{"report_id":"d194b6d9-2c0b-45a9-8c68-ebfaa3cdcc1b","version":0,"status":"done","tags":[],"date":"2026-10-10T22:13:17Z","url":{"schema":"http","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":0,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"title":"Trang chủ - Lịch Xuân Sài Gòn","dom":{"size":178450,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17201)","md5":"455d6e4eff59cd87035619136a76133a","sha1":"1b488f7a7788241d9e26b6bef072a5e456e79b67","sha256":"c6dd4c096ee84bb28439350b620491cd269254c881586a8272afd1022527216d","sha512":"22328ed8c306d4e82406653765587ddc403a5cb29429176db71cb90aef6494c2e65150dc4b0f93fc2c8d6ebbe4daa8a676f5a8c742e0d2fce42d6cc0777102c3","ssdeep":"3072:8w0xF0+AGvAvAYqAsGZ5MpA0FpwHOqPkIBx2VJcX/14VTB:zf4OL5M/FmHOqMIk","tlshash":"04040ba34b6c243a195773d69119fb0db3837422cf958ae0b3fe8588cfc2f951562789","dom_hash":"domhash28b5dbedd2449bedf91467510ffead8b","first_seen":"2026-10-10T22:14:08.814422Z","last_seen":"2026-10-10T22:14:08.814422Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":0,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:13:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":7,"received_data":3681791,"sent_data":3400,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-10-04T23:05:21.462671Z","alert_count":0,"request_count":19,"received_data":79347,"sent_data":21230,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-10-05T00:17:45.874638Z","alert_count":0,"request_count":8,"received_data":4599,"sent_data":8267,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-10-05T16:16:54.44267Z","alert_count":0,"request_count":2,"received_data":1197,"sent_data":1220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":1,"received_data":9615,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-10-05T14:46:25.782959Z","alert_count":0,"request_count":1,"received_data":52825,"sent_data":656,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yt3.ggpht.com","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-01-16","domain_rank":1275,"first_seen":"2014-01-15T16:55:17Z","last_seen":"2026-10-05T18:46:57.512305Z","alert_count":0,"request_count":1,"received_data":2058,"sent_data":625,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tintuc4.ninhbinhweb.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-06-01","domain_rank":0,"first_seen":"2019-05-16T09:37:41Z","last_seen":"2021-01-06T13:01:28Z","alert_count":0,"request_count":8,"received_data":0,"sent_data":4656,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-10-05T09:20:34.699312Z","alert_count":0,"request_count":8,"received_data":3744899,"sent_data":9996,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lichxuansaigon.com","ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":70,"request_count":35,"received_data":1768289,"sent_data":23759,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:11.1.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO Premium:11.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":13,"received_data":547837,"sent_data":7471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-10-04T23:37:19.691773Z","alert_count":0,"request_count":1,"received_data":1223,"sent_data":510,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-10-05T09:53:19.970332Z","alert_count":0,"request_count":2,"received_data":87418,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ca24dd83bd12a75a955d06014e0594a8","sha1":"b0cf8094e3478a036f53523d40db4e1126ed6465","sha256":"d7c780f1f555765c7b2e85da23df3348b719369d31fb615edac32d8bc20dce80","sha512":"6cc9d5aa29e92762bc0761b0b07d4b684b94a040130bb0b08ef95dbb0ac4a8eba1df2509e26d6ec9c79e9a94619f4c07e9920cdaf9689b4334b6024d8de0c7ce","ssdeep":"","tlshash":"00f02394f237017a42944a64450713154290bc74ac3e37bdff8ddad6e533c0b245bee8","size":470,"data":"","first_seen":"2026-10-07T04:47:03.574091Z","last_seen":"2026-10-11T07:00:08.281402Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"da598c0c2eab8e102b7e7ec1204088ad","sha1":"3350ed06f852c25cd2936c4035d20f6c7b4c9da7","sha256":"c1cfc587792503faef9c99e7dfbc4fc211e492f1069da091f5ffa9623a871823","sha512":"6806df38e1bb61162317ab2895972f7af247725166a17e69f3005498a3a6a11e0ac85866187611f2bbac1eb9f1edf4d2b22cfbf85089c3e6ca6acb6c1298d5b0","ssdeep":"","tlshash":"8d9002483466f82052195916815a9545615a5451841a2424d1d05481ae90014402796d","size":51,"data":"","first_seen":"2026-10-07T04:46:53.201801Z","last_seen":"2026-10-11T07:00:08.247902Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d9e9500954f124a5e7c97f3eb49c808d","sha1":"99ff3c028d4c179cb0a934c92fb35bbe2d037a9b","sha256":"f865d9c4fcd9c5a42d10a0883faa74a6c2c38ec0ba9b65f7b52e0a3e8752d8ba","sha512":"3e52183b58c1d3dd538a1627482fea59b62d080ce3e3e4a0727851cf4cb3b83c043a4b9297cfe6f5640d3e47457d2e5d3cd5f3af41434f6c06f4f4289d9d8649","ssdeep":"","tlshash":"03b012c56959380804ba2de1270701246495660704a1a10be10951b40b74ced593588f","size":107,"data":"","first_seen":"2026-10-07T04:47:04.751801Z","last_seen":"2026-10-11T07:00:08.298061Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eea16f790a85dfd6d95cc9a5e905e005","sha1":"ae2b57bdfd8da73ed731860dbe638fba208724df","sha256":"1e137a324c8aee2a38fc229484bc4902dce802b3c6ad2b23e66094f2258902a5","sha512":"61ab390edc863334d47c8b8be139f583c0b3498f31e600187a09b2cad219b5c0dd4c92e4caa50bb42c8b959d8f0b551adb653a90bf19f9ab4b722bb21a413a92","ssdeep":"","tlshash":"a1a0125a66326200402155a180072168132115913c073505000064401bb2809440db06","size":83,"data":"","first_seen":"2026-10-07T04:47:00.611151Z","last_seen":"2026-10-11T07:00:08.211964Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-10-11T21:32:17.047772Z","times_seen":53417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"58e44f14d0954da1a331634f931811f7","sha1":"890bb57ec742994551a524b0d852f6c1d1b54644","sha256":"ddfa870be09a4d165a69bf244da370d13fb35582c467f298191981b902bf3ba5","sha512":"0f907d513c25c3a2e0865dbc2c4d39afbbf31e650708b4f574ad134f9e832532989dde03753749bbc6e8e3e431b5d985c9ba77f01cb0cadac16fb8db34476b6d","ssdeep":"","tlshash":"1cd02bd963edad93a7d67ed8140535f2b1702453eaa9d8489ed8bc880b10a46ce1852f","size":281,"data":"","first_seen":"2026-10-10T22:14:08.968623Z","last_seen":"2026-10-10T22:14:08.968623Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf54ce32412b294b823a6b4659d0eeae","sha1":"2b9a0cafc0af20a9e0f7d418e4689055ba59a4e9","sha256":"9944e2030afdee779b1b328b5e276b8ceba9bf033a3ba7cd581b03674fac946d","sha512":"52c334d65bfd5028fdc7812688a447d55af0f83e4ea6dbcb0ab5d865962eda8b6ced0defd22a31fea9b1156dfb18f078175067ecec07dc264790118b6e869698","ssdeep":"","tlshash":"97d05b5655792d8397c86ee1041525e23df4d21af25508403ab8e95932368c5dd255c7","size":250,"data":"","first_seen":"2026-04-04T06:20:39.273397Z","last_seen":"2026-10-11T02:53:53.014974Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e2f3b07ee912c3f27015a4af44463ff","sha1":"930f6a9a68b53172b597e991a1d8e5edb4934b76","sha256":"ad0484333fd319197fb4f97824f200232c2b121cf00a83ba3ae702ab1133db21","sha512":"e3d22081bc65697cdc8948429301cded09fb35ab16b407aa186215e2d895e21f7c0f6abaa377a6c376710750b2da9b1d97cf80a74f3452eb98bd823b69f5d1f4","ssdeep":"","tlshash":"c0d02b15ddb40f42edc22ef0427db6ba4194b1729dc0684414056c414839cd9e808617","size":265,"data":"","first_seen":"2026-10-10T22:14:08.977807Z","last_seen":"2026-10-10T22:14:08.977807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef472f8987ffa59958883612c5ab24b6","sha1":"4658e0048a5a186f18ad5b20be0e8ea3aaba7a33","sha256":"01865e4edb4c10594f946244f4287d316d739c2432f03d7764e5eab741d5dea3","sha512":"97bec13c26d20a8026cded48730697465fbd2bcfbca17db2e43b740d19627d8c22ea57a1064cdf930f251f62305da111e9b98e58160f49152962f90ce5a771ac","ssdeep":"","tlshash":"dde028da79110c7270dd05f533f1a51871432208680d1c23cdfdc91438186c74c135cc","size":342,"data":"","first_seen":"2026-10-10T22:14:08.982053Z","last_seen":"2026-10-10T22:14:08.982053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4bee3e932e9ffcc794a0e57eb2f7a8f","sha1":"38e7a65fe18b7b17fbafe76d564091c08e990365","sha256":"8a0926d3cab0fef168bc289d3c9db96fbae5822d55264aefe80eaa6cf9f5523b","sha512":"96c284c933b2ef4d1aad93af986559f68dc769a6c9dbb90ae3c8dc2e3dceaac