{"report_id":"a2c02e57-8855-4d7d-b5f5-0b8306eb7214","version":6,"status":"done","tags":[],"date":"2026-05-17T02:48:04Z","url":{"schema":"https","addr":"duyenbt.com/public/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":0,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"title":"SELLALLMAIL.COM - Sell All Mail - Email Khôi Phục - FB Dangtuyenhuan - huadob@perfectaol.com","dom":{"size":42892,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (737)","md5":"f11f16f024a1af4c178ef8d9a4e36ce2","sha1":"b28a82ae0b00945f414ece5ec832591e77ec1c7f","sha256":"af02801fa0283a9214b67aafa7b6717796e981ae0de197609b574f5a7dac6846","sha512":"bcd6035748728e2fee04b248ae693860c5928a673d91f6c54c0fce8344b7319ca444b4416cecf0a38bf611a279759ea378b076fa2f5be2a0c95a3ea37418feb1","ssdeep":"384:tDRMuuyQ+vz+wyeVR9TkV14acQ0ccLeKwbJj7qcERcranZ8AKZjFKA+Tk9oeAsmI:1Ra+iTepwZGtTk9oz8U98n7lteWzk3M","tlshash":"b513a624a1f1106600d7806677e1b60a5dbce207e947e88efb9cc3466f86d76ec532ed","dom_hash":"domhash5a4ba9a4401df774746622d640ae0124","first_seen":"2026-05-17T02:48:29.154811Z","last_seen":"2026-05-17T02:48:29.154811Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"duyenbt.com/public/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":0,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T02:48:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-10T22:41:13.190184Z","alert_count":0,"request_count":1,"received_data":25519,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-10T22:35:57.417067Z","alert_count":0,"request_count":3,"received_data":156183,"sent_data":1590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"t.dtscout.com","ip":{"addr":"104.26.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-01","domain_rank":54823,"first_seen":"2017-01-30T04:52:42Z","last_seen":"2026-05-15T16:58:09.112294Z","alert_count":0,"request_count":2,"received_data":3711,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":2,"received_data":5254,"sent_data":930,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":3,"received_data":23907,"sent_data":1603,"comment":"","tags":null,"fingerprints":null},{"fqdn":"duyenbt.com","ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"domain_registered":"2019-07-07","domain_rank":0,"first_seen":"2026-05-16T14:15:53.922572Z","last_seen":"2026-05-16T14:15:53.922572Z","alert_count":70,"request_count":14,"received_data":582376,"sent_data":23759,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}]},{"fqdn":"cdn.quilljs.com","ip":{"addr":"172.66.43.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-27","domain_rank":205879,"first_seen":"2014-11-10T08:38:17Z","last_seen":"2026-05-15T10:37:07.167484Z","alert_count":0,"request_count":1,"received_data":25321,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"p.mrktmtrcs.net","ip":{"addr":"104.26.14.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-04","domain_rank":63178,"first_seen":"2025-05-16T05:58:44.985071Z","last_seen":"2026-05-15T16:58:08.368846Z","alert_count":0,"request_count":1,"received_data":40601,"sent_data":405,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"waust.at","ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":36042,"first_seen":"2016-01-28T18:24:33Z","last_seen":"2026-05-15T20:14:54.844772Z","alert_count":1,"request_count":1,"received_data":29108,"sent_data":397,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"a98fc228d485098cc196af9d6a979c02","sha1":"efa139d69671793cd616bc49f856c4362f4ce818","sha256":"513e1a64580d9b75951cac9abd8ce3711d8051bf710e39320a945fd24ab34c80","sha512":"bbd81e375afa54259e7d0e3dcf4c97dac6f53952e23d91868404174be4748e6bdbf65caf12f3c93a573775c59850a453468c3ce991ae8e6c6518237c4db2d288","ssdeep":"","tlshash":"6be07d1a02704d7d8d0409064e6643cd5b74115755999054fdfd8f1f1f247e1e225891","size":318,"data":"","first_seen":"2026-05-17T02:48:29.202087Z","last_seen":"2026-05-17T02:48:29.202087Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e85cefe3ffd9688d897d0dfe65fce2e1","sha1":"22cea5c3bbd147ba1e457cbe55cbfb380ce3e1a3","sha256":"799c8358b5e9fcac36cd58d53aa237ccd52f8bb4746670987ca16fa6e82078e4","sha512":"d09b2d7f2eb92981c010c11fc387496b90a101bdf54f657bef50c3711579ec34187905dc222e24df1999b4d470f0b90a19131241f6a7f8fad9021c4b8e8929bc","ssdeep":"","tlshash":"64b092ec3ce9bc0582136032bac63804f5a03822002edc12522ce630a5668a27d3904c","size":119,"data":"","first_seen":"2024-08-19T19:13:51.109408Z","last_seen":"2026-08-07T16:43:24.396446Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8ede1cc1cd26cbdedaee1bbb4369174","sha1":"144c1f2e40a49beb9d9a1684570ed669ff61c44a","sha256":"e6d87475670816b02bc726ac44d7ba9e84580b7efb2d46668ae93f8fc507250c","sha512":"d30b903279eb95ecb9837247b84a657a26ed36d9641afa74e450f19a89cfd6f4df1209ec13616e761dea989cf48f4625dc45b8d93157f117af8dbb72979d97ee","ssdeep":"","tlshash":"fca0220c8308802f00082e02083a0bc0efb0e208c3fc2200b0080f30302f20cc8820f0","size":78,"data":"","first_seen":"2026-05-16T14:15:59.991486Z","last_seen":"2026-05-17T02:48:29.205298Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=duyenbt.com\u0026_ss=1u2jxr62nl\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=6d9x\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"832a36f147fa05ea5f6187c58ffcb92e","sha1":"5827f52488eaddb38263fd771c6b9498ed60c263","sha256":"b9d9165cd86b1d0e2ee5b65dc41b468ac5dc16f7eccb9cb7adbbc6047854021d","sha512":"f2251af243fbc8986093df15c2d30e7241bf06a3cf63964354a90634a51d28dbfe7b3abf5010bfca9009669186b2fd846ac764fbbe36a1d7fe25b79bb6cf0778","ssdeep":"","tlshash":"7a90021874d1c0241ac9d78010571644417103d425c05599943155241149780965f9f8","size":52,"data":"","first_seen":"2026-05-17T02:48:29.169657Z","last_seen":"2026-05-17T02:48:29.169657Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6e3bb71217fb91d1c30ecf4efac13f4a","sha1":"553665074e0c962b7fac522e9965b72e24adc0bf","sha256":"e608c39f87682fac261b7d88d90adc139d39ea02088e1adad79112e0b0c65b5b","sha512":"2db7994fa4e62bda722c1b2b1667337883c7b576e91da40b6feea33270893302639b437ab0ee8291b59649c77cebd611e602a58997c33c8d37eb5c0428c73365","ssdeep":"","tlshash":"ebb092fc3cec980182a334267ad63c40e2a0783a016edc03652cf631652a4e23d6c44c","size":127,"data":"","first_seen":"2023-07-11T12:18:59Z","last_seen":"2026-08-07T16:43:24.394723Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"b368727f69c6d939ef637e2f28820c50","sha1":"14899e44c84f58fb0351c51f3508b7786fb553ba","sha256":"715b7096703635f7cad3d100e6b691fdb45b09cd344f3064ef17f67e6299742c","sha512":"eaad252d6a93a9ea2d3cd358145d866a6809e680bf15ecbc3309dc05522c498a51a22b4a27d656b4e26fcf4428bceda51e574f8617554e586350c73bba69a34e","ssdeep":"","tlshash":"b4b092fd3cec9818826328237ac63c00e2b07826012edc03a12cf6b4652a4e2bf2c45c","size":128,"data":"","first_seen":"2024-08-19T19:13:51.099378Z","last_seen":"2026-08-07T16:43:24.391144Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4fc595ea344c5ad025c56e4bc236c048","sha1":"26071e710c0fa52847fa4ed144d6533ee63caff3","sha256":"33f3a657e6e34d2096baf55d18c911d7b74bf017fd02c3203f716ade8e8a8a18","sha512":"a4e05d22e5953849d48b55b49948ac034c7bb8e07359bcb2aa0ed272a024ef7284089f11f6e3d32c11d6e1b997f073d1ea073d0bd00be4d74d7a48d3c20ae0fe","ssdeep":"","tlshash":"d7b092fc7ced980082632522bac63c00e2a07826103edc02622cf670692b4e23d2c48c","size":124,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.39042Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4fc595ea344c5ad025c56e4bc236c048","sha1":"26071e710c0fa52847fa4ed144d6533ee63caff3","sha256":"33f3a657e6e34d2096baf55d18c911d7b74bf017fd02c3203f716ade8e8a8a18","sha512":"a4e05d22e5953849d48b55b49948ac034c7bb8e07359bcb2aa0ed272a024ef7284089f11f6e3d32c11d6e1b997f073d1ea073d0bd00be4d74d7a48d3c20ae0fe","ssdeep":"","tlshash":"d7b092fc7ced980082632522bac63c00e2a07826103edc02622cf670692b4e23d2c48c","size":124,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.39042Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/t.