd36d44e443","sha1":"f66cce71c29d1f2ee450bccf4981fa6db704c7d0","sha256":"72284cae51507385d6203c577f0d8ee776984314bef0945193332d784ef0fd48","sha512":"bbe197cd745fe84a242eb6305c67376883a57946b8ba7a2aa639fe42f9f77562ca8628f7b3d208a6b5bbe198a21aa7a8cd24c400262687eaf763f574dc93babb","ssdeep":"","tlshash":"04510d26bb4c100f63168c947935f3e2660f513285080efbbda09538dfc52785ebabac","first_seen":"2025-10-10T03:46:56.024122Z","last_seen":"2026-07-27T18:03:06.873583Z","times_seen":36,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/1.11.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 21:50:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29910\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-1762a\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 356907\r\nexpires: Wed, 24 Mar 2027 21:50:54 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kxsur2yv0E5UiQ%2F3SdRsIb6NLzgKLGq%2FcNo0KZB%2BHUJlww9mqQpxQRZOEMzRp6%2B0hejgq98iUSH%2FAbHt5%2B7NteKKwOWvmDbo%2FULp1jNJm50KBT8KhUNuXtaZVtvw91LNL2SlFfwm\"}]}\r\ncf-ray: 9e6b4aa7a9c449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-19T00:02:19.427152Z","times_seen":56330,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":5,"dns":0,"connect":1,"send":0,"wait":7,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/9C7F15704715916A9.woff2","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/9C7F15704715916A9.woff2 HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14912\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\netag: \"64f13a8e-3a40\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14912,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 14912, version 1.13173","md5":"4016bf4a6f8a2d89febf43d4ffe0ff99","sha1":"0423953f1962d1c157a9786fe613fd2615693b0f","sha256":"9ea54106530de63a9c33d3eb5a43d7dd0051c1e876ee8be5b49b73601eb10f1b","sha512":"f9ac3dca0f27114899a5769d7f479e5efe202ffc08d63185728c1199b934e80dca1be4654af2522a6e671cd3894aeabab2544e18f498a4f8fbc837eb2bcf394f","ssdeep":"384:nrLV4pW6KEbN7jb+MJ+H3lc87LKBR12p0aTd7m9tR:rLyppKExjb+g+Xl9urZImvR","tlshash":"e562c12e59cd11f2cca46cfde618fba1089cc6e3ba359158405d4936509735e7c1b177","first_seen":"2023-08-30T01:47:39Z","last_seen":"2026-06-23T23:26:57.171068Z","times_seen":118,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":631,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/F68DD4439278D0467.woff2","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/F68DD4439278D0467.woff2 HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22892\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\netag: \"64f13a8e-596c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22892,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22892, version 1.19726","md5":"890566a4fd4453d50c19ab3c37ddf1dc","sha1":"f2a9afc95e99600061027305ef229f1d8802713d","sha256":"b47c74b16a02f8df070e4bd91b1b542ba2765624e8ec56a59305a91559a83682","sha512":"b83af044cacd7ae07ea0a93beb014ead789fb30ea0f7fa675f59302877e7f1ee97cb2939fb8e6b28c2fe096964b54ed5ffa996dae78668c66c5a3071735173ae","ssdeep":"384:xmiMsDxhxliZpEG9e1s9JQdN9AiSaUT8n79y+iUoap+LMIMNHszbN4jL:xmbgXxliUK9m/9Fp799oC+LMIMSXN43","tlshash":"ffa2d00e3d2925b73c49ad3db215af89d851c9a4f84c028dd2b9b737964bea2007535f","first_seen":"2023-07-02T07:28:12Z","last_seen":"2026-08-03T12:26:38.086537Z","times_seen":97,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/9ECBC8FFB535D0532.woff2","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/9ECBC8FFB535D0532.woff2 HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22088\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\netag: \"64f13a8e-5648\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22088,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22088, version 