1b46c3715b1881aad4b54475e4828d07f52500dba7451f3c7a55d9d1b4edda83b","ssdeep":"","tlshash":"e4c02b8c220b1cb042eb2f008b7ff600f0423204a4d0aa31090923044e21e03d744810","size":149,"data":"","first_seen":"2026-10-10T22:14:08.983861Z","last_seen":"2026-10-10T22:14:08.983861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a624a531b11179e19754d91c315a7ad1","sha1":"23c94d1c704653be7349d49ccc76ad62ab1f952c","sha256":"3956eecb5bc60f33b9b8691ec4f66a7f07aacfb9e55c89fcb0dcfaf6634f6e25","sha512":"625fa67e190a65f6c1051bf2ca310b96b4d8b3c4d964367a84e9ecf20bbad8bd448a4ef577b3b80745171e97ea53257164e1ce3f8da3085d0e08216ccfbb1006","ssdeep":"","tlshash":"64a02200a238080eaccf280c2f80ac02802023f0b00bcc0223f80f20ac0e80ca20038a","size":71,"data":"","first_seen":"2026-10-10T22:14:08.986921Z","last_seen":"2026-10-10T22:14:08.986921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"0578dac170ca2aedb870ccc4e6887578","sha1":"0a4a716e22b7b8567a30ac3aa698e487b1d02304","sha256":"332dd8de73cd786e17d01177b3bb101dd2b0728f940c2e662183c8ea3e1ce940","sha512":"52cd5716933317fb4295abab4b81f1bcf0f4ff4d794fd8e0c7db51f763fbc63a40c8b29b3410d362d80f356004508676d9f2a001be5a2d4e1e4b5eccd79d91dd","ssdeep":"","tlshash":"18a00201b66015de9cdfa8485f587d02917403e1b00bc94263e70f18a61ed58914064a","size":64,"data":"","first_seen":"2026-07-06T08:04:59.345831Z","last_seen":"2026-10-10T22:14:08.98895Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"3137fcc5fd201d962e63735313668cf7","sha1":"a5172eb8fbe80c88d8aeb9083982f6f36c4a7415","sha256":"1db4d8055d9be0a91586f8c45d4eaa867e75a69e9d5979464dfada3a8d00e23a","sha512":"f50d40eb4844ea799e949a01ed02d6fb3ef9464a82798e66b3f8cd75ea33f822141ccff629bb167e2d0d378683db705d50c5579efe8a29b4bb5f7399b8bd3d79","ssdeep":"","tlshash":"6da002516260358e9dcf28486f447c52d12557e1b00bca429add0f14a61ed1c924164a","size":62,"data":"","first_seen":"2026-10-10T22:14:08.991076Z","last_seen":"2026-10-10T22:14:08.991076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d62384701d91ba6411319a85df8ca8ac","sha1":"374dcc98783c9543db281a1d034a93f6783c3506","sha256":"4928de66de5749085b32bdc42c762da7f2017c960a399d255d6e916077cad106","sha512":"7f88c3959c4a99662df1188fb8eb807944066d5195371fe089629772198adcf2e896ea09d31d5f2dd6bc4b6ce4c495961cb64dd40efe9582663699e8c90e7a03","ssdeep":"","tlshash":"29a002016275655abccf3c483f446c02e53853e1b00bc94362e60f14651e81cd18168a","size":60,"data":"","first_seen":"2026-06-20T04:02:25.456219Z","last_seen":"2026-10-10T22:14:08.992822Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"27855e66cbab5582044657842d1a3422","sha1":"cd5e918811285fd15226c2d1f27385f51f254ac5","sha256":"e4ed70192e94eff7261d2a71d24bf70f6c5d3f7bec5666a2d2d49e0fff6eb21d","sha512":"309844e73b8eacdc3547a015a44bcdec19e4c1e688c34c92bba4a670bbbd6e0d14715cd85a5201c0d4b2e56128b4dc9c6d3cb206072bf22ff14c965af063359e","ssdeep":"","tlshash":"b3a002017a70154f9cdf28482f846c5290b847e1b04bcd0292e60f14762ec19d95064e","size":66,"data":"","first_seen":"2026-10-10T22:14:08.995715Z","last_seen":"2026-10-10T22:14:08.995715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"7faac37e7121109852f410acfb62f1eb","sha1":"edece1bf084e3b81804cbc05a76fdd3497fc11f5","sha256":"a9b7cbc09b076bd72760fbc77ced5dc28564a6c9f84e8d0b4e4b4af35deb8627","sha512":"cec946de06d98687c12bf45ae5ab682911691dc12b307e8f377f180d368780b2873b5e8f923a171e0525cbaf50a89219d60ce5bd4022edf5a172e2b751135213","ssdeep":"","tlshash":"df900211626015da9cdf28895f44ad02902413e2b01bc90256d64f64660e9689140a4a","size":57,"data":"","first_seen":"2026-10-10T22:14:08.99831Z","last_seen":"2026-10-10T22:14:08.99831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1fa23bfa2a962b8d46ba189ac1fd107","sha1":"4a5070757ef6acf21cb7acf7031fa839e0b0d354","sha256":"be3edad2a3c44a4a7f84dc89fbc2b5df8747c85a5bc6fbb33a7a43deefbc7783","sha512":"17b481648c7bba8546e2e346abe637a08ab7f076fbeff57dba75aa9d0f3c0d1944ca5d96ac3e9db4461c0ea2808c99e12dbc1a5b62d9eca7e3963cce2f52334b","ssdeep":"","tlshash":"39e08c9804fa102aa9bfb36b871e664472358492250cc982b14c8b41bf9407bc2a5f8e","size":292,"data":"","first_seen":"2026-10-10T22:14:09.001297Z","last_seen":"2026-10-10T22:14:09.001297Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9db071326a75247b4476f618c4ec32d","sha1":"c8a6fc867b9e2365c688435c311058f76b23fdb8","sha256":"d5db0dedf7b1f9bbf7be03e9d47ef158ba44ae4ca39ad3cc41774a51a386f5d5","sha512":"23272a2a11d8f84b2a7339786e534fff5a858d3624b5bd155f37961390dd347d179a2bdc65bc867cf4ea12111fb49198c03c923cfdaf3481318cfd72b6923361","ssdeep":"","tlshash":"73e0869804ea102655bfb36b471e6644723584d2150c8582b14c8f017f5407b8295f9e","size":292,"data":"","first_seen":"2026-10-10T22:14:09.008129Z","last_seen":"2026-10-10T22:14:09.008129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1fddd44489d1906e4f3e9abb30ba752","sha1":"30e667bc0dc50587cc854ebc71f202ef95657fb0","sha256":"8d9fae29668ff693da85962ec82c645b86628ca5a4a144beb5444c3bf27240b7","sha512":"e53a25666a4f28af592ceaded32622ce2070d1fb64bed8c02e4e294e8249c9752f1dc5b392263cd026b01e33f3a49a5e0cfce9848667d07063240590d4e18dfd","ssdeep":"","tlshash":"bfe028da74250c7275dd05f533b1a11c714311186c091d22cdfdc91468585c78c134cc","size":342,"data":"","first_seen":"2026-10-10T22:14:09.012806Z","last_seen":"2026-10-10T22:14:09.012806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"61547880000ccbb9d9406b6aac7de113","sha1":"a488b173d121ef343e8aeef4d5293305b244377c","sha256":"d64374246da9fabb92154845d1eba4a093084b52ad87e31c311a9725382522d4","sha512":"2cf486d07ccf7eb9c80b704498e0af7fed9ee1ca3c5ea41a3eda54e798570abe3ee8d92de2f3a8b32adb4d9d6f30906efcaee9bfdcfe2fff2fa52e9e70501cfc","ssdeep":"","tlshash":"fa21d35aa1d87330517f7e35c7bb50802e267427f64e1da5391c0adc0f449f4a015a3f","size":1195,"data":"","first_seen":"2025-09-20T10:37:05.964936Z","last_seen":"2026-10-11T02:53:53.008256Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d54a821c4848222c68e8098be777a970","sha1":"2cc724331743c835bcd2f0c1c2490b508ce8ee24","sha256":"f8d2649eb2889b67c9d2681d4ab8257dd697dc11c1421673b32d088cafe81dd2","sha512":"3c6d0af6078448b5a865d106bebf2abd496c05b5707733f10b0eb29127f0db9f37162bd076bbfeff74595898edba5264b0b53d149986df679ef1899a52b49a96","ssdeep":"","tlshash":"6dc04c6b774c19e5124739d01f9f62d53839918876517c118caca905d49089a6d06f9c","size":147,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-11T21:45:49.8054Z","times_seen":32358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"48b6011547b6a6236150def12bbd01fd","sha1":"ea6b396458cd46d4b343195f4fb4d86c92e2917e","sha256":"eb7163606cd4eeb75d4e5d5da89f47ceba6d97607eb294380704036a4624a38f","sha512":"92d2c515c4ac5e2d851025921f352fd376baf43b66fec20569b46d0e296c6afdf70fc731c8591032138c0273d32b07e1428873919c85931aa07e53e0ee4cdd6f","ssdeep":"","tlshash":"47c0c046bc0070c421332c3148328734800c2c70f1418cc5dec0ccbeec323402cc5144","size":175,"data":"","first_seen":"2026-10-10T22:14:09.02481Z","last_seen":"2026-10-10T22:14:09.02481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1669ade4c2a115679c641c3dd807daa","sha1":"4c761a75cc875e44ab27274220c662ec21b7bb81","sha256":"ebb09bf13835665d98aecc1bb173399420e059f75d81b8df46fb4fcea35cdfeb","sha512":"15d6a21268c7985a8cf5d3914eb6870f4f4478cb8d3d37803179455b34859be394981067a6e451aa4b642f9a1b64bf31a018edd31e48f80254973d4db753958e","ssdeep":"","tlshash":"ee0199126e14a835f7c2811141ac5bfd327713b6b8c0412dd3ed4b5cd22cb81e0d2a0e","size":735,"data":"","first_seen":"2026-10-10T22:14:09.027342Z","last_seen":"2026-10-10T22:14:09.027342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2aa3285a72de8526877fe0ae1c0e921","sha1":"3d97c57aaf793b973fdbcbc326c1c8165654b549","sha256":"82e5d9bb1111ee27779d1c09be4bec41066c072924254f41500c56e5b8e8bbdc","sha512":"a3eb81ac8ab31eb2868de065c96de66d3db76e12166ac6c8117893a4d36f6bd691833b511befa1cc61b84d694f440ef9529d07ea4390542df5f4575211b4fbda","ssdeep":"","tlshash":"3501fd29b31cca2cb1974101ef30ff3d1a2830116ac83020eebe0878c2a54ad24f769c","size":795,"data":"","first_seen":"2026-10-10T22:14:09.029213Z","last_seen":"2026-10-10T22:14:09.029213Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ac5585d98646d255299c359140537783","sha1":"7dd9b33881225c7ac41dce30c1447db47