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9f76398f3d3cd462401e37a6ab730a0","sha1":"305957a23320b19a1190021f9cb1f29a00858d66","sha256":"08a80c05c094cf4ef235e4dba5b887880f66c354a9ab199c0316b595b1fc6f58","sha512":"961d7ed19cb57c5e7968f20fda6ae482681ae7259b3e09b3ce4bd14e88cc6485e32a3ef6589dd833d4961922c64bbe8c1d87745d05f0e4d7ac28d32389cc4fef","ssdeep":"768:3944ugm06KOdfOIahfQdrSByoZCdmKOGG0x7+Ipd:3G4E0nOdWB4dOBDCd3OGlNpd","tlshash":"2dd2bf19059b1c9a977fa481617f930af031819febc281862834c4fc7aa8d1b917ffb5","size":28357,"data":"","first_seen":"2025-11-29T09:15:50.674714Z","last_seen":"2026-07-21T03:02:14.746246Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/livewire/livewire.js?id=de3fca26689cb5a39af4","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfeedac491be74aad041dfb839520d71","sha1":"98027368c29ef04587084aed2cbefd5c63c0b84d","sha256":"9352f0a33abaffc3392bc6340621411d499488b76515da0d3b99b3bfa91a6118","sha512":"87de40d373457b6021563ea99a23f2ace8dd1bf041f88be828ff929cb6a8ebe247aa823c814b8a0d6f45806041dea280c3bd2ad7c38be70ceef421dab7c36f89","ssdeep":"1536:bFWbBs025VQpotIfUoeR9g6qptWuPkbEFVnBqlsEGuIHIYMx0suDbk/5UK0t6fZT:5KyLBtuU4DptVZ82uIHIYhvt6FEOyuT","tlshash":"11f33a99b6c1f1b209c77164643f3a0fb2762054589d9090fa79cec07eba948522bf7f","size":159350,"data":"","first_seen":"2023-03-12T19:07:48Z","last_seen":"2026-08-07T16:43:24.359146Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"197a3e2b06dc60a37f03268f1516783e","sha1":"dc3ca89202789b44ca87f8cf823af7e74ed60530","sha256":"476c66f39e4dd6a36817f848005a40d2afe9563af903802e2d6daf00e25f7be4","sha512":"9a89356f1f4c98cce4f346a3335cdd0c814325a89028ab38c8bd6d32fc3f7409798b22d37a3afa2f1eba37d90f74636b24a7e6941c5ff30ab8211c3000f550f9","ssdeep":"","tlshash":"9ff0f02a4ac6fab4ad36b0d6e38fb30828f634d508c35024c43c93597ca043bc7a58c7","size":539,"data":"","first_seen":"2026-05-17T02:48:29.211866Z","last_seen":"2026-05-17T02:48:29.211866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"939b42e37b4c9b0626b2b9bcfcedf6df","sha1":"a90ec38168dc712df901a96738d6050ae2fa991f","sha256":"98403a9ba41c9701039f58f847a75089c7f07cbe70f8d57fb06e08d336bf908a","sha512":"a6f1489f4dbbf7736c8800fbebc39b0ca0e9b587c046de29391d87c0c4e2bb08b1b6aa7360213afb26be099828e8fc40030999700d70f20fa208c33afc2d5797","ssdeep":"","tlshash":"ecb092fd3dec9804836b24267ac63c40e2a0782a026edc02613cf731652a4e23d2c44c","size":126,"data":"","first_seen":"2023-07-11T12:18:59Z","last_seen":"2026-08-07T16:43:24.387346Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4fc595ea344c5ad025c56e4bc236c048","sha1":"26071e710c0fa52847fa4ed144d6533ee63caff3","sha256":"33f3a657e6e34d2096baf55d18c911d7b74bf017fd02c3203f716ade8e8a8a18","sha512":"a4e05d22e5953849d48b55b49948ac034c7bb8e07359bcb2aa0ed272a024ef7284089f11f6e3d32c11d6e1b997f073d1ea073d0bd00be4d74d7a48d3c20ae0fe","ssdeep":"","tlshash":"d7b092fc7ced980082632522bac63c00e2a07826103edc02622cf670692b4e23d2c48c","size":124,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.39042Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"3532c0406bce922d00ab8391c1250ebf","sha1":"a6e52d23f454b927c05610099522f7e4afddabd1","sha256":"f10113cfc28081c26b074c71597a548c22d4e918e1141f489f213180735a41b6","sha512":"18f30d142ab36f1fe674f149574f07d4fc2e325c21b1569b5fd9a63bc2455e7a5f38c5da711bd7425ca84ca4da24ec5992cd89be42b18603fd524926c9c31a1c","ssdeep":"","tlshash":"dab092ec7ce8a859921721367ac97814f0b03822003edc47926ce67079228f23c2c48c","size":125,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.389619Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"b368727f69c6d939ef637e2f28820c50","sha1":"14899e44c84f58fb0351c51f3508b7786fb553ba","sha256":"715b7096703635f7cad3d100e6b691fdb45b09cd344f3064ef17f67e6299742c","sha512":"eaad252d6a93a9ea2d3cd358145d866a6809e680bf15ecbc3309dc05522c498a51a22b4a27d656b4e26fcf4428bceda51e574f8617554e586350c73bba69a34e","ssdeep":"","tlshash":"b4b092fd3cec9818826328237ac63c00e2b07826012edc03a12cf6b4652a4e2bf2c45c","size":128,"data":"","first_seen":"2024-08-19T19:13:51.099378Z","last_seen":"2026-08-07T16:43:24.391144Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4fc595ea344c5ad025c56e4bc236c048","sha1":"26071e710c0fa52847fa4ed144d6533ee63caff3","sha256":"33f3a657e6e34d2096baf55d18c911d7b74bf017fd02c3203f716ade8e8a8a18","sha512":"a4e05d22e5953849d48b55b49948ac034c7bb8e07359bcb2aa0ed272a024ef7284089f11f6e3d32c11d6e1b997f073d1ea073d0bd00be4d74d7a48d3c20ae0fe","ssdeep":"","tlshash":"d7b092fc7ced980082632522bac63c00e2a07826103edc02622cf670692b4e23d2c48c","size":124,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.39042Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4fc595ea344c5ad025c56e4bc236c048","sha1":"26071e710c0fa52847fa4ed144d6533ee63caff3","sha256":"33f3a657e6e34d2096baf55d18c911d7b74bf017fd02c3203f716ade8e8a8a18","sha512":"a4e05d22e5953849d48b55b49948ac034c7bb8e07359bcb2aa0ed272a024ef7284089f11f6e3d32c11d6e1b997f073d1ea073d0bd00be4d74d7a48d3c20ae0fe","ssdeep":"","tlshash":"d7b092fc7ced980082632522bac63c00e2a07826103edc02622cf670692b4e23d2c48c","size":124,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.39042Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e120262c3c007d52bd564b2bc083672","sha1":"d1bbe43fe7031a9c6df48580d77e8f5b6ff20e30","sha256":"6db8c6d135b4fd57a8f5e9efba838e298cf89c828a8a2ade632dc7f9b950d188","sha512":"b4d61ee3b0b5dfe7d7d11ea44b21179515abdbb29698e200f5b6f29538d7d3560080a79bbd41c2f0e2d88dec5cb859c468e80a23ad5ac949b02ce4226f20d2ad","ssdeep":"","tlshash":"11e0263412b274e04262e0103fdb63c120a1101b69d0e64ebf4c458d4f8ca90e590798","size":374,"data":"","first_seen":"2026-05-17T02:48:29.216915Z","last_seen":"2026-05-17T02:48:29.216915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"964d332c8e1b73c24821af9345836146","sha1":"695324b8302c13b7fe523469e0ddaae4f3bc5af0","sha256":"518faa964c2b56a7c49c29c4cdbd1f98a9982831b724cfbad18fa3e7a3b0c058","sha512":"7eed37ba9777ccf549cef83f08070b81a19b5879a3fcefea431d5099be01af26eccf99d184f92774068bb1ef6760522f9033933c85742f47bbba755119c2fd46","ssdeep":"","tlshash":"97f0591f22e348381da395ab766fd7c93921c4030055d9093f6c85443f81fa8d3b0b94","size":625,"data":"","first_seen":"2023-03-07T17:56:27Z","last_seen":"2026-05-17T02:48:29.218442Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"939b42e37b4c9b0626b2b9bcfcedf6df","sha1":"a90ec38168dc712df901a96738d6050ae2fa991f","sha256":"98403a9ba41c9701039f58f847a75089c7f07cbe70f8d57fb06e08d336bf908a","sha512":"a6f1489f4dbbf7736c8800fbebc39b0ca0e9b587c046de29391d87c0c4e2bb08b1b6aa7360213afb26be099828e8fc40030999700d70f20fa208c33afc2d5797","ssdeep":"","tlshash":"ecb092fd3dec9804836b24267ac63c40e2a0782a026edc02613cf731652a4e23d2c44c","size":126,"data":"","first_seen":"2023-07-11T12:18:59Z","last_seen":"2026-08-07T16:43:24.387346Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"b368727f69c6d939ef637e2f28820c50","sha1":"14899e44c84f58fb0351c51f3508b7786fb553ba","sha256":"715b7096703635f7cad3d100e6b691fdb45b09cd344f3064ef17f67e6299742c","sha512":"eaad252d6a93a9ea2d3cd358145d866a6809e680bf15ecbc3309dc05522c498a51a22b4a27d656b4e26fcf4428bceda51e574f8617554e586350c73bba69a34e","ssdeep":"","tlshash":"b4b092fd3cec9818826328237ac63c00e2b07826012edc03a12cf6b4652a4e2bf2c45c","size":128,"data":"","first_seen":"2024-08-19T19:13:51.099378Z","last_seen":"2026-08-07T16:43:24.391144Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"3532c0406bce922d00ab8391c1250ebf","sha1":"a6e52d23f454b927c05610099522f7e4afddabd1","sha256":"f10113cfc28081c26b074c71597a548c22d4e918e1141f489f213180735a41b6","sha512":"18f30d142ab36f1fe674f149574f07d4fc2e325c21b1569b5fd9a63bc2455e7a5f38c5da711bd7425ca84ca4da24ec5992cd89be42b18603fd524926c9c31a1c","ssdeep":"","tlshash":"dab092ec7ce8a859921721367ac97814f0b03822003edc47926ce67079228f23c2c48c","size":125,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.389619Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"3532c0406bce922d00ab8391c1250ebf","sha1":"a6e52d23f454b927c05610099522f7e4afddabd1","sha256":"f10113cfc28081c26b074c71597a548c22d4e918e1141f489f213180735a41b6","sha512":"18f30d142ab36f1fe674f149574f07d4fc2e325c21b1569b5fd9a63bc2455e7a5f38c5da711bd7425ca84ca4da24ec5992cd89be42b18603fd524926c9c31a1c","ssdeep":"","tlshash":"dab092ec7ce8a859921721367ac97814f0b03822003edc47926ce67079228f23c2c48c","size":125,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.389619Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4fc595ea344c5ad025c56e4bc236c048","sha1":"26071e710c0fa52847fa4ed144d6533ee63caff3","sha256":"33f3a657e6e34d2096baf55d18c911d7b74bf017fd02c3203f716ade8e8a8a18","sha512":"a4e05d22e5953849d48b55b49948ac034c7bb8e07359bcb2aa0ed272a024ef7284089f11f6e3d32c11d6e1b997f073d1ea073d0bd00be4d74d7a48d3c20ae0fe","ssdeep":"","tlshash":"d7b092fc7ced980082632522bac63c00e2a07826103edc02622cf670692b4e23d2c48c","size":124,"data":"","first_seen":"2023-04-16T04:13:46Z","last_seen":"2026-08-07T16:43:24.39042Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"451