1.19726","md5":"3978a25659ccf40e136fefc4a3f1d4af","sha1":"6e8f8d356dd36e89fe2059b4bff6e58869333f68","sha256":"947dad01228bb6787ad0218540575dfafe48c76c0623fcb492b6d0b0cfc62e0b","sha512":"1787bdcb01bab90daad497d09c2b8118f5e7b6e122467d99679323a95e94a3726ad0f96227b447b9b089b75eac25eee999f8d5b8a1128a55235e4bff2f294fed","ssdeep":"384:QWhyhOiKjjrn6cnAR2R+vK79Oug02w6Rj3bHe5uoxF:Q1Kjjrnfu2RL9OujKF3bdoxF","tlshash":"42a2e1985190816aba879d66bbf03c0f95cf543874d4b133cac1c9ab71c19d9a32cab5","first_seen":"2023-06-18T12:58:51Z","last_seen":"2026-08-03T12:26:38.017191Z","times_seen":132,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/12C383965421BC56F.woff2","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/12C383965421BC56F.woff2 HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14408\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\netag: \"64f13a8e-3848\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 14408, version 1.13173","md5":"9cfc4e859f5ef4d0ab77df4f8698a7ab","sha1":"1aa7edc7b3e7da125452b7fad636ef42fb723373","sha256":"dbcf49bfa4184ed509854e05cd53df0426b5ea1856f6f4aad1f93b2d355d7e1c","sha512":"8e1ff02968c3b307c1bdaf75a848a6cd0a9b547b294997bd194805a054b31053444b0f97b6d8dc34402843197f61da94e4c56cf64ab94be4e93bffed3182a8fe","ssdeep":"384:oQ4+5PV7n0MazRuHH579hVn3HROvxKUBBbbSUO/AUicsH0:C+5PV7LyR2Z79Xn3xI7HSUO/A5k","tlshash":"9852e07e08110c5cb8f8884a7097220db8bffbb15796ab56c86231ec0f19997c697578","first_seen":"2023-09-17T13:47:55Z","last_seen":"2026-06-23T23:26:57.131767Z","times_seen":50,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/C1B705B7AD8D5B4C6.woff2","fqdn":"tongdaicuuho119.vn","domain":"tongdaicuuho119.vn","tld":"vn"},"ip":{"addr":"103.161.16.58","port":443,"asn":135967,"as":"Bach Kim Network solutions Join stock company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/session_relogin.html","date":"2026-04-03T21:50:54.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongdaicuuho119.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 16:11:55 GMT","end":"Fri, 22 May 2026 16:11:54 GMT"},"fingerprint":{"sha1":"72:A7:E1:B9:5C:9E:76:25:D4:40:DC:29:66:54:18:6A:96:04:B9:49","sha256":"9B:13:25:4C:05:0F:50:15:DE:9E:76:CA:B5:7D:73:61:3C:DE:7D:55:71:01:89:9F:B5:C2:DD:43:78:FA:90:CE"}}},"request":{"raw":"GET /wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/fonts/C1B705B7AD8D5B4C6.woff2 HTTP/1.1\r\nHost: tongdaicuuho119.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongdaicuuho119.vn/wp-admin/network/.clone_hr1MUFcW/.clone_hr1MUFcW/trgg4tyu/mozart/assets/css/ent-unified-logon-web.ce50f064965f72792379.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 21:50:55 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22828\r\nlast-modified: Fri, 01 Sep 2023 01:12:46 GMT\r\netag: \"64f13a8e-592c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22828, version 1.19726","md5":"085f40d84a8004717ea42b286d93b0e4","sha1":"d7ff2c4d9fd27ea536ab3dcd220cea2fa0076497","sha256":"8ca92c098205eebe75921badb282e0219fba6b69f74f71a06afc6e4521462ecf","sha512":"da295b28a9072a7c1d5ea4d2c71cb3afd6eff8daa7a27dfc27d10628a0de555740c1eb4fd8e969ae0b0fca4c4a87f611ab4ae2d55bcf03a39174e607143503b8","ssdeep":"384:5YScE49dwL6grKIH3Ci1+ZW7U13mJwG5lu9wV8sHmit19Gub49UX5FX3znENxq:CScEp6ACkcNmDR5Hmi39Gub49E5JD1","tlshash":"2aa2e1712a5baf262e50dc081a4dc37bb62474877af6b89cf64d430b5fdd4c75312a88","first_seen":"2023-08-30T01:47:39Z","last_seen":"2026-08-03T12:26:38.050989Z","times_seen":130,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"tongdaicuuho119.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"tongdaicuuho119.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}