c41d4af","sha256":"97a62ad21d79c01cceb7767952acec4fec86bfe909b06e5f3f6963365cf91ab8","sha512":"3bd4c181f873c832f1ed5d3425813fb5fe55eb9ee640994032facb30e7b9ef1693755f1fffe4eb7a07454deb098ec5709e483d82d60bf35c9ed744a949492d0a","ssdeep":"","tlshash":"c71000c00000000000000000000000000000000000000000000000c000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:28:47Z","last_seen":"2026-10-11T07:00:08.325147Z","times_seen":2841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"940a2c41c06ddead3211a7f9fdf953c3","sha1":"f4f0a181128d7eb86fd08e0599fe49b43c304bbd","sha256":"8052bf08b174708a0517645ab5809a53a67840926a1ee2b4a96454388eb4f273","sha512":"04348c499a6c00d5d0ddadbe1bb40558aac529b71bbb76ba95b44092707833d04d9aff7257d64fd4d61fc07871452ff6f2f0cc7521e5dfaa142f2003d87409ef","ssdeep":"","tlshash":"cbc022d0abd288b8c2d2842b0333221145cc1a88aa1a0183a102fe9da2f218a0428eca","size":185,"data":"","first_seen":"2026-10-07T04:47:05.03694Z","last_seen":"2026-10-11T07:00:08.324589Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dc758633a258d14f1158b67378a9d7e3","sha1":"3ed2ac34d6512ae9dc1603fff672d6d630d4af93","sha256":"f96d645ffeeb62ff7fadd16e9dad899e670a3ab59fdbfe1f846576848c3effe7","sha512":"4b5d7145bd3c31099fad5eca855a065f2bf13239636314d00801d9d7c0fcaf702534e993c823e15aa4fdf28adc7170f461a674e6b2c1821000c05d3130c2db3a","ssdeep":"","tlshash":"c7c080417595416554a112d5375b775540de71e61541f4cf3513c1d88c791469c3fc05","size":164,"data":"","first_seen":"2026-10-07T04:47:03.460121Z","last_seen":"2026-10-11T07:00:08.286068Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2afddb881ad55678674cb793c5aa7439","sha1":"0527244290320b6ce040e810cf94c37a1ef6fc5a","sha256":"64cf9bdc636bdfa60e460c13fe2e4522501f6224e3239f97a732e997a7ee2e67","sha512":"2e83fdababf006797adb9df6631916671620441a576469fb2ef57f0630a486001df5c4cc2bde37b50d34222680e67c5b3b5e45555dee5a8af4d63fb8e0316da1","ssdeep":"","tlshash":"a8800404dd0c10005111505140c7004c041714543750441510f504d10d311471501c7c","size":34,"data":"","first_seen":"2026-10-07T08:18:48.314879Z","last_seen":"2026-10-11T07:00:08.318312Z","times_seen":751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-10-11T21:39:47.958016Z","times_seen":312830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T21:45:49.775933Z","times_seen":276135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12347d552552b7eb8f1aaf47a5774b81","sha1":"4701684cb61e83493e14555659e2cd07ae9aba3b","sha256":"63b85d3cc0ccb498e52cf8dc76db5119713a85031ef4a8e99edd01e403cb08f4","sha512":"a0b95f6914bf92922a13db3f81f5612e2a360e0b3bb0f6ffabbe41623a044d662e27a216d788399cad99c8ec18c5f98f481e602d672de5b3b97d5da8ec930e4c","ssdeep":"","tlshash":"6b41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2083,"data":"","first_seen":"2026-05-25T17:49:28.102585Z","last_seen":"2026-10-11T21:46:54.310945Z","times_seen":34349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"742074e9af8d824ec8a576cb56c86d60","sha1":"62898c800c3909188d1a0248ba28c77f6de44bd9","sha256":"e236170394918ca04e5d6d2341b25c3df8c2c23f60bae9e199ccd451d8b016d6","sha512":"71de59e750739f735b65aaf4ce9cd001b28a83dfea130805c4b50e7c706825ed0de81e21c1d1f3da11784c8120b039f4a6d10418e33186f25475e1fb599c66b9","ssdeep":"768:JCMBLhGD4JQN0gHwQPDi7ZMR3REJj3i9YMEtPmq2N/ZYIveMGLnLG6ouUhA55+Xc:dGeYhSME+nYpMGbLGZJh4+nW4S","tlshash":"ed8341240868a872c8979547ddb9ff3e9ce4167a0bc9966ebdbbc35c01ec6510e9f403","size":86593,"data":"","first_seen":"2026-10-10T22:14:09.044773Z","last_seen":"2026-10-10T22:14:09.044773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e226125e429d79c4c368581aa455eee","sha1":"79fa2f523a0ffb2867b44afef3e154c3dc1fb5cc","sha256":"d50c6291d73f2c5ba6b2dc494e09fe070ea0a6c0c4ce3b3c6bc4156ab944dd72","sha512":"06a7818b0a33701b90d20662e1d1a85f90f78af228c2efcf6717d56f93b7502a5cd540d471f113376717d6bd8a8b0b9f198e16a65d6412f3f946dc0e6c87ed28","ssdeep":"","tlshash":"96c08c69d3040b704270a810ab0b3b4f253700228020c845b210a60038d0b078d703e2","size":145,"data":"","first_seen":"2026-02-05T15:28:48.153036Z","last_seen":"2026-10-11T21:45:49.779425Z","times_seen":127946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8501e99db1c76b62dea75ad32747a129","sha1":"791537ba64bbd81ed1644b015c4830d897182fb8","sha256":"25289f89e8785a11e468135cfa545b64462e90a61e62ee0bf9fe2dce0898016a","sha512":"d34b3b6f94043e080daf7804d7305efc1bade1433a80d4c6c547ab1325aceda8235ceea8bd99062a7737401ff5d767d46e4d24a972bfa88e9c6b197947041f77","ssdeep":"","tlshash":"7b1135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1032,"data":"","first_seen":"2026-05-25T17:49:28.106733Z","last_seen":"2026-10-11T21:46:54.315804Z","times_seen":34246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T21:45:49.782433Z","times_seen":274349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"291736e9b047cb158de7cd789bf9bea7","sha1":"09094f347d8d6fd11840dadf5857a6cf1360516d","sha256":"daad765fd04bbe31cad558fd0c9c46a6a9dad5a322f1815a3322a15d9f68ea67","sha512":"2c0e03ea06f2a0471634e0e1ca5f746a762e8c5875b0a3a6177c1c6fdaecaa155fe7e7f901ad55ea75fc30b1b59746fb2571736929aceb1470c2a4f065b2e907","ssdeep":"","tlshash":"6301475c06046cace905488cc782bb614f7c9233ae013021f82f460dbaf3aeb8930457","size":721,"data":"","first_seen":"2026-10-09T04:36:03.325239Z","last_seen":"2026-10-11T21:25:07.095131Z","times_seen":1550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"775303dd9b4b6e7ae9337ee6335afe68","sha1":"e8f6a08f0cd489e3293c0199bfca5b7b08f3f7f8","sha256":"6df75016c9aa9e9652673cce18bb673593f52f69726037d1446eacebb5087e1b","sha512":"4ba1d5f65730d56d22c90319d19606b754249eb5aaaae0f81374d4bb20a4367afcd48cc7c04f869ba0686a8c7974d4f3072eabbddd56a0e3c6cdb793638a3dae","ssdeep":"192:yzEjQfb/44TmOavb+Nvyv8vYl90sxVjoObVCpO7sTM73gcAKc3Udq6bRXnLNy9nf:+OQfbwKavBvWY4sxVMO4E7sTMDgcA3XL","tlshash":"eb22b80fa38579ecd7d15599b7a36b036cf4811f53082a1d88cbb0542cddf19429b9ed","size":10602,"data":"","first_seen":"2026-09-30T21:43:38.494133Z","last_seen":"2026-10-11T21:47:11.287234Z","times_seen":6089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2f2d56074b2d75ba17fbcf8816eeac6","sha1":"b36f1362008d35cd3c2d04e71904d145819b876f","sha256":"aa47e0b98c656c8493611e8557ed91fc23824ef5af962baae1fac219adb1bff7","sha512":"3f4267a38baa94fbd4ba1282ea7561bff8958a9ea65eab293ab7ea9b89f66b82a442289028dface4bbdc6c5cfed9b6bcdae5c47d231412319d92b172e24df5d4","ssdeep":"","tlshash":"edb02b0787311c1b4c801d24690909620d04c66002e54bf85441530071c5220241fae1","size":119,"data":"","first_seen":"2026-10-07T17:33:20.048278Z","last_seen":"2026-10-11T21:39:48.002499Z","times_seen":1145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T21:45:49.787164Z","times_seen":271016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f20454485d3fd87890ba497f36dc89ea","sha1":"1dce851714410e3ca9fa532b0b21ca4c9de06886","sha256":"4628d5fe007f211f9440286c75bdd07b8bebabcdb43ff21cb6770443c615129b","sha512":"e581d4897e21214d3c08d9936cc8acbc54390168eae21610bda7ea792c785f1315f5293a5716275119d8d6f95271539e961b7ac224b466637696ea8a49beb8a1","ssdeep":"768:V6SBM8IfgdAE8jDo/uZnAgB9lFBPKpfnqJBsBRy88ExR8YCYGkV8O2K2yvSoJ/T7:A+1/0AgBzY5BMJExR8YCYGA8O2K2SSop","tlshash":"fa03e1c7e608e7f858222f93881dbd6c466d10b3c031b5e6aad0f94fd289961ad3c1dd","size":40553,"data":"","first_seen":"2026-10-10T22:14:09.060485Z","last_seen":"2026-10-10T22:14:09.060485Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf5eaccc8dd1c7efd3ed562a958ecc22","sha1":"051667685839e03c9b2ed4fedd2396e99d071230","sha256":"4933989205340f310f6d5e94c26a578f259c1a3d28135eb6dc988b638dea00cc","sha512":"0b94e2a3b12376d779f5ddd258827dcacba388423ca2d941eeb249931d37460bdb37d5fb0b9caa3076325a7103d272f8c99ca93bf1a0232a9cf8db0190dba856","ssdeep":"","tlshash":"02a02223c828c0230038023000833022e00803208800a00c038a020830f800bfec80aa","size":62,"data":"","first_seen":"2023-12-20T20:30:15Z","last_seen":"2026-10-11T21:19:44.058015Z","times_seen":2381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a2c32f2e39fc248365b9b5ef5ee7fa2a","sha1":"328254286f636a6e4b7348bbe51144168f6d0881","sha256":"6d3a54c507ec8b7aadc8058bf1a0498fa0b7c57eb92be38a0043ee5f3be86a3c","sha512":"366209b6641a2729546d5b36cd769a5ed0b2ccc7bfad00b