c1d03baea3f6539b762f75917e7c8","sha1":"a3f1eea49a57c83854e1fcc37db2e4ef1fbc2f83","sha256":"7ba050f317e0a8d2a90d7951c99c066d40fa3f8abaa39df1d09f82a52a8bceff","sha512":"aab4984535f44397582d1d9415fe1f6fbe1538fe6aa529d0f33d86f48473f56e3aade277d75deb389b6502085d7a235954b5a09b187016c08716fcb2743aa25b","ssdeep":"","tlshash":"80119b7112b32c74008f81765e34c385fc606027c14b5485b97d0b0c3f42e11d68b3f6","size":1058,"data":"","first_seen":"2026-05-16T14:15:59.996546Z","last_seen":"2026-05-17T02:48:29.219796Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/js/app.js","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4994274113a5390ff8878204c2f57b04","sha1":"4d2736ce5cd4d6a71a1afcb4fdcde3b371c43a5f","sha256":"0b1a003f27003e7d54667c7388be9e340e78303c6b88871a93e38224b16cc577","sha512":"c4f23ad1b92cf827b1647c6c387626a6dbe4e2411c22b1074647c40dadc84e766e15e575a726b73a97404d6ba2fbdb9d3f6feeda702d84489c4b660529536b27","ssdeep":"1536:hImrq1EzBVr3APBjClFErsnDK0mF9bx5DNddGFaK9Gzh7QtFHnG/zuAzHxN2mUG:SeLrUOrkugzhstFHG/aEHN","tlshash":"3dc3c4d9b692f03143a720b500bf410bf23ead54784e8584f264e8d97d79a4ea1b7f39","size":127733,"data":"","first_seen":"2023-08-07T01:04:59Z","last_seen":"2026-05-17T02:48:29.194014Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"b368727f69c6d939ef637e2f28820c50","sha1":"14899e44c84f58fb0351c51f3508b7786fb553ba","sha256":"715b7096703635f7cad3d100e6b691fdb45b09cd344f3064ef17f67e6299742c","sha512":"eaad252d6a93a9ea2d3cd358145d866a6809e680bf15ecbc3309dc05522c498a51a22b4a27d656b4e26fcf4428bceda51e574f8617554e586350c73bba69a34e","ssdeep":"","tlshash":"b4b092fd3cec9818826328237ac63c00e2b07826012edc03a12cf6b4652a4e2bf2c45c","size":128,"data":"","first_seen":"2024-08-19T19:13:51.099378Z","last_seen":"2026-08-07T16:43:24.391144Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f8088ed39d9f8bf682ed7587c9f70c8","sha1":"63c6a0ec67b71295a6b2c487c3e323d14a2e997b","sha256":"27197cbe23018a0a8415aac991f7a0ff21039bbe58a073d7eb2109dfd232d029","sha512":"751d5b3d5409b6a81cf0659835a245ea195dd4e0f74058d02dd86709229ee97ace53f8f9f90bebf8eb39a60afb25765a56ffef208108472f2df5e4aa46e9505e","ssdeep":"","tlshash":"86311d1ab3777062e06f431463a7924c3744420fc304e2487b7e63a74f08a35a5f29ad","size":1632,"data":"","first_seen":"2026-05-16T14:15:59.997433Z","last_seen":"2026-05-17T02:48:29.220562Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"8c5bd5ce9d4f991ee3ff5f0971132e21","sha1":"03e2862aa1fbd35886145beea92dffb3c2491989","sha256":"d3a28ee44838f4eb421959e6a75978068c9a7ef74b97c573c57814e85976b591","sha512":"bb04e4828a7ade305da08c90df322bd18fab880fc1f98cf6d88c81417e924d335a571790f05c88fb791d81d59e3d7537639d989b5afe348c5fed35b2771d44b1","ssdeep":"","tlshash":"44b048ed3ce8a8299213202a6ac57804e0a03866002e9c06923cf67065228a23d2848c","size":127,"data":"","first_seen":"2023-07-11T12:18:59Z","last_seen":"2026-08-07T16:43:24.393134Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c92f27e406e43d98c56b3d85ff4be4c9","sha1":"1ddbbce7a25909f6a4db1c7b82696bdf042f6a29","sha256":"0a878bcef43e9a5295445d7debdbdf6a5eb46e0b2e9b7a7b6983e13aa71a4246","sha512":"2a360a5076f34d14027e0ce9f6bf5b673c424e17126ff449b574fc0fd2be76ea61d93b732f555c2a6a5faab24f359f73dd27b9c5ce7fb0789f97011f9266dde6","ssdeep":"","tlshash":"d7218e0957a15239043764392bcbf705aa2721136886d8457f1c9688bf81e329bf0aeb","size":1366,"data":"","first_seen":"2026-05-16T14:15:59.999126Z","last_seen":"2026-05-17T02:48:29.222333Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fduyenbt.com%2Fmailbox\u0026j=\u0026wk=bb26anize4","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8450c234da2df92a0c33a47c5aabf6e6","sha1":"0ea50308805f927f1e9ce37a96d44f27e01cdf8e","sha256":"c67ad82f6fe5a742115d0d041e403c18df8da6486fa0dd5fc785d4bb58458ac9","sha512":"1ea70b0b047651af5f5496bdbfac4574dad62bef73132ad667c194c375382c36ea62c24f37a4c2882d6e644846f5b866720a8b33cad3e4e650fa6b9fa0331de8","ssdeep":"","tlshash":"1f41880bb5e5347803e2006965ff635fb5330928bc5784c08596dc04fd749fad1b6eaa","size":2292,"data":"","first_seen":"2025-11-28T22:59:20.195769Z","last_seen":"2026-08-05T10:25:07.128353Z","times_seen":3577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/vendor/Shortcode/Shortcode.js","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"13a9c793fb268b343c26ae915c4991a9","sha1":"a5a5f3401c62062d8ecd9d4484262d199b05d70f","sha256":"84746a83b7652252afda5a0e2b47c6a1c501d5705e4a191a7f668c3b8e44d662","sha512":"994f8ca414c68caf8101a6edcccfdf2a894aa2711e7830de186e937aa5312c830f7494f7dcf60d27b393ffce6980fdd63b1e29bd8f813ed08ee8e465973f1e63","ssdeep":"96:+YD+c1G8PrQ5I+u1nJl0ESlz3vVzRLjXyE7gNd7N9zSl8H3rdIdIRSpU:9D+c1GOQ5nanYESlzVztjXngNd7N9zsC","tlshash":"58a111997efb1165d12330794adf1084ba35700b281d8d64fa4c97f45fd1439a1eeeb8","size":4947,"data":"","first_seen":"2023-03-07T17:56:27Z","last_seen":"2026-08-07T16:43:24.35055Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c2b2ed1f88e9e0d7a5488fdcf6d7e99","sha1":"274c0fc0d50b59050b155571edeb3013e97ba59f","sha256":"e47622c24b623ae315ff8ad14edb06dbceded294d644eb220d90abaa1ac2931c","sha512":"26402af0513df32946c761758d4e3abe16ff1eb953efe5b07d7b4eab984851cc272c59ece8ee3903bcf18e9a03e3e5a7a43afef4c3c8ac859e6cd0dd2c41acc1","ssdeep":"","tlshash":"0441210442a2513508736139179fe6056ba7b117b686cd0d3b5d93c8af41e22abf0afa","size":2412,"data":"","first_seen":"2026-05-16T14:16:00.000011Z","last_seen":"2026-05-17T02:48:29.223252Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"939b42e37b4c9b0626b2b9bcfcedf6df","sha1":"a90ec38168dc712df901a96738d6050ae2fa991f","sha256":"98403a9ba41c9701039f58f847a75089c7f07cbe70f8d57fb06e08d336bf908a","sha512":"a6f1489f4dbbf7736c8800fbebc39b0ca0e9b587c046de29391d87c0c4e2bb08b1b6aa7360213afb26be099828e8fc40030999700d70f20fa208c33afc2d5797","ssdeep":"","tlshash":"ecb092fd3dec9804836b24267ac63c40e2a0782a026edc02613cf731652a4e23d2c44c","size":126,"data":"","first_seen":"2023-07-11T12:18:59Z","last_seen":"2026-08-07T16:43:24.387346Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6e3bb71217fb91d1c30ecf4efac13f4a","sha1":"553665074e0c962b7fac522e9965b72e24adc0bf","sha256":"e608c39f87682fac261b7d88d90adc139d39ea02088e1adad79112e0b0c65b5b","sha512":"2db7994fa4e62bda722c1b2b1667337883c7b576e91da40b6feea33270893302639b437ab0ee8291b59649c77cebd611e602a58997c33c8d37eb5c0428c73365","ssdeep":"","tlshash":"ebb092fc3cec980182a334267ad63c40e2a0783a016edc03652cf631652a4e23d6c44c","size":127,"data":"","first_seen":"2023-07-11T12:18:59Z","last_seen":"2026-08-07T16:43:24.394723Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.mrktmtrcs.net/mm.js","fqdn":"p.mrktmtrcs.net","domain":"mrktmtrcs.net","tld":"net"},"ip":{"addr":"104.26.14.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67cda29c6b95cb5eb8c4960490502a19","sha1":"ac6700bfe19f0580cccf51bddf2a7310d31a833c","sha256":"6ed6986bfeafe3a3bab8174b435e96c3ca8e216c3c7941b20c3e4984087f9e0b","sha512":"c5d6bdfb04022d8f3ff82c95c1c938a3aec4246a9fefc40a2e96b12e42295fe8d578c983b399ca86493f3481b113f685d27e20e2cd19000efab176a6b7ab578f","ssdeep":"768:Iudg8MPdH/EeIO5V1gPk5Te1pCeKSreGdRY8ZqM0wTo:IHEelgvZnAVQo","tlshash":"9403192ee3a2761003abf19dd90b50003e35541bea41f8a4bdecb581ff958a512bf7b5","size":39952,"data":"","first_seen":"2025-07-17T20:43:49.34962Z","last_seen":"2026-08-05T10:25:07.103185Z","times_seen":3658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"6e3bb71217fb91d1c30ecf4efac13f4a","sha1":"553665074e0c962b7fac522e9965b72e24adc0bf","sha256":"e608c39f87682fac261b7d88d90adc139d39ea02088e1adad79112e0b0c65b5b","sha512":"2db7994fa4e62bda722c1b2b1667337883c7b576e91da40b6feea33270893302639b437ab0ee8291b59649c77cebd611e602a58997c33c8d37eb5c0428c73365","ssdeep":"","tlshash":"ebb092fc3cec980182a334267ad63c40e2a0783a016edc03652cf631652a4e23d6c44c","size":127,"data":"","first_seen":"2023-07-11T12:18:59Z","last_seen":"2026-08-07T16:43:24.394723Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/storage/js/gpt_ads-public.js","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8535c6f279a283fea671a0e607b5cb5","sha1":"fd0a1fdd48444d707d7c287f9cb090d83f50bc32","sha256":"28c908c7ffcf899d7e7daff9fe769fef004537d0d7252822e060204682d98e24","sha512":"0ca91c74f9ffe603cbd983e755e4d212f4a7e887711552f66e8900ce5cec9b43ceabe9f6d53dfbac11487f719f19aaf8313a97d048d586339efcf6156838f821","ssdeep":"","tlshash":"feb0123219214379829f098f32f8ebb9fff91550b091146481bccf1ca67ac82c517be1","size":115,"data":"","first_seen":"2023-08-07T01:04:59Z","last_seen":"2026-05-17T02:48:29.186335Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:03:53 GMT\r\nexpires: Sun, 16 May 2027 15:03:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42231\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-09T06:48:33.264572Z","times_seen":389453,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":70,"dns":6,"connect":7,"send":0,"wait":9,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:47:44 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 13548\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5f7b5b5f-34ec\"\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 185637\r\nexpires: Fri, 07 May 2027 02:47:44 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NhKWP09a3SSKtPO3OcRO8hxxUARX78Y%2BnELROCsnDYtKnOb%2BGks4mCdnFKlOle5X6UhVDySGGwT%2FSYPvieYakSkHg5VnMFcZbGW2o07SqNRy6Ct6VDUxHE0SKqe4QAao23Rz%2FEJ\"}]}\r\ncf-ray: 9fcf4c97dcb156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13548,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 13548, version 331.