4b856d1df3d61d936e7c41fd28aa0547f3c737abbda6b088f97596f6815002c4ef6fcb601ebee42ad","ssdeep":"","tlshash":"5f7000083c08208082223020800b00080022022300000003080000800e3c80a820f808","size":22,"data":"","first_seen":"2026-10-07T04:46:52.416076Z","last_seen":"2026-10-11T07:00:08.261696Z","times_seen":772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"def32afa1fd353a3f052ca7761a1cf96","sha1":"744adae872376dc86913e9456f40f33a643a898a","sha256":"e76240836213831d485d35232afa0addff3b4c200709ff8d05fb993cc97e0c52","sha512":"37f3aedefb96ff1c9451182c3265dc1ee156bef5a4aca5b299bbfaee701d518ff7d7221b1b28c7c9b722fb04b1986e66fb9d6c8e9c57aa05e6f75faff34700f9","ssdeep":"","tlshash":"35f0dca4e237017a42944a64450713154290a874ac3e36bdfe8d9ad6a532c0b245bee8","size":472,"data":"","first_seen":"2026-10-07T04:46:52.720886Z","last_seen":"2026-10-11T07:00:08.273461Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DZ0SRGE3ZW\u0026cx=c\u0026gtm=4e6a72","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"316897b62ac16bb977dea869dd85342e","sha1":"073c3abb0e60f06c75ab76489db5284fd8ceac10","sha256":"4a0de0d2050bbd1da8644dca0672d0da6d608883f8fda4a02ad4518981f215d7","sha512":"b6e3409644c3a3bc4b443af5150f4971d697cf828ee9ca7a86722a1f6f00f14e3e42cb1398432da2ac859635db7a2c82a6c166810e37a63cfadda77183e5cb1b","ssdeep":"6144:cfFsfCyqMnhIma7ulkl+cfIb/EfD3ce2Xkcw2rSFergOp:c3EKml7kc/pB","tlshash":"dcd4f9ceb3c67422a2daf568943f01cb697b29a2b45cc89bb18ddcf01d3454a5163f78","size":634412,"data":"","first_seen":"2026-10-10T22:14:08.869738Z","last_seen":"2026-10-10T22:14:08.869738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"15995b46026ab23a13093b7a12585145","sha1":"1369374de7af3b2cff6da778b385b5ba40c2a947","sha256":"a1c64560afdaff50afbd6d75371d4ca2065d1683ce7a57c410df0e7c4d6ae966","sha512":"56d03658e89022ef21821ba38e4bb88870860ec934e58bb6f70865b34ddfbadad935a4779a6be4532701c2f9a982cff91c77774c25fe3b57addb19dca83156a0","ssdeep":"","tlshash":"35d02bdda404324cf3f390f2553fe53478c83003151269081d3d5c56f95140a4425642","size":262,"data":"","first_seen":"2026-10-07T04:46:52.765442Z","last_seen":"2026-10-11T07:00:08.317351Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/gdpr-compliant-recaptcha-for-all-forms/scripts/recaptcha-gdpr-pow.js?ver=6.1.0","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f85f5ffa923ae1ea2e15ed44440cc48","sha1":"77d10eef9b63d4610cb0b23b6fe0354b66e37244","sha256":"bb7f5d4331b453ccc1dc605a42aba93272dfc94386cfec9b8ea662d0c30f6e42","sha512":"5642b243766010e1a85f8849313b2b586d60c115f9466f365cd1733ba79268b19f37fd60375ab9a7cd4c1c9a1d998abd8cefa746460608bb98ecfbe9c5b16d60","ssdeep":"768:go7jUw9LR0DCo0aXQcy27pQFBmBukf6bnt6hzfIvTGg0xQWOttLuILtjDjAYVCEB:BBIRqmuFBmf6bnWfskouIl/A2v","tlshash":"1403f8d5a79d032a09a630a15a0fa1cef72c9471679408e1ac5ec57c375083e836ffeb","size":40144,"data":"","first_seen":"2026-08-21T16:00:29.649641Z","last_seen":"2026-10-10T22:14:08.953717Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6510f8ba1e64fad5caf237d3a7a93b48","sha1":"5f618a5eceae07f68516fd2982102b7743626dff","sha256":"0b0a7c9c4eb9684272c6b22d8df0bc67e6f536c96945461e5a1fb25511aa666b","sha512":"2e3ea31fdf672013e9d47f559bd6b2c5576e38f53fa428a05372118ca982c415b2a6b9c221666469c8402d166a90127285772abbeb95797a076b9d4b8882de38","ssdeep":"","tlshash":"c7d02b19d5f41b07fdd23af2065db7f945343722fdc08451248549870469cc5a608922","size":265,"data":"","first_seen":"2026-10-10T22:14:09.070704Z","last_seen":"2026-10-10T22:14:09.070704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f91a351ade71a8267dcf10d98076a91","sha1":"a2bbfdaad58f2c0b9131a8bf27d100d12d452c9d","sha256":"a7421649fdd17175b2cfa0c41b83c50d34cea3bb34d348369e4d3fcb847ece66","sha512":"095675e6255b338af72437cd260677480b611607de945586e3d1ba9c24f3e53dce6cfbd1ea8d001f76d1054b0fb839ca6dfa24d8ee34746e08c222d3573fdac0","ssdeep":"","tlshash":"1dc0c046dc00708810373c3088728b30800c1d30f061c8c6dec0ccbeec313403c85144","size":175,"data":"","first_seen":"2026-10-10T22:14:09.073602Z","last_seen":"2026-10-10T22:14:09.073602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0c69d2e62006ba91a0dec25112ec6a1f","sha1":"e0d94db3b8f29d5a770718d7158b592dd96d925d","sha256":"e59ca6dbd07817027c6217b570f5c8e81f65bc4eb9ccef6446e531ffc9b73d34","sha512":"c55aa9d5d6514c675bdf43bc85fcc10bd6eb18e579d1998418c1402df9ae7286d56019b4d87dc702c1d3e185401ff16cf16cb5083bba5a7af762d69e850b1827","ssdeep":"","tlshash":"0d700008bc0e200c2002fca0002b020b8032b8a00e08c88202800088a83002aa032808","size":25,"data":"","first_seen":"2026-10-07T04:47:04.30914Z","last_seen":"2026-10-11T07:00:08.288493Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"55a952425323109d7272cfe9a2562016","sha1":"5043c6aac67d036be4288371cc4041049681f93d","sha256":"fd33e84ecf6352ff85b25761cd323f577141bc008915205e8235f8e6f6ebf788","sha512":"ff8cffb2c9e4087305742632095aef7d6392c7dff41645cfbb0e69c9fc5315f1075b3b392e50b5191be32ce9ea7701818740542ce7ad634a0e256d437e46b036","ssdeep":"","tlshash":"357000082c0822020232302000cb0208a0222020020000020a0200820c3800a000b828","size":22,"data":"","first_seen":"2026-10-07T04:46:57.495009Z","last_seen":"2026-10-11T07:00:08.246646Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a7f413a01714de46cf16b460ef9f5f90","sha1":"0934011db1cbe7613c9013c42adb498a410290b4","sha256":"6da5dc0294a223799b147bf06ed50982532e0a212c66ec9245546c9b6ca6a5eb","sha512":"242c7c63f6d166b5d26635ede55afe94e68d2c092b9a92f9add5bb7b5119de6a676642faf8e6e00c66c1364f920462857abdcb3f4709eec3107c9f6e909bdefd","ssdeep":"","tlshash":"590110af608267969ef2c7d8c08b72651a0a9d11fad94d5e8c52e7347a3dc0be422846","size":756,"data":"","first_seen":"2026-10-07T04:46:53.834704Z","last_seen":"2026-10-11T07:00:08.256024Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"43958787d01b31bf5a6a2fcbae095282","sha1":"184c31f25e2d3abba818f860458cfc7d7075ccfc","sha256":"e1da87f02a05c6ce68476bd5583d4a19803a660a7e79800975c50f2068c041d2","sha512":"962e30980b6996da0599f39bba671543369e3e0c8bb2bfd9b2a1392e92f2b7f516791991bacb9a9a626ee51dbcea002cbc7cf206c9179b6513dc8a11d53ef83e","ssdeep":"","tlshash":"92a022bc3c2a328a088238f030033c8230c80383a2200802880ccca83cb80c8000ac8c","size":70,"data":"","first_seen":"2026-10-07T04:47:04.985588Z","last_seen":"2026-10-11T07:00:08.261161Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f6dce347faa126af3542b2ea5377521a","sha1":"2262ffbd9ba7fe7a5a87665ef136e03962bbb6b4","sha256":"e9cbec42a1562f91e36956aeb32809e1b21dae31475550f6f0f5f98e42721791","sha512":"13ffa2f33d555b18f73b285ae1265cbb06a17f9ac761701a11d76227e8250f6d9d00d5c7fd9b31159fdb73abdaf4f57b449be2b33edf1881d8ded6d7d971a825","ssdeep":"","tlshash":"e2b012ccec68110cb4715594401dc50a200737c151548808154c9585637289a25c141a","size":90,"data":"","first_seen":"2026-10-07T04:47:05.123638Z","last_seen":"2026-10-11T07:00:08.35396Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e8c1de566fdacb4eae85eade05a42d3","sha1":"a0597e3bf08bfbb2f9f97735671f04c8da4c4186","sha256":"2702d8f52413a98e4402f9ea6d959914eb2ac329f5c5ac586d6b87b46ee97801","sha512":"bfe1928951007f4f6b5e39e832bef52972e7addbc1fd3d4f09b433a9f163f375911d83d12ed14564f58dcb14060c520c9c5d6a7408f604d65a00126a3d0fcae7","ssdeep":"","tlshash":"0fd02b6198f40e02fd92aaf0011dfeb993287532eda04a0278419d410894cb1d604952","size":265,"data":"","first_seen":"2026-10-10T22:14:09.102431Z","last_seen":"2026-10-10T22:14:09.102431Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab6d8d0667199806cf7f9610fff77390","sha1":"c8dc53682f4804f66a0f17cda4b0e859d8739a01","sha256":"dfabcd0dbfd578e5707089356e3b50868e83bca2b16ca1bb6b7c80f3f5725307","sha512":"1f684eaadc5d1b6aa97d50fc8cee38eb9095519f8a72eb59456a6ed3c427e4d1f55760c4c28710e7b0ddd7dc3ca00646c2631ff43d360b90d3cf4f589d7cac73","ssdeep":"","tlshash":"66c0c04bac00704410372c344c328b30440c1d30e041ccc5dec0ccffec3234068c6144","size":175,"data":"","first_seen":"2026-10-10T22:14:09.105642Z","last_seen":"2026-10-10T22:14:09.105642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5c26ab5aa413153c8d11037a98443f17","sha1":"32e44cc5d2e62163ea515b6f1e1fbc5f19e938f6","sha256":"b13e289f99215f1054dcb54255d367e686f43b8f2a1a68c162ff6af4a65f2025","sha512":"60f3a6bbed864d68e40f0e9ee2