-31392","md5":"4a74738e7728e93c4394b8604081da62","sha1":"fb9648469530a05fa9aac80e47d4d6960472a242","sha256":"ce20ed8a323117c8a718ff1ddc6dabb997373b575a8e896f2bf02b846c082c9d","sha512":"cc1f2ea5a6321ad04ffbc43022184785acd7db636109b841694403261850744b47cb5f2b60fe4f72d717668880392f3ea477c013a90e61c66aa68fb60704790c","ssdeep":"192:MOw0hBKT6co4S2NIyI7e7biB9nnNn2AY28rvYI2k0EQTW50IBNd+N/KwWBuWAgm8:M/CgMNnN6jj4k0EQ6PNdE/KwzW2du","tlshash":"8452c1b68fa74c9cd2d33d140b5e5294f6175a8512baa22396cc82ac008bf745cdac87","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-08-09T05:18:42.931643Z","times_seen":11140,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/public/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T02:47:41.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /public/mailbox HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 17 May 2026 02:47:41 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; path=/\r\nlocation: /mailbox\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":45150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":1422,"timings":{"blocked":550,"dns":56,"connect":246,"send":0,"wait":308,"receive":8,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.quilljs.com/1.3.6/quill.snow.css","fqdn":"cdn.quilljs.com","domain":"quilljs.com","tld":"com"},"ip":{"addr":"172.66.43.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.quilljs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 11:26:00 GMT","end":"Wed, 01 Jul 2026 12:25:59 GMT"},"fingerprint":{"sha1":"7A:E2:AD:8A:79:AB:D7:C8:29:72:55:33:CB:CB:77:D9:FE:E4:BA:E4","sha256":"2D:4B:7F:E6:9E:52:BC:AD:0C:DC:AB:2B:C6:19:C9:78:06:CF:DD:5B:30:E9:38:A8:E8:4C:18:73:43:F8:8F:FC"}}},"request":{"raw":"GET /1.3.6/quill.snow.css HTTP/1.1\r\nHost: cdn.quilljs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 17 May 2026 02:47:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://cdn.jsdelivr.net/npm/quill@1.3.6/dist/quill.snow.css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qURvyhtSMOtG%2F8rcm2cQShYHVixWaJKCfSIm%2FM%2F2ruYvuqCnuAJpHd8SNlv1rIExvdLKuKdZ%2BUdU7V3mVNbdBviVJWfAdHmbbDU5X6lQqkpqzSEm0KvBqnR01LmGjRYf1w%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fcf4c8defc71525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24743,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":76,"dns":38,"connect":1,"send":0,"wait":5,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/livewire/message/frontend.app","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"POST /livewire/message/frontend.app HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, application/xhtml+xml\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duyenbt.com/mailbox\r\nContent-Type: application/json\r\nX-Livewire: true\r\nX-CSRF-TOKEN: zbuqECrd91sZSBf2w1j3UAYJhenHb62LhOJXSSzp\r\nContent-Length: 564\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":564,"data":"{\"fingerprint\":{\"id\":\"9S3RFbCIHtTn6La7hPHZ\",\"name\":\"frontend.app\",\"locale\":\"en\",\"path\":\"mailbox\",\"method\":\"GET\",\"v\":\"acj\"},\"serverMemo\":{\"children\":[],\"errors\":[],\"htmlHash\":\"73cc107e\",\"data\":{\"messages\":[],\"deleted\":[],\"error\":\"\",\"email\":null,\"initial\":false,\"overflow\":false},\"dataMeta\":[],\"checksum\":\"99a42664a3c5033cf5a3b3f9fd49b4f703de3851c00e007bdb0c6cd747384996\"},\"updates\":[{\"type\":\"fireEvent\",\"payload\":{\"id\":\"nma2\",\"event\":\"syncEmail\",\"params\":[\"huadob@perfectaol.com\"]}},{\"type\":\"fireEvent\",\"payload\":{\"id\":\"o8qw\",\"event\":\"fetchMessages\",\"params\":[]}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:44 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT, Fri, 01 Jan 1990 00:00:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, must-revalidate, no-cache, no-store, private\r\nPragma: no-cache, no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IithbmF6YjVRbXMyakN2YkV0ZXAyTGc9PSIsInZhbHVlIjoiank0VGdGbXVYaGY2WUoyVWRDaS9OS0FJN2FpYzdFRGt4a3JxQWQ3dHRTRU8vODhIOHY5eGo4eithUlcwQ0c1ZjN6MzFRZENFcytva1J3d2llMDAxdXVwVTM5R2tIbFMwQzZxdDVKc2dYemI2bzZiallSU0xlZDN4M3dRMUd3RnIiLCJtYWMiOiIwM2I5Y2Q4MGNlZDAzYjU2MjdkYTM5MDFjMWRjOWJlMGNlMDk1ODZlODk0NTM1NWIzODY0YjA1NjkwNmU0NDIzIiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:45 GMT; Max-Age=7200; path=/; samesite=lax\n_session=eyJpdiI6IktCRlc2TG9yUWhOOStIKzBnMEpmaUE9PSIsInZhbHVlIjoiaGdFcGxIMFVsUGJjdEl5VHE5QWluSFJjZU5iOXluWkFCdXQrZ1R0aGMydG9oVUUrQnVEbHp2NTJDYWxERUF0SXpmUXNTQVFrRVpOTGpuSDZodEo3OWl6OFdDTlVTdEJSdUZDWDZ6UnN4UjNieTUrVm96V3pjYUQ0UmVnL2lPZVMiLCJtYWMiOiI0NWE2OWFjOTNmYjIyMWE2NGYxMmZmMDg0ODliMTY4NGViNTVlMzM5M2MwM2Y4YThlNDExYzMxNGI4ZTVhYjAzIiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:45 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7bd383246155adb2d46445086ffcba24","sha1":"488303eebaf03fb4eacc48d0ade5c330cc0f873d","sha256":"bbf31ccc87cb991b710270748cc63b27471a4372ae18b27e8e5d6e9e6fa6af15","sha512":"6e4175e542c6a3a583b00ad5657e3db8c8c6e6f05340ddfd534c3dacb0a82092593d5cd4a16e3333dd5c9fcc1e4a714cd3800b0beda489c97a5eaaaaa6bbb21e","ssdeep":"","tlshash":"af418591b0e235360dc344c734113f3e6d08fb9e7c5e8787769e461a83a2a605e673e6","first_seen":"2026-05-17T02:48:29.163385Z","last_seen":"2026-05-17T02:48:29.163385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/livewire/message/frontend.app","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:55.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"POST /livewire/message/frontend.app HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, application/xhtml+xml\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duyenbt.com/mailbox\r\nContent-Type: application/json\r\nX-Livewire: true\r\nX-CSRF-TOKEN: zbuqECrd91sZSBf2w1j3UAYJhenHb62LhOJXSSzp\r\nContent-Length: 482\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6IjBHT1AvSTg4UjNlS1ZhWElNN0dVcGc9PSIsInZhbHVlIjoidXhZYjNYeWMzS1QwcmdzelBITjhBK3J1TTh2eUJzVEdoYWVaM3VGZ2dDNHl4RE9JQ2xoRVUvZ0tGckxtamtIalI1cExLclJ5aTVwQmpXQWhOY3hLN0hOdUQ5M3pkWEZFOEVlWEdheHhQYU1XTlZVOW1vTDNJY1lzQXplb1hxWE0iLCJtYWMiOiIxYzAzZjcwODQyZjY2MTNlZjIxZTU3ZjU5ZTkzYmZiMDQ5YmIwZGRjMjE3OTIxNzc5NzkwMDE2MmJiNGM2OGE5IiwidGFnIjoiIn0%3D; _session=eyJpdiI6ImQ5T1ZYYWpEWkUweElPNyt2cWF3UWc9PSIsInZhbHVlIjoiUWg3bWxOMnlIMlpTZGZPY0lpVnBXcXlGbSt6M2RVWk9yd09JM3hRN1Rxc1orMVgwV2dqdkJWbk1vWlNPZm5aTGNaTU94cXk0KzNRKytiS2pYUmJva3FjSFRKNmFsSUZ6eFIvakFrVmR3SnBaQ0tnb3ZNU0JwNkEyR1JxMDhidTEiLCJtYWMiOiI3MmFlODU1ZmY3YWQ2YTlkMzAxYmQ4ZmU4YmM2MmQ5NTY5OTM5NzI2MzUzOTgzYWVjYzJiNTJlZTg2YTY4YTcwIiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":482,"data":"{\"fingerprint\":{\"id\":\"9S3RFbCIHtTn6La7hPHZ\",\"name\":\"frontend.app\",\"locale\":\"en\",\"path\":\"mailbox\",\"method\":\"GET\",\"v\":\"acj\"},\"serverMemo\":{\"children\":[],\"errors\":[],\"htmlHash\":\"a38e319e\",\"data\":{\"messages\":[],\"deleted\":[],\"error\":\"\",\"email\":\"huadob@perfectaol.com\",\"initial\":true,\"overflow\":false},\"dataMeta\":[],\"checksum\":\"321d78f3f91d9ce1b60c035b09ae1d43de6bbdfaf0210c3b5f20fffc1526b8c8\"},\"updates\":[{\"type\":\"fireEvent\",\"payload\":{\"id\":\"nvv2\",\"event\":\"fetchMessages\",\"params\":[]}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:56 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT, Fri, 01 Jan 1990 00:00:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, must-revalidate, no-cache, no-store, private\r\nPragma: no-cache, no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IloySzZHY1grTDFzRU4xdjFWUWlPMEE9PSIsInZhbHVlIjoiejVISXRIcnIxZXluWTN1cjV0cHNNWUZ5K0dJRnB6TENlc3lNTWxxWDg0MmwrLzJtMUxYMGxYK3hqa2N1c2tBeCt3blRybXA4VUk3MVZ3VnhDOVZXTExWZmNtam9ZSGExSzBSSnQzckYydGJaNXpkUW14QVB0ZnVVb1BGZ2xXdHkiLCJtYWMiOiIwNDcxY2I5MTMwMTJjMDkxYTFmYjQ1MDdlZjU5NmZiMjI4NDQzYzg1MTllZGE2M2Y2YzJiZDI2NGU4YmZiOThkIiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:56 GMT; Max-Age=7200; path=/; samesite=lax\n_session=eyJpdiI6InA0TUhEVmZnY1kvOWxwTEZ0cFRNa2c9PSIsInZhbHVlIjoiS3JucXhMVHNkdGI0NDZCWEdLZ3gyeWNqWFVpdkI2Ymd1VnRGcXdGK1lGbjc2NzM5TkVBazJveng4Smp2QnE3N2JBSzRoUk0vNkkxdThSQkIvVHBFMHU3MGVWakE1UmF1VHBKRTR2dzRuOW1FTk9BTUhLbHRSM2pYY08rNm5qSmMiLCJtYWMiOiIyYmE0ZWViNGQ4ZDZhOGVmNDhiM2NmNDZhYzMyYTJmNWUxMDgyYzc0MGJkZTFhNDI2NGRiZDBjZjdlMWJmYzhhIiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:56 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":216,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"25f14f352054c4740ea4e0fa644afea4","sha1":"e9ffc8b019c0b6be19b608345871df5c8555ef96","sha256":"1fb56a926d8cd661d1daf189efeec3b3a9d073a8a219c13e350ae31e750a59e1","sha512":"684ccc35cfbb737b1a2fe8dd9680beb833ec22a8f98d8ac7f2ed2362c2dc93653c3d5d80198f26455c4652ae2ad190fb141acea1ea33c8d584ff20e791483709","ssdeep":"","tlshash":"ddd02266a882e02e00ed4284ae1c3c327b1c6d1f24a08841c1e2bf86c6ae9b86013d23","first_seen":"2026-05-17T02:48:29.165804Z","last_seen":"2026-05-17T02:48:29.165804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1544,"timings":{"blocked":508,"dns":1,"connect":250,"send":0,"wait":517,"receive":11,"ssl":255},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/css/vendor.css","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /css/vendor.css HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:43 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 31 Mar 2023 16:18:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 49241\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":49241,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49240)","md5":"f0cd379979dfdd999f534f34c2f073e9","sha1":"1c0243e40367bf603b9c95731b8e39f5b9f0b7d1","sha256":"19b820df99a9d840615b516d8079e41263263c4958240dac25790713c74b3e9c","sha512":"64b891d82038ff1e7f820163625e7332849dc7ce8be685687c406006dfc52070eed4614d7d782506f72b94bd0910fa1feae4aedf481e8dcd6befe1eba906a4d2","ssdeep":"384:Oz7qrwjQkBKkys/yHhl/pelxvM+NN0xZ4yGIJH6:5wxKHCtNN0xO","tlshash":"1723a31eab21103f6c27c5fae599e9ed911ab1c5ee3622e7bc422510cbc57f71c63118","first_seen":"2024-08-19T19:13:51.098481Z","last_seen":"2026-05-17T02:48:29.167867Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1723,"timings":{"blocked":493,"dns":1,"connect":247,"send":0,"wait":244,"receive":486,"ssl":248},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/vendor/Shortcode/Shortcode.js","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /vendor/Shortcode/Shortcode.js HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:43 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 31 Mar 2023 16:18:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4947\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4947,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"13a9c793fb268b343c26ae915c4991a9","sha1":"a5a5f3401c62062d8ecd9d4484262d199b05d70f","sha256":"84746a83b7652252afda5a0e2b47c6a1c501d5705e4a191a7f668c3b8e44d662","sha512":"994f8ca414c68caf8101a6edcccfdf2a894aa2711e7830de186e937aa5312c830f7494f7dcf60d27b393ffce6980fdd63b1e29bd8f813ed08ee8e465973f1e63","ssdeep":"96:+YD+c1G8PrQ5I+u1nJl0ESlz3vVzRLjXyE7gNd7N9zSl8H3rdIdIRSpU:9D+c1GOQ5nanYESlzVztjXngNd7N9zsC","tlshash":"58a111997efb1165d12330794adf1084ba35700b281d8d64fa4c97f45fd1439a1eeeb8","first_seen":"2023-03-07T17:56:27Z","last_seen":"2026-08-07T16:43:24.35055Z","times_seen":55,"resource_available":true,"data":null}},"time_used":1216,"timings":{"blocked":482,"dns":0,"connect":241,"send":0,"wait":241,"receive":2,"ssl":245},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/pv/?_a=v\u0026_h=duyenbt.com\u0026_ss=1u2jxr62nl\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=6d9x\u0026_cb=_dtspv.c","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 23:55:29 GMT","end":"Fri, 24 Jul 2026 00:55:25 GMT"},"fingerprint":{"sha1":"04:6E:9D:44:BE:FC:43:F3:92:FC:C8:C2:75:5B:05:47:96:D5:BF:D8","sha256":"92:CB:19:A4:B6:99:18:9D:B5:D7:DD:BA:A4:20:25:39:68:93:02:5A:57:5E:33:8D:1E:FA:DF:E4:79:F2:69:A1"}}},"request":{"raw":"GET /pv/?_a=v\u0026_h=duyenbt.com\u0026_ss=1u2jxr62nl\u0026_pv=1\u0026_ls=0\u0026_u1=1\u0026_u3=1\u0026_cc=no\u0026_pl=d\u0026_cbid=6d9x\u0026_cb=_dtspv.c HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nCookie: df=1778986064\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:47:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-t: 0.209\r\nx-c: 0\r\nexpires: Sun, 17 May 2026 02:47:44 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZW5gWdRDMPZesyAniM7ztWhR4n%2FMCADNVg6YPbWj0yFyYsUa594XhBfLz5Aw%2BTkAjWxDvyWh2jZ8aH7ur%2Fbg9j4yxATiVhLuTX09WKqRbnNsl9gx25R%2F8tCLq3i6cM%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fcf4c99ae0ab518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"832a36f147fa05ea5f6187c58ffcb92e","sha1":"5827f52488eaddb38263fd771c6b9498ed60c263","sha256":"b9d9165cd86b1d0e2ee5b65dc41b468ac5dc16f7eccb9cb7adbbc6047854021d","sha512":"f2251af243fbc8986093df15c2d30e7241bf06a3cf63964354a90634a51d28dbfe7b3abf5010bfca9009669186b2fd846ac764fbbe36a1d7fe25b79bb6cf0778","ssdeep":"","tlshash":"7a90021874d1c0241ac9d78010571644417103d425c05599943155241149780965f9f8","first_seen":"2026-05-17T02:48:29.169657Z","last_seen":"2026-05-17T02:48:29.169657Z","times_seen":1,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:47:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10491\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f7b5b5f-e7d0\"\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 850520\r\nexpires: Fri, 07 May 2027 02:47:42 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8k3HFpxJdfy6p6PV4KuiEXSThuzh12xYan4siXfzyjQVZfelTtWiYc3R4nf1l5TS11Pw0GIWD0jSCiKVhf3j6S91%2BmsF4y%2Fmd64ij8A6fNJ%2B2ihJKCmUDRfJQfHGkTDWecaFNpQ\"}]}\r\ncf-ray: 9fcf4c8d787d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59158)","md5":"b227b1617a1763c8bc056772f05482b4","sha1":"c508528feb9fd540454f838653cd4863b290df2e","sha256":"af1e6edc875a382b338bb25bd7c5c3f474a7f1b36212002a5896dd06f2186325","sha512":"fb8cc22bd93ea8d1544795fe70a2fd10847e64e86d225a0d97d188292e7b57533236c62961c52b51e41cf6f35fcec59f576f0868b2f78bde8ff6c74dc9e46cb0","ssdeep":"768:OEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:OE0PxXE4YXJgndFTfy9lt5B","tlshash":"c743fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-08-09T05:15:06.023934Z","times_seen":12206,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 02:47:43 GMT\r\ndate: Sun, 17 May 2026 02:47:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"99732590118df209cfff721d0d4bbb19","sha1":"6ae6323f3fcd8085a9bb38292b65972b92f1881a","sha256":"7d306f38fb5378f3a004776b9c2436cb31e864dfe47674b4f8334673ae5a2bb9","sha512":"c84f3706d491bf8ee62c595caba3533a9078dd5e474ea291b8d683d50eed716f19379ceb6007ac78ad50a53f64faa65f776310029514b363a4f9126c5aa3f1a5","ssdeep":"","tlshash":"ae419bd1087be114ab831cc123ce7d37ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T06:17:11.832934Z","last_seen":"2026-08-09T02:56:17.587072Z","times_seen":4911,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:47:44 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 80300\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5f7b5b5f-139ac\"\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1893691\r\nexpires: Fri, 07 May 2027 02:47:44 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UN5WGXwT19lvJhBKqunGeYZaF2skf9i2tpn8jMAh5GSQyXpwPAYSfT%2F1%2BYaJiBt0TeuQ4%2B3VrwrrCocE99LkpWOm6b0h2jwM79XUyRL3F6okgr9w%2BYLPzRfxQhEJNlk4EDK2HMKs\"}]}\r\ncf-ray: 9fcf4c97ecb556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80300,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"8e1ed89b6ccb8ce41faf5cb672677105","sha1":"9b592048b9062b00f0b2dd782d70a95b7dc69b83","sha256":"6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7","sha512":"e2f6b4574cb1541dff6852d0af44faae80286110e8451841eade4b53ebdf31150602640fe1bdfff41459ea4ae884d14d115fbc93b30d199c87b88f5d07e4cd72","ssdeep":"1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19","tlshash":"d3730272fd7b05541fe8e3ad39390568bb881acc35c949f2058afc95e0ab67a7684d03","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-08-09T06:20:14.856307Z","times_seen":30866,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"p.mrktmtrcs.net/mm.js","fqdn":"p.mrktmtrcs.net","domain":"mrktmtrcs.net","tld":"net"},"ip":{"addr":"104.26.14.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mrktmtrcs.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 01:44:47 GMT","end":"Tue, 23 Jun 2026 02:44:46 GMT"},"fingerprint":{"sha1":"EE:46:68:4E:8E:32:9F:2F:CB:9B:3F:4D:7D:AE:C5:DA:DD:22:A1:04","sha256":"47:AF:41:1A:66:14:8A:03:45:1A:D0:54:B1:3D:69:90:CD:E7:38:DA:85:B0:E5:51:39:EB:DD:85:80:04:DD:E6"}}},"request":{"raw":"GET /mm.js HTTP/1.1\r\nHost: p.mrktmtrcs.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:47:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 20:03:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdOIHNrXDhSq52KOfaf1HpanU7qXzHRl%2FHUpV585dp%2FHn%2BfSavZtjasDbrMg%2F0u5WCKVIHBvRVX7Y%2FUqWrSKwKLuqUnwrfEJL79OUIfyvPAFAce7wm%2FOMZ1fjPJfDjQ5YQ%3D%3D\"}]}\r\nage: 1346\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"682e3177-9c10\"\r\ncontent-encoding: br\r\ncf-ray: 9fcf4c99fe24b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30767)","md5":"67cda29c6b95cb5eb8c4960490502a19","sha1":"ac6700bfe19f0580cccf51bddf2a7310d31a833c","sha256":"6ed6986bfeafe3a3bab8174b435e96c3ca8e216c3c7941b20c3e4984087f9e0b","sha512":"c5d6bdfb04022d8f3ff82c95c1c938a3aec4246a9fefc40a2e96b12e42295fe8d578c983b399ca86493f3481b113f685d27e20e2cd19000efab176a6b7ab578f","ssdeep":"768:Iudg8MPdH/EeIO5V1gPk5Te1pCeKSreGdRY8ZqM0wTo:IHEelgvZnAVQo","tlshash":"9403192ee3a2761003abf19dd90b50003e35541bea41f8a4bdecb581ff958a512bf7b5","first_seen":"2025-07-17T20:43:49.34962Z","last_seen":"2026-08-05T10:25:07.103185Z","times_seen":3658,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":43,"dns":22,"connect":1,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kadwa:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Kadwa:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 17 May 2026 02:47:43 GMT\r\ndate: Sun, 17 May 2026 02:47:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1492,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ee403cd314c60ddc9d88202a4fbbc040","sha1":"9da26c46664de2809a27c02958e56db0043977aa","sha256":"3a75b557a2dd752ab92729f393d8dfce3c07c83235cfa351b6ce55e5206ccc85","sha512":"954b679cead0873d0c6c5a1e3744cac397166cae1988d42c3d3a9979e360d62ec2ab440d7cd772e81ea18791db02f30fa79757e28e39016bd05464e97eefaa63","ssdeep":"","tlshash":"4731cdd508276900eb93acd163de7e36df4e12156441da79cbfe08c8ecaac2253a5b1d","first_seen":"2025-10-10T04:30:46.430846Z","last_seen":"2026-06-28T05:27:22.323042Z","times_seen":37,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":196,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/livewire/livewire.js?id=de3fca26689cb5a39af4","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /livewire/livewire.js?id=de3fca26689cb5a39af4 HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:43 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 31 Mar 2023 16:18:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 159350\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":159350,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54461)","md5":"dfeedac491be74aad041dfb839520d71","sha1":"98027368c29ef04587084aed2cbefd5c63c0b84d","sha256":"9352f0a33abaffc3392bc6340621411d499488b76515da0d3b99b3bfa91a6118","sha512":"87de40d373457b6021563ea99a23f2ace8dd1bf041f88be828ff929cb6a8ebe247aa823c814b8a0d6f45806041dea280c3bd2ad7c38be70ceef421dab7c36f89","ssdeep":"1536:bFWbBs025VQpotIfUoeR9g6qptWuPkbEFVnBqlsEGuIHIYMx0suDbk/5UK0t6fZT:5KyLBtuU4DptVZ82uIHIYhvt6FEOyuT","tlshash":"11f33a99b6c1f1b209c77164643f3a0fb2762054589d9090fa79cec07eba948522bf7f","first_seen":"2023-03-12T19:07:48Z","last_seen":"2026-08-07T16:43:24.359146Z","times_seen":38,"resource_available":true,"data":null}},"time_used":1516,"timings":{"blocked":-1,"dns":1,"connect":245,"send":0,"wait":252,"receive":757,"ssl":261},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 02:00:43 GMT\r\nexpires: Sun, 16 May 2027 02:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 89221\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-09T06:48:33.289541Z","times_seen":290082,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":103,"dns":1,"connect":9,"send":0,"wait":8,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.dtscout.com/i/?l=https%3A%2F%2Fduyenbt.com%2Fmailbox\u0026j=\u0026wk=bb26anize4","fqdn":"t.dtscout.com","domain":"dtscout.com","tld":"com"},"ip":{"addr":"104.26.10.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dtscout.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 23:55:29 GMT","end":"Fri, 24 Jul 2026 00:55:25 GMT"},"fingerprint":{"sha1":"04:6E:9D:44:BE:FC:43:F3:92:FC:C8:C2:75:5B:05:47:96:D5:BF:D8","sha256":"92:CB:19:A4:B6:99:18:9D:B5:D7:DD:BA:A4:20:25:39:68:93:02:5A:57:5E:33:8D:1E:FA:DF:E4:79:F2:69:A1"}}},"request":{"raw":"GET /i/?l=https%3A%2F%2Fduyenbt.com%2Fmailbox\u0026j=\u0026wk=bb26anize4 HTTP/1.1\r\nHost: t.dtscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:47:44 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-s: mtl2\r\nset-cookie: df=1778986064; Domain=dtscout.com; Expires=Tue, 25-Aug-2026 02:47:44 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure\r\nx-t: 0.829\r\nexpires: Sun, 17 May 2026 02:47:43 GMT\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHSmDuP6uRXuyUU0hpxSsQHAc9VLUHRmcbmFwPbTSVXMREb6EyDgjY3BdCeCUsdEAKDCcPy%2F0P%2Fad6qTOvRweidKe0k0ViEGDSuVa3u53Uh6%2F2uPPEyIcX9XY2ga5IY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fcf4c97bd2eb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2292,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2077)","md5":"8450c234da2df92a0c33a47c5aabf6e6","sha1":"0ea50308805f927f1e9ce37a96d44f27e01cdf8e","sha256":"c67ad82f6fe5a742115d0d041e403c18df8da6486fa0dd5fc785d4bb58458ac9","sha512":"1ea70b0b047651af5f5496bdbfac4574dad62bef73132ad667c194c375382c36ea62c24f37a4c2882d6e644846f5b866720a8b33cad3e4e650fa6b9fa0331de8","ssdeep":"","tlshash":"1f41880bb5e5347803e2006965ff635fb5330928bc5784c08596dc04fd749fad1b6eaa","first_seen":"2025-11-28T22:59:20.195769Z","last_seen":"2026-08-05T10:25:07.128353Z","times_seen":3577,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":41,"dns":22,"connect":1,"send":0,"wait":266,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/storage/images/custom-favicon.png","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:45.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /storage/images/custom-favicon.png HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6IjBHT1AvSTg4UjNlS1ZhWElNN0dVcGc9PSIsInZhbHVlIjoidXhZYjNYeWMzS1QwcmdzelBITjhBK3J1TTh2eUJzVEdoYWVaM3VGZ2dDNHl4RE9JQ2xoRVUvZ0tGckxtamtIalI1cExLclJ5aTVwQmpXQWhOY3hLN0hOdUQ5M3pkWEZFOEVlWEdheHhQYU1XTlZVOW1vTDNJY1lzQXplb1hxWE0iLCJtYWMiOiIxYzAzZjcwODQyZjY2MTNlZjIxZTU3ZjU5ZTkzYmZiMDQ5YmIwZGRjMjE3OTIxNzc5NzkwMDE2MmJiNGM2OGE5IiwidGFnIjoiIn0%3D; _session=eyJpdiI6ImQ5T1ZYYWpEWkUweElPNyt2cWF3UWc9PSIsInZhbHVlIjoiUWg3bWxOMnlIMlpTZGZPY0lpVnBXcXlGbSt6M2RVWk9yd09JM3hRN1Rxc1orMVgwV2dqdkJWbk1vWlNPZm5aTGNaTU94cXk0KzNRKytiS2pYUmJva3FjSFRKNmFsSUZ6eFIvakFrVmR3SnBaQ0tnb3ZNU0JwNkEyR1JxMDhidTEiLCJtYWMiOiI3MmFlODU1ZmY3YWQ2YTlkMzAxYmQ4ZmU4YmM2MmQ5NTY5OTM5NzI2MzUzOTgzYWVjYzJiNTJlZTg2YTY4YTcwIiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:45 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 25 Apr 2023 10:17:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3181\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f016f32b4f79ecaa4f3de0894e013e9a","sha1":"4c6bd631c0d9bf51987b3a38826b83de125cac8e","sha256":"e48038dd093f81fbf4aca9aaabc1d0df443541ef959dc3961429d8c7e5b36862","sha512":"03b2335b962b79b4ca3b827c7c5c97fd5be9a6b80b6ee8fe3bbd174f666f96156a1abe162958186b07f36ce6eef3de9e8acfea154e7b819733985ed1b2fe195c","ssdeep":"","tlshash":"61613c2a4451d6814e0f99b5b799e453fa6620459c238641eecbf2dbb3562e830b1278","first_seen":"2024-03-20T15:45:34Z","last_seen":"2026-08-07T16:43:24.379685Z","times_seen":26,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/mailbox","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T02:47:42.