cdd6f0d756d4ff423ec0d4d7d425cd83e3919fe01b3ba81e3df3e195edc3868f2f3c174437d67795064e7ec17de38fcfe7b5f3","ssdeep":"","tlshash":"fbc02b861e8e9c0d988300f0340b106072d4024393501903c176957013fdcd431224cb","size":135,"data":"","first_seen":"2026-10-07T04:46:50.815347Z","last_seen":"2026-10-11T07:00:08.294136Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"884621f737e7b573b9300d52edb48379","sha1":"05b4999a37b1bd951cd79fb71bc7940d424cc0c9","sha256":"41249b199603e5ba2aabed073e1183281c8b38cdc22d31e2067a658732c84fcd","sha512":"f7f28f30b00a914c1402d47c73d3031af03c342625ef14d1b2b60127b43ee736554bf5d1695c998724e31e2c22252edd0cb81b8ae9c6194eca47742a743f0e0e","ssdeep":"","tlshash":"c7100000000000000000f00000000000000000000000000000c0000000000000000000","size":2,"data":"","first_seen":"2023-03-09T11:19:13Z","last_seen":"2026-10-11T07:00:08.296322Z","times_seen":2533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T21:43:22.209483Z","times_seen":303942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"85d1a9c488d7117ea86291a755e5d43c","sha1":"4d73c29a4561048ce85fa0051bb7a6d201781159","sha256":"626cf6d4f7ea4f20b10543c5ee35f352f9366ad163f0e8d43d0c67ee98aec4c7","sha512":"7bf1ed63710c21c67972a5699cc6a156ad77de2647068a85c8932f5c0cbf46820c9cf0a53cca057d5e58cb401d81855c50667de4e98d5346e2d8be500ee4ca0b","ssdeep":"","tlshash":"c71000000000000c000000000000000000000000000000000000000000000000000300","size":2,"data":"","first_seen":"2023-03-10T08:44:37Z","last_seen":"2026-10-11T07:00:08.280853Z","times_seen":1138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fefe7c7087c42e34b7e0bc328fa5ba4","sha1":"9b791479fde70c65eb2f5e4a8c7c79fce43ae50d","sha256":"bc238df63668f683ece39e0e42c25c2daff5bf95258b5312a5d19992a81cb5c2","sha512":"7c615b5fce874115af53e7f872d718a0b2e08c8fdfe7b030c1b3513dccb65fc0bc01ec862904970d840f539c295298925ba48b278cc9cee76dc906ea06dc2690","ssdeep":"","tlshash":"66d02b05a8f40b86fec57ef0012eb5f551687262dee058831442c54145a8c84961c742","size":265,"data":"","first_seen":"2026-10-10T22:14:09.112782Z","last_seen":"2026-10-10T22:14:09.112782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6256341f50c0b9338dd3da371e000e45","sha1":"ba25b75c139866f1313d8e0ebd9b70cf7c2ea58f","sha256":"783639905759b477a922104595ec4038c3f659737cf839809bb60d5cb687ac6c","sha512":"e249eec37c38f6a36155cdc988d41465018b2bf3dd5325a19da84a0deacbde925e6c75acc5b908ab11934665822d348e0649872e20760deef560f25b74a4fa71","ssdeep":"","tlshash":"c1c022469800744415372c2048328b30810c1c20a05188899e85c8bee8313402985144","size":175,"data":"","first_seen":"2026-10-10T22:14:09.118268Z","last_seen":"2026-10-10T22:14:09.118268Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b555773768bc1a672947d7f41f9c247f","sha1":"7362d67c4f32ba5cd9096dcefc81b28ca04465b1","sha256":"2d8e452e1634cae42e17cc9ec974afed94029e20e98fde4444706e3efac1bf77","sha512":"42db83dde168724708120a3082ec43ec55d99e201efadb6a4d4b422eb0ec5bad76f75fb91b95c5afb5cd6f5a15b56d40d5a5a479ecf2860ad68707c3cfb5e590","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000000000000000000030000","size":2,"data":"","first_seen":"2023-03-07T12:24:13Z","last_seen":"2026-10-11T07:00:08.328235Z","times_seen":2868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d2cb7bbc0d23f34c4255d924076e902f","sha1":"9ff31bb53dfc2bff233e882d367714fba682d7dc","sha256":"f078492902275dd3cfc4e676148aea2ee4f88b88e4886f6628d3bfdb6eb5df20","sha512":"72befae742cf64ed70a04d498ec493ab7efd76b3693b1f8debd364741655e46c0ba0557838485ec02978ae8598a09eb844782ab1c2a9f02241b3799fb3bdbc8e","ssdeep":"","tlshash":"c710000000c00000000000000000c000000000000000000000c0000000003000000000","size":2,"data":"","first_seen":"2023-03-08T20:21:52Z","last_seen":"2026-10-11T21:07:40.668121Z","times_seen":2801,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"271ddf829afeece44d8732757fba1a66","sha1":"56ab49a5c68f11cc45c651da6a3f339eff2853f8","sha256":"ca62d5e073f52f3ceb83f72d4d70d4fcd8b1ed041cddfb02ccfbbe1f90134f05","sha512":"b61c7b5a882f363569058106c96d43856e6ab71587c4426ca48ae4979b7c12cf55faca0b09c2db500521cc0814bfcc022d5f16ed7090327b83865dfa8801baed","ssdeep":"","tlshash":"c710000000000000000300000000000003000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-06-19T21:07:16Z","last_seen":"2026-10-11T07:00:08.303244Z","times_seen":1648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-267837238-1\u0026cx=c\u0026gtm=4e6a72h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db786b7d280f5a7a7be4eddb0158b93e","sha1":"2af1bab42ed84f36b24848a368030f5895b701fd","sha256":"c8697f3972fda9770239100b6ab6bcfc16f68958c2239bf137b3146b02a11be6","sha512":"7fa9c1dbf0f58f1f27a2210f6959bd335917c32ffbaf1d6e31509b12d3cddde8ca08e6104e11b6c869569de955b18689be11543ed9f5c85de3e65048579d2acf","ssdeep":"6144:4sfCyDnGI9amdFcfIb/EfD3ceVijGupYp:XR9NjGu8","tlshash":"3e7408ccb3d6b42683a2b574503f018bb27a69d2b84cd889f146ece42d3469a5177f7c","size":368072,"data":"","first_seen":"2026-10-10T22:14:08.852997Z","last_seen":"2026-10-10T22:14:08.852997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a23b7f592ba820adb031b13d8c58885f","sha1":"d08085b723de0381092d12768931f40b8ee337dc","sha256":"63c8d2ba25c2f9c2e9a439a5a43d6862742a0c5beac6daa97bf14b2ee2648deb","sha512":"672fed620548235a6c7e6b67e8a8d7fc3a8c3ae0ad771f804cf8fabd0ca57ed2e900b48a20631b4d4c910f76dfdc8e671b8c25e295f41194152237b92bd11232","ssdeep":"","tlshash":"bfd0237d5c056814b4924be8258fc47810de13533560ce1e845f4d324677dfb91ed80d","size":219,"data":"","first_seen":"2026-10-07T04:46:52.378203Z","last_seen":"2026-10-11T07:00:08.253796Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f8e7f6e4cf7e7e5b1bb52e46bd97632b","sha1":"371028321e826025454fd46d995a83fe0b1281a3","sha256":"e5f8ff303e3198819c299bfbce8b37b4589d676c2e5a5239349630a54e018237","sha512":"1d3f6c3263c0d49d2ba25b55a7cf090e63950ff1caee1cc45abc17dcbacdda858529b1bfaf040ad465af12ec996a95de40605716cf24021f3c618882b60c5064","ssdeep":"","tlshash":"c710000000c00000000000000000000000003000000000003000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T16:25:42Z","last_seen":"2026-10-11T07:00:08.308764Z","times_seen":1599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5e0f2d4c78cdd6c8cf947bfba9d96bca","sha1":"ae83ede9c71c79a3fa7cbbfef3a467948c3967d6","sha256":"49fecfe9d8fa890fe8687d69f6f5d74d08c3d6e09e8182933aa7042c7218ca8b","sha512":"d80229d1255d7341144389f12fceb0a490ab5557ff388623aa6fdd6a66d8bbaecb5c682ff1382babf0896eea1ca9d871b7d76399959d0fb0228787e37ee3ef4b","ssdeep":"","tlshash":"32d02b5f69fc6e34472336015cc7400933f3083627184ac880f37e5049231d3c85b90d","size":259,"data":"","first_seen":"2026-10-07T04:46:56.42801Z","last_seen":"2026-10-11T07:00:08.276772Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d53aeb78abc83a52ab8982f5c82a3d5b","sha1":"df59735e1f2bd92c7fb70f7764a21bb0a207582b","sha256":"0e6fac6a3ad129a64c2b9d6eaf6680e4b5f95dcd36949dad585415b017633875","sha512":"12dd9ee9eb176d5208a0af381ba792fce1c0a4be610980c8a9b6b8dd1d5e1a93dafaa1f451c9e0deda13ccb81b5f306096e9a3d7c8d29bbeaa6bece4a8165397","ssdeep":"","tlshash":"c71000000000000000000c00c000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T13:00:50Z","last_seen":"2026-10-11T07:00:08.232007Z","times_seen":987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ee61872845e3949b2b69e69057942262","sha1":"295d438268e947ce78f655b346e25ddc2963b585","sha256":"1ae4f50fef8cdbfd9a6177725648372d25ce0d632f487faa2bf44d293e7c2a54","sha512":"d5abf92def8663739b49385d5ec782af525cb9bc80d2f8cc53450eead3b1c07013f2a4c3c5c420a4f985fa4a02bc7eae92416121ad31956a9fb5d25c9a903432","ssdeep":"","tlshash":"92e0c2bc3b9754ddb02b7cd4d04aa1188c8dca502a8314674a1343d94259b257a8983c","size":296,"data":"","first_seen":"2026-10-07T04:46:52.502158Z","last_seen":"2026-10-11T07:00:08.336367Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"346b81a32e7007eccadf60252bb599f0","sha1":"ac4ae97285c19b13201deb9b192d921316db3447","sha256":"33112ee14ee469c3eb52fe90322ec81dd404a0093d565a6d71ce77cbc8124e3b","sha512":"18d6f0cefec6d21330d55ba82d288458e9b04c479a561a58d19a9683013b1209c06e27cafe85ff205a7f71ab22632734922540614426b2b4ed14baee60d4ba15","ssdeep":"","tlshash":"c71000030000000000000000