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /mailbox HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:42 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT, Fri, 01 Jan 1990 00:00:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, must-revalidate, no-cache, no-store, private\r\nPragma: no-cache, no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:42 GMT; Max-Age=7200; path=/; samesite=lax\n_session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:42 GMT; Max-Age=7200; path=/; httponly; samesite=lax\nemail=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; expires=Tue, 16-Jun-2026 12:47:42 GMT; Max-Age=2628000; path=/; httponly; samesite=lax\nemails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D; expires=Tue, 16-Jun-2026 12:47:42 GMT; Max-Age=2628000; path=/; httponly; samesite=lax\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":45150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1534)","md5":"bfa06dd355485427419380bfbf1bb063","sha1":"b6527f02c4d84170ee5882a59bd51656ef7c9af3","sha256":"38825019200af2986c6ff31766a35b37502025d6efe041197ed14e0955119e5d","sha512":"6ff794705cd087bc9aee6598dc87f17665c8bd3f30324da21bf478106907f2ddf4179c55f55884c554ef436602b256a270a0821502270bb621d151930d47e5bc","ssdeep":"768:BRv+BTe7DB2V1sIIQmBMTw4XBRIeE7cWXZ+CTkMolT9Cdj8ZteWzk3X:yw7DB2V1sIIQmBMtXBRIeE7cWXZ+bEmC","tlshash":"1913a520e1f10066009f906676a1b7095d7ee307da87eacdfb9cc2426f86d75ac532ed","first_seen":"2026-05-17T02:48:29.181568Z","last_seen":"2026-05-17T02:48:29.181568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":493,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waust.at/t.js","fqdn":"waust.at","domain":"waust.at","tld":"at"},"ip":{"addr":"104.26.5.7","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waust.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 21:15:25 GMT","end":"Sat, 11 Jul 2026 22:15:10 GMT"},"fingerprint":{"sha1":"8F:1B:28:C1:C8:62:78:B0:61:56:D7:65:B0:33:60:23:87:F9:C5:02","sha256":"54:30:DF:F0:B8:32:47:C4:9B:E7:9A:1B:D4:D9:B6:0E:6B:48:F6:D7:B7:E0:92:06:58:AF:84:9F:9C:B7:E7:91"}}},"request":{"raw":"GET /t.js HTTP/1.1\r\nHost: waust.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 17 May 2026 02:47:43 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Mon, 11 May 2026 16:57:24 GMT\r\netag: W/\"6a020a74-6ec5\"\r\nexpires: Mon, 18 May 2026 02:47:43 GMT\r\ncache-control: max-age=86400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qakTb6x6OPFtm4KIFSkHwXF55MRTFdf5UrT3GyzWaRSRb7FA0pH7%2FL3395CYPa%2BlPZqExwc7VOzlQbGZIjv83ACOn4Q%2Bb023E5fjS37%2FwW6RQR0HirTYMfZ\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fcf4c8e0fea1525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28357,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (28357), with no line terminators","md5":"f9f76398f3d3cd462401e37a6ab730a0","sha1":"305957a23320b19a1190021f9cb1f29a00858d66","sha256":"08a80c05c094cf4ef235e4dba5b887880f66c354a9ab199c0316b595b1fc6f58","sha512":"961d7ed19cb57c5e7968f20fda6ae482681ae7259b3e09b3ce4bd14e88cc6485e32a3ef6589dd833d4961922c64bbe8c1d87745d05f0e4d7ac28d32389cc4fef","ssdeep":"768:3944ugm06KOdfOIahfQdrSByoZCdmKOGG0x7+Ipd:3G4E0nOdWB4dOBDCd3OGlNpd","tlshash":"2dd2bf19059b1c9a977fa481617f930af031819febc281862834c4fc7aa8d1b917ffb5","first_seen":"2025-11-29T09:15:50.674714Z","last_seen":"2026-07-21T03:02:14.746246Z","times_seen":149,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":37,"connect":1,"send":0,"wait":410,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"waust.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/storage/js/gpt_ads-public.js","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:43.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /storage/js/gpt_ads-public.js HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:43 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 16 May 2026 11:41:45 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 115\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":115,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"a8535c6f279a283fea671a0e607b5cb5","sha1":"fd0a1fdd48444d707d7c287f9cb090d83f50bc32","sha256":"28c908c7ffcf899d7e7daff9fe769fef004537d0d7252822e060204682d98e24","sha512":"0ca91c74f9ffe603cbd983e755e4d212f4a7e887711552f66e8900ce5cec9b43ceabe9f6d53dfbac11487f719f19aaf8313a97d048d586339efcf6156838f821","ssdeep":"","tlshash":"feb0123219214379829f098f32f8ebb9fff91550b091146481bccf1ca67ac82c517be1","first_seen":"2023-08-07T01:04:59Z","last_seen":"2026-05-17T02:48:29.186335Z","times_seen":16,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":288,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5524\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 01:51:46 GMT\r\nexpires: Sun, 16 May 2027 01:51:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 89758\r\nlast-modified: Mon, 15 Sep 2025 16:35:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5524,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5524, version 1.0","md5":"a575b6d9df987563f85571f442cfe795","sha1":"cdc90db0ec64148e8572354a9ca9ed4a698c9da3","sha256":"bb1f2d582e7fba586ab70c91ef062d3becaf78b887654953863521b73665d171","sha512":"1d28899af97e4edd330f9440c7b2fade6dce9a1987e33789791e5d8ad1e5b5c5770901ac0eaacd513e0916336dd301abc0334a896f2cd205072f17fd846e7763","ssdeep":"96:NfDNeo9yqB+kbL0GlV/YfsRWvPC2vJT/7xtFHD1yPe0OQowlxVDWP:NfDNeop+k/fj/CiW3XnFj1HWLVDC","tlshash":"81b18ff32af2e39b5b0b4532f892f72b4dbd01253410a3b9d861fe89d92c511a4e11c6","first_seen":"2024-12-05T00:19:49.496381Z","last_seen":"2026-08-09T04:20:47.199385Z","times_seen":9589,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/css/common.css","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /css/common.css HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:43 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 31 Mar 2023 16:18:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1286\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1286,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1285)","md5":"10138ddf451a0ffcaf9a7c052d99b641","sha1":"81abf73414527a283b2fcd074cedcd8f0b2bca0c","sha256":"a47b5874419e20c90acfaad7a8dae72434007657a4dd4827a2ec8b02ff18dbf4","sha512":"c30478954d861298d8c247117c2550880ed57f3591773f5ee4a191353190db0e4fe3d83559fe86ca617ba9f1fa452246c55e2200497bfb7d1c9a5ef3b3a43f98","ssdeep":"","tlshash":"f42145abf99254180466d93bb8c16f541a36b00ca7e915bafa501cb88fe93374225758","first_seen":"2023-08-07T01:04:59Z","last_seen":"2026-05-17T02:48:29.190598Z","times_seen":7,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/js/app.js","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:43 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 31 Mar 2023 16:18:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 127733\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":127733,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65279)","md5":"4994274113a5390ff8878204c2f57b04","sha1":"4d2736ce5cd4d6a71a1afcb4fdcde3b371c43a5f","sha256":"0b1a003f27003e7d54667c7388be9e340e78303c6b88871a93e38224b16cc577","sha512":"c4f23ad1b92cf827b1647c6c387626a6dbe4e2411c22b1074647c40dadc84e766e15e575a726b73a97404d6ba2fbdb9d3f6feeda702d84489c4b660529536b27","ssdeep":"1536:hImrq1EzBVr3APBjClFErsnDK0mF9bx5DNddGFaK9Gzh7QtFHnG/zuAzHxN2mUG:SeLrUOrkugzhstFHG/aEHN","tlshash":"3dc3c4d9b692f03143a720b500bf410bf23ead54784e8584f264e8d97d79a4ea1b7f39","first_seen":"2023-08-07T01:04:59Z","last_seen":"2026-05-17T02:48:29.194014Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2031,"timings":{"blocked":505,"dns":0,"connect":252,"send":0,"wait":252,"receive":757,"ssl":260},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/storage/images/custom-logo.png","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /storage/images/custom-logo.png HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:44 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 25 Apr 2023 10:17:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14649\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 201 x 62, 8-bit/color RGBA, non-interlaced","md5":"70933149272f1214829f3725a84faf6c","sha1":"405dd8f248e200ace2cdf8d7368fab62a171240f","sha256":"2f7bb06bee52f7d094a88e70b35a801ca58153e58e2475fe78ecb3818eaf85eb","sha512":"bd20f6ef86900c65c17018b4aa70d843e6debc9ba18c18d8cb5fe1f46baeaf5118790b9ef66966c50e2915fc866240276aaaf494c78a88fdac8f7ccbc8889b5d","ssdeep":"384:5+77i9QeGK0Mn3eBlBpSk/YyUQZwEwoFt9XdSP:Ii9D0c3eB04RnZtSP","tlshash":"0e62d0d3ccc91bb9c66d8673a782832213f1f09675404ae648795b8999c8f8cc2771c6","first_seen":"2026-05-16T14:15:59.977954Z","last_seen":"2026-05-17T02:48:29.196277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1461,"timings":{"blocked":1213,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/images/sample.jpg","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:42.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"GET /images/sample.jpg HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duyenbt.com/mailbox\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:44 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 25 Apr 2023 11:29:11 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 105210\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":105210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 819x863, components 3","md5":"9f75fb4b529f4657fb290857be9b8622","sha1":"68f00d10819517540453a412a2b07e9ceb11aaec","sha256":"2a56063b0cada09197719e80afd0b45248408ab5f5de1527a74ed759ad770571","sha512":"61b5c3df094ad433807257e3cf2aa8866015d8ea10e699b01f91390b947de1a2f857712411820e02026975faf3bda95c3d1ec763a8132f1bc875917dd0dfb987","ssdeep":"3072:qpuxAsiX/HZau83Fz8v8urIzc2ZNLlg0BV:qQAX5au83Fz8v8uraxaE","tlshash":"00a3ae479d4d9b53c06c93b83d472e4d3b66626c6d9269aeb52e0ecb7f702a21c4c01f","first_seen":"2026-05-16T14:15:59.979198Z","last_seen":"2026-05-17T02:48:29.197382Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2176,"timings":{"blocked":1209,"dns":0,"connect":0,"send":0,"wait":241,"receive":726,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duyenbt.com/livewire/message/frontend.actions","fqdn":"duyenbt.com","domain":"duyenbt.com","tld":"com"},"ip":{"addr":"172.96.185.69","port":443,"asn":133752,"as":"LEASEWEB HONG KONG LIMITED","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:44.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.hotmailvn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 17:41:11 GMT","end":"Thu, 23 Jul 2026 17:41:10 GMT"},"fingerprint":{"sha1":"21:67:55:5B:17:44:5F:29:25:67:1B:85:FC:EB:6A:B7:D6:53:76:62","sha256":"F0:C1:34:B6:8B:CC:89:2D:E8:9A:D3:86:9F:A6:EC:63:1F:E8:00:0F:0C:A4:3E:2E:E3:A1:CD:CC:08:8D:39:25"}}},"request":{"raw":"POST /livewire/message/frontend.actions HTTP/1.1\r\nHost: duyenbt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, application/xhtml+xml\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duyenbt.com/mailbox\r\nContent-Type: application/json\r\nX-Livewire: true\r\nX-CSRF-TOKEN: zbuqECrd91sZSBf2w1j3UAYJhenHb62LhOJXSSzp\r\nContent-Length: 884\r\nOrigin: https://duyenbt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=1d60b96b08a6af9154d8728438e76e93; XSRF-TOKEN=eyJpdiI6Ii9tdHY4MEl5Myt6dG9XcVFleVdlRkE9PSIsInZhbHVlIjoiRHQrd0Y5ZVRVTkxYUGlITDU3akE2dGZYNnZFTTI1QlBnNWdWeWxhRlY3aVJJK05Oa2xpNVN1WGhFanVuVm1iR0EvVUJRUDV0RDhVbURNeW5KWTRQWU4rY3Fjc3ZHSzNHd1VUdnVNM0NNR01aSFhmYy9tY2JYWm5HeWp0Tk01K28iLCJtYWMiOiIyZDkyYTg5Njc4ZTBjNWJmMGZhNjgyNzMzM2Y4OTkzNjZmNDIwMGQyYWJlMTU2ZGUwNTUzZmFmMzE4ZjAxODhhIiwidGFnIjoiIn0%3D; _session=eyJpdiI6IkY2cUExeGZCOVBsU2xJdmZhRTFOaEE9PSIsInZhbHVlIjoiNG5xaDE0amlhUFFZaW1OQWdsQk41OWlRYXBHcVBaNXh2OXI0ZENRRm84MTFJdUZWc1ZzMTRSb3dEZEFEa1BYbjRzODdNS21yS0tyWHFWTkorbkl3b3dISkpsSmwzM1lGQjlSUEEzaExGMENqell6alRTNTNGZUVhb2FpN1liMjQiLCJtYWMiOiI5NmVkOTc4MmI3MTJmNmU2ZjYwYmQ0ODk1NmM3YTkwNzA4MDA1MmJlYzJmZDQxMDU1NTQzNjE3MTU2ZDNkMDA0IiwidGFnIjoiIn0%3D; email=eyJpdiI6ImlOVnBua3R1dTl3TE16R2FhSSsyV1E9PSIsInZhbHVlIjoiSVFjN1Fnd3FKZ0N3S1ZObGp2SE85WGlPeTVsOGNtU2tVWi9IQVBLVUdCcDN5TjVQaWxXOCtiY3Y0TXZjWVpneHkzNWcyOGg1ZGZaSUhZekdkTzEzUHc9PSIsIm1hYyI6Ijk0M2Y2MGZhYzNmMDJmOThhOWY5NTVhZjZjNGUzZjZkMWU1NDI0Yzg0NzAxZDZkNGQzZmE5NmM5MGZmOTNkZGMiLCJ0YWciOiIifQ%3D%3D; emails=eyJpdiI6ImxuaEQ3TmlDc24yU3VsVnhDT3hVTmc9PSIsInZhbHVlIjoiNjB6VzFsclZtSHl4OTB5VlY2R2pKYXo0NmZaZThmeEFoL01tL0JIcmQyZ0FmQ09nR2t5cGlKa1FwZjFUdjdKZ3BhSm5hb0Z2NlpGMUdpNitoTk15aEQrY01ibkdYTFUzZlBKNUd4V1VZOExOTVh2TDRxYm9sZmlTdjFmL2JyTmQiLCJtYWMiOiJkZDNiMTc0ZWFmODY3MGFlZjlmMDE2NjEwMDVjYmNkOGM3NTJjODZlNTU0NzgxODBhNDBkYTVmOTVkMDNhOTBjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":884,"data":"{\"fingerprint\":{\"id\":\"QDfLPN4tjQyZsG0nqm1v\",\"name\":\"frontend.actions\",\"locale\":\"en\",\"path\":\"mailbox\",\"method\":\"GET\",\"v\":\"acj\"},\"serverMemo\":{\"children\":[],\"errors\":[],\"htmlHash\":\"ef69afab\",\"data\":{\"in_app\":false,\"user\":null,\"domain\":null,\"domains\":[\"sellallmail.com\",\"aolvn.com\",\"copyvn.com\",\"cutvn.com\",\"daoductv.com\",\"deletev.com\",\"duyenbt.com\",\"elantravn.com\",\"emailct.com\",\"emailsll.com\",\"hotmailvn.com\",\"livethuthach.com\",\"mailmmo.com\",\"mailold.com\",\"mailtot.com\",\"mailuytin.com\",\"optionvn.com\",\"perfectaol.com\",\"perfectfb.com\",\"perfecthm.com\",\"thuemail.com\",\"trangcode.com\",\"perfectyh.com\",\"dautv.com\",\"duongtv.com\",\"duongads.com\"],\"email\":null,\"emails\":[],\"captcha\":null},\"dataMeta\":[],\"checksum\":\"8b7cafa64a7480036a900f7eb01812e33527337d40870c24cbcc63013140356a\"},\"updates\":[{\"type\":\"fireEvent\",\"payload\":{\"id\":\"p71p\",\"event\":\"syncEmail\",\"params\":[\"huadob@perfectaol.com\"]}}]}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:44 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT, Fri, 01 Jan 1990 00:00:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, max-age=0, must-revalidate, no-cache, no-store, private\r\nPragma: no-cache, no-cache\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IjBHT1AvSTg4UjNlS1ZhWElNN0dVcGc9PSIsInZhbHVlIjoidXhZYjNYeWMzS1QwcmdzelBITjhBK3J1TTh2eUJzVEdoYWVaM3VGZ2dDNHl4RE9JQ2xoRVUvZ0tGckxtamtIalI1cExLclJ5aTVwQmpXQWhOY3hLN0hOdUQ5M3pkWEZFOEVlWEdheHhQYU1XTlZVOW1vTDNJY1lzQXplb1hxWE0iLCJtYWMiOiIxYzAzZjcwODQyZjY2MTNlZjIxZTU3ZjU5ZTkzYmZiMDQ5YmIwZGRjMjE3OTIxNzc5NzkwMDE2MmJiNGM2OGE5IiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:45 GMT; Max-Age=7200; path=/; samesite=lax\n_session=eyJpdiI6ImQ5T1ZYYWpEWkUweElPNyt2cWF3UWc9PSIsInZhbHVlIjoiUWg3bWxOMnlIMlpTZGZPY0lpVnBXcXlGbSt6M2RVWk9yd09JM3hRN1Rxc1orMVgwV2dqdkJWbk1vWlNPZm5aTGNaTU94cXk0KzNRKytiS2pYUmJva3FjSFRKNmFsSUZ6eFIvakFrVmR3SnBaQ0tnb3ZNU0JwNkEyR1JxMDhidTEiLCJtYWMiOiI3MmFlODU1ZmY3YWQ2YTlkMzAxYmQ4ZmU4YmM2MmQ5NTY5OTM5NzI2MzUzOTgzYWVjYzJiNTJlZTg2YTY4YTcwIiwidGFnIjoiIn0%3D; expires=Sun, 17-May-2026 04:47:45 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15678,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bd4337228cb50f3b3f576ee79c5c8410","sha1":"44e79ccfaaa4f3eb3cd8c2fe4e99812d26facccc","sha256":"6cf1f393b6aa003a9b912b9c487badea67caf9f9119da465f9b63da6fcfb8386","sha512":"65e5a9cb037960e71a3b3b295fc0b6d233a4b4576e02ed5a836e8d24c2bd6495af549571a4eb9fe2f68968e06378a0b59d1fdbe12ddf35d0d4ae1e7b8c004fed","ssdeep":"384:Hi0+D7l737O78Y7BR7g7k7s707G7v7U7Twy7x7z7v787S7M7R7A7+70k7bD7Rjo0:HJuJrInXSumeQT+TwEN/TWkGtyYFrkKh","tlshash":"9962fba4f0e110a640d3806e78d5b50d8cbdf347daa7e8cefaecc107538a569dc571a9","first_seen":"2026-05-17T02:48:29.199101Z","last_seen":"2026-05-17T02:48:29.199101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"duyenbt.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"duyenbt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/quill@1.3.6/dist/quill.snow.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duyenbt.com/mailbox","date":"2026-05-17T02:47:43.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/quill@1.3.6/dist/quill.snow.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duyenbt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.6\r\nx-jsd-version-type: version\r\netag: W/\"60a7-qty/nQmD6ZZG8Hbye1QJrUgXYzI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 17 May 2026 02:47:43 GMT\r\nage: 1607678\r\nx-served-by: cache-fra-etou8220068-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3693\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24743,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9b536bda67650c506df72197baec4c01","sha1":"aadcbf9d0983e99646f076f27b5409ad48176332","sha256":"892e299431955e9ae388ae257f72024ee76af2d52a7a97a868f70fbe50f16144","sha512":"3d534c764c3ed946f131a174dd94f19110b248197942f6604903ced2fb88a582336f987e435f32f00fd6fcde15a68f047ab1e88b60d366d6bf531add28f1b474","ssdeep":"768:vXZh8GMCIQW+3P3/YgJhgoi6sEJRJByKn8WI7FFrFhFrFJ0SFWpr5mGibPz7QoYJ:vXT85CIQW+3P3/YgJhgoi6sEJRJByKnl","tlshash":"dfb21f4dedab1dbf412660bd900112d07fce6753d0ebaab9d4e16d8e25ec094c36a39c","first_seen":"2023-04-06T20:59:50Z","last_seen":"2026-08-08T12:24:48.852493Z","times_seen":941,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":113,"dns":51,"connect":28,"send":0,"wait":27,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}