000000000000003000000000000000000000000000000c","size":2,"data":"","first_seen":"2023-08-01T19:52:10Z","last_seen":"2026-10-11T07:00:08.322594Z","times_seen":1033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1cd901e1753d2e99279d21b8628bb0d7","sha1":"8eed7a98cd93565765f6427f7d1957dda93b7733","sha256":"5c7c4902e437717b949c7491be1ca33b3c747b79f48afddadfb6edc94158473d","sha512":"e9cdd2d8c01fc373f8ff929b6340fdb3f7b096c96b2ac5bac139215179622989088ee1507922df8be0bd97e97e94cf460e95d630d8fcd8f6e726ca542ac12b18","ssdeep":"","tlshash":"d9f054d9782921b7e970c36d61dbd3850cd4f620f53e1c8cfe40cb9662a0a895867047","size":495,"data":"","first_seen":"2026-10-07T04:47:04.949754Z","last_seen":"2026-10-11T07:00:08.320549Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d5492076bdec49fc1afe5db862c8db26","sha1":"9a18fb4df5caf4eb474c1022a03a04834220c76c","sha256":"46379e39a6f96560a35830309848880bc611e44af13c317e6eacc4e867847cb7","sha512":"3a01ac9950ab152805c538e4ad3b3b4311c1ee0ac597c29a6ec8f20d367b6edd40600d72a0c3ac7dc77eab880b23f1b06ff36daedb9ee0a8350471ac9021f357","ssdeep":"","tlshash":"c710000000000000000300000000000000000000000000000300000000300000000000","size":2,"data":"","first_seen":"2023-03-13T14:57:05Z","last_seen":"2026-10-11T07:00:08.300323Z","times_seen":1444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5dfdec4b84e4d1bb86057cd65cb17692","sha1":"daaef2f7a040e2bef5dbe443a3fb9f8ca2c5bb02","sha256":"ba02de2b6e6afb3c47a5fb7eabc4e4529df3954acb4dd05a186b6f3adc7fbeeb","sha512":"fd00c3d31e20d1602acf1d5ae2ec9b3dab8d695ed285b25f73d8e3198948274944d28cf3ec9ef3e21a17191d6d52a92df9d19dc55a6323f963ed741e2cbd967c","ssdeep":"","tlshash":"19e0c0bc5071e4267af318ebddeb3154b25207b0d1488c9c13098dd602b7df289dc883","size":349,"data":"","first_seen":"2026-10-07T04:47:03.413516Z","last_seen":"2026-10-11T07:00:08.25549Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9947639bf24a4424369f6df94fa58cd6","sha1":"cba9856000726314906fb9b762a1feaac797c2f1","sha256":"493663171cacfca1b0cb85e84676dc49f6f077707d5c43819063c27674c62fe2","sha512":"043018df3edf99ef1b21f068c8543c7b1e2ea804b51739b06d1ca7d786a6be5b3755db6c14c2f3a6d11ef717d051084fe8fae3e6aff3447a72e2e20ff110bef9","ssdeep":"","tlshash":"8ef054d9782921b7e970c3ad61dbd3850cd4f620f53e1c8cfe40cb9662a0a895867047","size":497,"data":"","first_seen":"2026-10-07T04:46:50.91289Z","last_seen":"2026-10-11T07:00:08.286538Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-10-11T21:45:50.002767Z","times_seen":199165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"010d7b897b3be688d3ae67152ddea942","sha1":"17a0eb1da316cc7cbde0bce5801ae80ea24f3aab","sha256":"7f46682d571d74e336e1ddc7946e235137e35ba18e837d00bd6c2504c60a3046","sha512":"153c55fb5ef920013fb3020e754cbe27547689a11942370d7c44bc2a1feb404fff1335faf00ccd22bf9d29a7392b3939374e0f1055515b173f81636027e24b85","ssdeep":"","tlshash":"689022e02c20b000020020208a3f003222230083c08023008000ca2e2c30a0808c2880","size":56,"data":"","first_seen":"2026-10-10T22:14:09.157061Z","last_seen":"2026-10-10T22:14:09.157061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"34dac224a58896bed51c9d5ea3efd150","sha1":"7190e24046b377533a8b86d137d4bf7816619a0d","sha256":"cf9eb0d97cecad85d3ad443daf285d0c40582d73a2ab720c75cd3a2f55133f66","sha512":"848921c8cffff93607f976e0823d888339451963b0cfa59eb3737b2880643914847c1ffb9a6b3a4ab546fd96d34a8fb239371e3bbd441afedc1edd5de622af0b","ssdeep":"","tlshash":"b3d02260084d41bcfc168c6f6a4740480b788a0a83f2ae222484a4922de083306aba2d","size":206,"data":"","first_seen":"2026-10-07T04:46:52.397256Z","last_seen":"2026-10-11T07:00:08.303831Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"43575ccd573f6ce83c2ce1c4a47cdfdc","sha1":"768f85adb8ac99e2da94600ba3b23d92d468b742","sha256":"128e034a10d37f80cf41cabfb95c452c6ebc72320d5545ae443fe85c39123067","sha512":"de1ed8348c6b0feb777afd447b32f941659b6e71e5f67cec14b2fe015460a82dbaa94f9191e74a4602c935f88bbff72b0238a461b5488d932eb1e68b700b1e65","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000003000000000000000000000000300","size":2,"data":"","first_seen":"2023-03-10T00:34:24Z","last_seen":"2026-10-11T07:00:08.28454Z","times_seen":1149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"106a1944148c7e4bc3a9d01ae2b3b7ad","sha1":"9ceb8278db355cc6635b89dedd2db678b7cc0359","sha256":"c0608b6dff94c91c38211d941e5993c2e2f01a94ae6884db1cad5cfe369b6eff","sha512":"9bd94dbe7ea63a11abedf25eac456fd06cfa23ad82a7d2e817bd068833f9588244ac3aa9ba2a71132133a5068a60ba8d19fa1969ebb55f8a4ff2ffec1f02e14f","ssdeep":"","tlshash":"30d02b9dc4bc0e06fde1bef1112e6fe412683133edd079411444e547455dcd1a91c511","size":265,"data":"","first_seen":"2026-10-10T22:14:09.172151Z","last_seen":"2026-10-10T22:14:09.172151Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e1783d0c2d43f17cf4fc72d145766e4","sha1":"e3859e2c233654d72930552c696b5e7f3106c73f","sha256":"3bff842b9d87cac2387924e2543d83de2fbc4444860912c0d8602f6d082b8b0f","sha512":"57dfa824f81b3b6a3d9fa47456fb62399a29a9542a7ecd72ba690914a4e2cd6362c8ef82641def7ffec626353519dbeadd0ba1785b656460e58c494a9f18b9a8","ssdeep":"","tlshash":"7fc0c047dc0070c410332c3248328730800c1d30e0418dd5dec4ccfedc303403885194","size":175,"data":"","first_seen":"2026-10-10T22:14:09.186257Z","last_seen":"2026-10-10T22:14:09.186257Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","size":1720,"data":"","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-10-11T21:38:25.290233Z","times_seen":164749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1a86e1d09ee3391038301d470338a9a5","sha1":"50459bb54c5e275b45941b4ba16637de2b2fbce0","sha256":"3a0c5bb935a40d074863a65e43e22dad279749a13d972c7b157d3cc481382dba","sha512":"9c1e4885815cfc70d662bce55e0758ab87f311f709cfb98e025a20850be73749cc18b90e63bcf83bc17b699220fa18188b7c96651d5e7fe16655e8157282eb92","ssdeep":"","tlshash":"f0c02b8627180313c3cf1340c003832f5450148a7d10280cf3c474c7c1ea64548e7d0e","size":137,"data":"","first_seen":"2026-10-07T04:46:53.094634Z","last_seen":"2026-10-11T07:00:08.282547Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8277e0910d750195b448797616e091ad","sha1":"3c363836cf4e16666669a25da280a1865c2d2874","sha256":"18ac3e7343f016890c510e93f935261169d9e3f565436429830faf0934f4f8e4","sha512":"48fb10b15f3d44a09dc82d02b06581e0c0c69478c9fd2cf8f9093659019a1687baecdbb38c9e72b12169dc4148690f87467f9154f5931c5df665c6496cbfd5f5","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000030000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-10-11T21:47:11.401138Z","times_seen":60469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cb6ae92936e6001c38416697891558d6","sha1":"cf2512fdcf87e06bb4c9d1f39c3aa2c1d0845568","sha256":"9442d284ddb60785e62036a30ede42247c7d1c63a14eaa2dcfa8671c60735155","sha512":"4b572bbb6adba29da5d523cac8aaa31990d39a21f46111689b38becbc8b115d739d964a515417fa0f1975f68fcc8371658ba76411b9ec00a9965c64edca00525","ssdeep":"","tlshash":"79d0236e6d0d951748431de7184fa1bc645937937f612e17251154e104e1d74f41c817","size":221,"data":"","first_seen":"2026-10-07T04:47:02.707052Z","last_seen":"2026-10-11T07:00:08.302648Z","times_seen":786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f59c823b53feef23d011696b7b9be3b","sha1":"fd2d341755c352d58e3ee5675136e69136446700","sha256":"0fedbcc7a48e45eb96674f18ac675e810055f37815a81752bf003413d91ffb81","sha512":"a3a4dcc302f96661f0df50539b3cc7a1b1ee75869223de967a01b464d4882c485e4a1c2d10389cfcd41b78871ac5cd5cdf231672681ec1597e38e3a8856f508f","ssdeep":"","tlshash":"60e0d890bc2c5ac5a4dc56b3c04f3611801e38f3a94a1a5ee622fb11d7a86478f63b86","size":384,"data":"","first_seen":"2026-10-07T04:47:00.461474Z","last_seen":"2026-10-11T07:00:08.269592Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1876497f16a54cab77d23402f2ba1ce7","sha1":"7a1326034aeb232c45b89ea7a03f34d33b192a20","sha256":"e6134bd8b730dcf9bf954a294d23fd3fa2a151ee7feb4dac11a17540ab10d934","sha512":"ab9f33a36c5202b7bed05e3c84b0e297d836ce49dd94b2232d669adb6b1903568a21c2658dcd162d7646d633af005601354fb697cba9c48e53c30c4080f34034","ssdeep":"","tlshash":"54f02ecdf295b8d14752b634486f413f5a35b94065180b0d494b84e5543193ea156f8a","size":469,"data":"","first_seen":"2026-10-07T04:46:54.604294Z","last_seen":"2026-10-11T07:00:08.252611Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5dbc98dcc983a70728bd082d1a47546e","sha1":"02aa629c8b16cd17a44f3a0efec2feed43937642","sha256":"8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643","sha512":"0daa7cc9865200b82c0ebe57497197a804fdc301ef7a088dcf0acad7e04a007f52e7d0d9fc6aea387b333a4c72de4fbee3876dc48f19692739f7c0ed4a3eddb2","ssdeep":"","tlshash":"c700000000000000c0000030c000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T12:59:06.626957Z","times_seen":53685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"28375a6759cd72431278b6a61e5bd26b","sha1":"d1db5d40776fe12ce8c311a8321e1726c9b53a36","sha256":"e7945d0a3fd6442bad8c3775df64a93d85ceeca957313292d761ba54bb1aecbf","sha512":"f8016d78c6c5f3fa16f3e220804918ca6454f2be89b0219472d363eba71aea396673235b9c949ce5fb13b7cc8720114b5587745cd280b06ad46abeb4bfae1ce4","ssdeep":"","tlshash":"03f0dd3a608087a50eb765fa007b384c93a75504bea63e4f6d106399bcb4587e48af8d","size":620,"data":"","first_seen":"2026-10-07T04:46:53.604067Z","last_seen":"2026-10-11T07:00:08.307651Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wc-add-to-cart-js-extra","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"938278cf01fb98baa43dfa234dc56a47","sha1":"705f010d533c2532d2af4bba433e24a92077d89c","sha256":"0fce2b941b20b8d8b3c55e620d96d4d180123a30e573d7756f24d71f1682c516","sha512":"64b495b7ee4ba53e6033ddef965f9e16d794d904a39a059a0b408c639c33086985cea41d7ed0608dd2564741dd4916b1e8dbf0fee31f0e336c57b20611eabdd6","ssdeep":"","tlshash":"3af0cdd5d2ad9d53a7d57ef8140535e271602453e595d44459d8bc840a10546c91851f","size":451,"data":"","first_seen":"2026-10-10T22:14:09.206594Z","last_seen":"2026-10-10T22:14:09.206594Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"79563e90630af3525dff01b6638b0886","sha1":"68d2ad23b5e1102797ff78d3d0d55d97ba75c268","sha256":"9e507a6dfbf98393bbf23d487af7f1c5b2e8ea0635e3f0cddeac3a9a090a3dbe","sha512":"c11c66b5e92dce18ce4e6c7c9d956d09afd5a734c046f8fe645653931de1db0ef639567724e65e48f05bd922a78fa1547c86996fd5de1a62573c4cc2f46d2300","ssdeep":"","tlshash":"c710000000000000000000000000000000003000300000000000000003000000000000","size":2,"data":"","first_seen":"2023-03-11T15:36:04Z","last_seen":"2026-10-11T07:00:08.307133Z","times_seen":1741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"97b2d1e9b12b026335fac45d5306b8f4","sha1":"788bafb7186451c76057438253e8c1ecc2ab3685","sha256":"0a1b63c04edff074ebbe4527cd582a1bf643961073e12f90ec77df8e43e5bbfa","sha512":"b9c0c769fb4680ec6c6a7196e3777d1424c076adeb1140c1e10ef284d0ecd388054a32c0b54b04c82be414b584ade4708d5fa5d533ed6b3f56db6394c84fb2c9","ssdeep":"","tlshash":"03e02258fc100258dd9b83a7c1c731e080057030e08a8e1ae5e1ab16d8e45b3a563a85","size":390,"data":"","first_seen":"2026-10-07T04:46:58.232883Z","last_seen":"2026-10-11T07:00:08.277947Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7d04e5b65a14ba1df4d53e768c89652f","sha1":"cc6648aa121531e8c56a6031581cb204df391968","sha256":"b5a8ef88e15650292affde9c40a726ae947ab1b157880ce18470210cd2222da4","sha512":"94b1e01740d4d261aee2ab96723d1a39f5716e5b051389a6d799ab1f3139374f83fe91ff0e9d94944299608353d2c19d39fdb742beb8ca9b7287f65fd835a830","ssdeep":"","tlshash":"bfc022e07c91a438ca816ca301338224e48a1fcdd00ba753c201fd0c766014b4c39f81","size":190,"data":"","first_seen":"2026-10-07T04:47:00.352156Z","last_seen":"2026-10-11T07:00:08.258816Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1b010dedceb4ac80706c895f280ceed","sha1":"5fd79e7705abe783243c0a0ae5d6c28c1e151af5","sha256":"350c3bf287c63de737e4c90509cc570c5781e2d2975d866b7a5015649fd231f7","sha512":"2ee56eefea3a5378fe55cfbd0213de77e0e07f5e0fdf54355ead0aaeaf9e8b91e56ac69ab201701edec8034521da250541ca09116f915c6e86c393c05a5484fb","ssdeep":"","tlshash":"c0d02b65c9ac0f52fdc26df0011efef901243337dcd0880425859c464575886a94c25b","size":265,"data":"","first_seen":"2026-10-10T22:14:09.217819Z","last_seen":"2026-10-10T22:14:09.217819Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf9087556303728cc7101334a6e31c9c","sha1":"276aeb0647dd04c9e64106df1cedef86ed18453e","sha256":"9cc6694d7691300ce4891cc0eabb8269f9d39b398b69f4d1f1aa11ad4d7935f7","sha512":"7191e7a937130bb4c552b419a525dcc6410553575104443ddfeb3ed8f1946bb9dd68698226bfa814d0f61e58628e580bcc4c769b68026d8d3ca2002a272ce60a","ssdeep":"","tlshash":"fac0c047ac00704454732c3148738b30450c1c30f08188c6ded0ccbeec307412c85254","size":175,"data":"","first_seen":"2026-10-10T22:14:09.220387Z","last_seen":"2026-10-10T22:14:09.220387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/inc/extensions/flatsome-instant-page/flatsome-instant-page.js?ver=1.2.1","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbfc65337a326c1c5b7a720becb486cd","sha1":"40f1aa033240d056477cbbc8ea0a02e4efddf66f","sha256":"44d8986e61b7b212a93ba0c3a3a9c880420451d7efa7938d711dd03e655c0969","sha512":"d89b22f803e903feb99bc93d91a882cbb0dc953b4cdf4e912413f31ead3341eb950817b7a1021af88b4c78788fa00cc2550c1522412bee99f2fa2297cce4a4e5","ssdeep":"","tlshash":"56711eaa769061770297673ce18fe304b67a42534006c931bc6d8a54af18ff952a3ecf","size":3538,"data":"","first_seen":"2023-03-07T01:32:00Z","last_seen":"2026-10-11T18:38:34.736521Z","times_seen":2127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2439,"data":"","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-10-11T21:38:25.320754Z","times_seen":52097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8dcc289ef06a0ea3ab63e9258b812b3d","sha1":"fb11f214dd565be985378786b8dc996b1087c4b0","sha256":"5bf6a1169b3d8879d3b979b8019f564aeb2b5f25adcd0d2215fc816ceb9bc266","sha512":"33576b3bc5e238c8688a02406b73dd62d36395bd9ec35c77e0273dd34cc74b6d2c921bb2341e1d3f5cab6475179f20e63b6ee5b619c95e9394979d4151e2ee78","ssdeep":"","tlshash":"940110af608267969ef2c7d8c08b72651a0a9d11fad94d5e8c52e7347a3dc0be422806","size":754,"data":"","first_seen":"2026-10-07T04:46:55.463004Z","last_seen":"2026-10-11T07:00:08.322075Z","times_seen":772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"62cfcf9aaebd7f33173a675d33521366","sha1":"3e9a903cef37c8bb9dd94a19d34060fa15f2ea35","sha256":"dba09d201185ff7812ce34c3a1830b998b7ce206bbb7a483f0e8098eada0e517","sha512":"9ca102d153ecef3e1e6e54d10b5bbc5b7858082ccb1032a3750577b67e265feb0312f93985dddf93010a36c2802b5c51e0d164f08e0ec7f77fddae92e6b7cdd2","ssdeep":"","tlshash":"72f0e1f060c99179a8b77081426fbd9cc0908415be967e8c1e80d3d01cb54df708fe46","size":607,"data":"","first_seen":"2026-10-07T04:47:00.405395Z","last_seen":"2026-10-11T07:00:08.33581Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1957aee921b4faaad06ad6f68c8bd239","sha1":"a2e97c44c59bd790662d238406fe9b73e0342929","sha256":"fd440d43d156a1b677f21a7a5e8393f2d9084e421e88442b6b56307c711f527b","sha512":"8a2d7bbf63324fed0806874eeeb7ece5e6726b30648b122ada0a5965d5581c11413042f913d6029da07c96665541f03bc132958366170f3198f25d7eb1931e12","ssdeep":"","tlshash":"b37000083c0a20880822302a000b00080022022300000003080000800e3c80a030f808","size":22,"data":"","first_seen":"2026-10-07T04:46:57.292387Z","last_seen":"2026-10-11T07:00:08.273982Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d7f64dce991d7f6bb6e55d907ff65d74","sha1":"415db25ce4ac57f62f3664edda54f0f309a2dd9a","sha256":"b3b658afa1ea051566d4dd87a82049fb4b40950fe0b7af3ea37812458cc6b983","sha512":"d0e6e30c472132b2599ef8bca7cbfc0ac1561fcacf4b2e3fdbb01bca93d491538aad712204eba6f09951ed19d89d04208a6c58e34ccedbda957e0d32ab871b34","ssdeep":"","tlshash":"c7100000000000000000c0000000000000000000000000000000000c00000000000000","size":2,"data":"","first_seen":"2023-07-22T16:49:07Z","last_seen":"2026-10-11T07:00:08.316836Z","times_seen":2209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"268fcbec5fe98885f488fada2e9b5f01","sha1":"6798d742f633f1103107f5238dfe898d714e6c9b","sha256":"27cea310a6971dbd2531a7880474e64a7d0855c77027478b27dd111218834360","sha512":"7188240a796c8bb8eda5662db7c070c01add8b910277ad5a6bc6931f9c1eea92c923a1ab0a02e03e95164ec3243ce2fe892441bc7f55f72be8a28cf5a8ef370b","ssdeep":"","tlshash":"6fe0c0bc5071e4267af318ebddeb3154b21207b0d1488c9c13098dd602b7df289dc883","size":347,"data":"","first_seen":"2026-10-07T04:47:03.759091Z","last_seen":"2026-10-11T07:00:08.29745Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51640b4303ab2deece8aedb58f0bd577","sha1":"63b7aa2441ee61adea993527fcd8062d09e81f8d","sha256":"261956bbc21792d8a81f13109983cd57c648462f359dc6242b9d01115fd08e0f","sha512":"976ec6be5127a95a28b5b87c96f5a8cf5b63e1672fdcf58dc5822a1e73c2636f1376691287a211d28c4cb51aa1c118faea2a36ee49bcc01e4dbcc945392a5d32","ssdeep":"","tlshash":"2ed05eb2384ca27fc26741a023f75d821993b55c2296ab855eb0a1e042a0d5cabc575b","size":239,"data":"","first_seen":"2026-10-07T04:46:57.934737Z","last_seen":"2026-10-11T07:00:08.294678Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-10-11T21:45:50.059205Z","times_seen":204764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2284743fe8a6178f117d584e3091d6e","sha1":"93d24c83d4a695e2a463bf66ea18a3e2147e9148","sha256":"8cf878073f71bf93dd67f56aab913b4a584f5ea15c56ea7030f96b9f26f23a4b","sha512":"7aa1cd340f7dc20e2259c9ef76fc6dd184133548d47ee9cf1c300e8ded20ae3e298748b874bb735dc639bb025be759096e3edfedd1c0396a094748bfe2734cf1","ssdeep":"","tlshash":"28c02bcf30c6da74817d001203179dc48107349f114b808743d040e400174908c1dcd7","size":138,"data":"","first_seen":"2026-02-18T11:53:38.7823Z","last_seen":"2026-10-11T21:45:50.073892Z","times_seen":95649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e00d34146430f4d242055a0b993dea83","sha1":"0284b9753a2407fd8ef203cf04f273dbffa88da6","sha256":"aad3baba770e83eef9bb2367cbe164abc4c1533a78cd0e65b8260d5ae8ce090a","sha512":"0a34584ee1bdc74e26e5bf45d94ed93ce192e76185418913a6a88b79702b2462c56d7691bf2ccfdb925c5342ec6f5b9c9b99ca8264dc40cdcd0b85eaea390d29","ssdeep":"","tlshash":"d1c02304317cdc21a56cd610ccd34dc0e95fe212c157031d18847d085c53018455c805","size":185,"data":"","first_seen":"2026-10-07T04:47:00.150092Z","last_seen":"2026-10-11T07:00:08.329799Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-10-11T21:45:49.999682Z","times_seen":191982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T21:43:22.652406Z","times_seen":1005456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5f26a052e376f2b2477a28e10cfd61e","sha1":"6135aa2517166248d44e65135f7250c46e24b3ff","sha256":"af15a9d200ae06123a934c5d9cf74102727ed1979d9e5a0d998b732bcff528f8","sha512":"7bff5408e84c87d4ddddf1084460fd085058d687628ff8e55cb7b12220c50311de0a9258f982c677ca27730ddc25283c5fe17485f971d68e607f78fbbb85c4dd","ssdeep":"","tlshash":"48a022bc2c3a328a000038f03003bc8230c00383b320c802c80cccb03cfc0c88008c8c","size":69,"data":"","first_seen":"2026-10-07T04:46:55.871069Z","last_seen":"2026-10-11T07:00:08.290132Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cad1843cfe6de21ace5d7903716854e","sha1":"85bc85179e86680d4baef0d683662488862c6d99","sha256":"070cfd92d6d4503d00f1e388a228a7622f2fa1a0877578e1ca34dad422e9318e","sha512":"cc91b3f03f48db2d1d06aab4c979d813c443b270b416a2e2f6ada15ebfc71735a110f40fd59039e3d3696522d3a15991d9ca9ef062396482afd723cf0a0c91aa","ssdeep":"","tlshash":"55d0eb18c6a00a21ffc3aef0210d7bfa0204323befc004000085984204808c9bc44e47","size":265,"data":"","first_seen":"2026-10-10T22:14:09.250576Z","last_seen":"2026-10-10T22:14:09.250576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1400219c99112ca001c55a4a592e391","sha1":"255993fc5f0d87d9bf1543faae7b0d72b9f8b846","sha256":"c9bc2a69eeb7a833dd91fdcc7cb7017ecae4524c2b2219b57d2f3627667ce7a4","sha512":"45a9abd81f0af47896ebbfccb97cf606b94db4520f38c20d9ab6886cee1f54e232e8710aca1e1fea2a8c580dc3c243da603ed0b3e164917cd4d8ce436b0eb372","ssdeep":"","tlshash":"85c0c087bc00708410332c728872c730810c1cb1e0618cd9dec0ccbedd313423985188","size":175,"data":"","first_seen":"2026-10-10T22:14:09.254951Z","last_seen":"2026-10-10T22:14:09.254951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-10-11T21:39:48.184846Z","times_seen":190857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-10-11T21:32:17.043205Z","times_seen":95145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"11369b5e6fb06b2512801d7578fd2147","sha1":"5df4ca424a245d12dfcf11d6cf87eff4b8b66769","sha256":"f1f2228652ea4c30e87bf7d262c39c03921c5f1538f43a39a28589542066ca37","sha512":"9d94addd6363213168d1b0125a881df74de8aab6f273f32c9c380669bcd3d351eb6b1f749538da97ed97600cd69e7057168935edb4170acb83365d4395d817b2","ssdeep":"","tlshash":"f18000b880a0200c02082202030082000c80a02232000088880aa0a823c8c80c800223","size":26,"data":"","first_seen":"2026-10-10T22:14:09.258532Z","last_seen":"2026-10-10T22:14:09.258532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"20e61a878b4692d1bab11c8e459dfcb3","sha1":"2d1688bab9c447651ddcd6a28aebf01148b7bfbc","sha256":"0fe01fd38d445bf4ab4b47c62679b4deb06548aefe9a5f8337c83d930e760d83","sha512":"13692e074637c045b1009431d5ef3f643994aeabd7aada63f5b316f757a4834b9f9c8462450f63dfed505635426c1d2f1c6a9b4be157b3320de9aecb6b5ca99c","ssdeep":"","tlshash":"719002a55c8d30b056116974415f6696527a8156355f8004461544b10e3d476a34a4d4","size":56,"data":"","first_seen":"2026-10-07T04:47:04.582491Z","last_seen":"2026-10-11T07:00:08.270136Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-10-11T21:45:49.931919Z","times_seen":200755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8466fa8e428bf83c4d2d9893b4bada64","sha1":"6e92a15d5dd78974f49420d2215a264bb0b93a55","sha256":"8ed6791bdf3d61a1e6edcbb253979b0a6bef7f3d99dda0fb49cffe96923514b6","sha512":"0676ac0c8ea2b79b65e6e0a561164211176ffa5a952c928d50e84c8a085c9aefcf6744555e71d7e79dac1280e82ab25ad719c4e48d25eb843ccfed840159cd47","ssdeep":"","tlshash":"c710000000000000000000000000c00000000000000000000000000300000000000000","size":2,"data":"","first_seen":"2023-04-07T09:05:45Z","last_seen":"2026-10-11T07:00:08.292445Z","times_seen":1792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1536f20826196d4b8b6489b98e44f221","sha1":"7d447313e94ce0bee567adf9b7d01e6a5d2b8557","sha256":"7a01064226cde1ef2e9ac508d3e90d11ea0085b6ee4b96347de24f3b0fb410d0","sha512":"1a0dad012ac49f6a27ba5e29363ff12b3d0b0783ae2d9bdda7ceb09913609f1e2f555b07822eafea6efc1d0b3141a47f23a01a8f8a43a3357e613eaa91e90feb","ssdeep":"","tlshash":"bfb0120434046c8fd01590dc00df2ce424000781d1a15d10da2d527807af4352c6e85f","size":94,"data":"","first_seen":"2026-10-07T04:46:52.504941Z","last_seen":"2026-10-11T07:00:08.302075Z","times_seen":764,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-10-11T21:39:48.013535Z","times_seen":187583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T21:43:55.40408Z","times_seen":1101442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6ed0f14084ef14bd61fd708f8b3d085","sha1":"9bc281ccd3624cd637b9bd18bc6408539f87eb2b","sha256":"5d9bc3b8e0d6abbdaeb21d5293296b12acdda14d3f3349db5690d77325233ec4","sha512":"f10ae0b76587138b2deaa771e7c20f84df3896917bfc0a40e8adb8366a6b4ed8934c219d89ab77d06fd5ce2d437ffd3cca606f71d2d66ef1a8fe8d5f2587467b","ssdeep":"96:wrsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJP:ks7NAME0+eWjQvJBC","tlshash":"daa19559eb7938db33fa01f2653a4d47eb614436e784d038c9ae631428b1893c375a5a","size":4953,"data":"","first_seen":"2026-10-10T22:14:09.275885Z","last_seen":"2026-10-10T22:14:09.275885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/flatsome-js-js-extra","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"abb251af368b19c371118a88bf8784c6","sha1":"a626242285dac3c401298b76a3773bd51b75fd76","sha256":"07ed17523125ca459f60962a8e8e8fda362e6e5c32af2ebfa4000035041ab13d","sha512":"8435c5f25b928c6520f406c64eb071baf5bb7c02cd025970e145acdcd5dd22bb76e64811175280c0765eb00fbeb6bf128f0e6a98744027e68f115e9f04f8e189","ssdeep":"","tlshash":"e451ce15f21cc91cb1574131ef30ff3d1a243011d9c47010aebe0874c1a546d24e765c","size":2682,"data":"","first_seen":"2026-10-10T22:14:09.280595Z","last_seen":"2026-10-10T22:14:09.280595Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-10-11T21:45:50.029167Z","times_seen":173126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad9cdd1b48337071f1ff86a71d92f6e9","sha1":"70d1d3f2ee855d08b5be9013c6a4348242c0dbc5","sha256":"2afe17dd653e7659864c6c28e642808ca328c8defb92e251c24d1df2f3ff0ebb","sha512":"db761bbc67292766f6d8fdc9b0c370e625e0a5caea84be2596f01219c5dc51f89f2d00e817305d85b180c01a3acb58be41f287fe324e6582b3e27544363915da","ssdeep":"384:R5ycWqe/TdB4QABseZLWxD141m3nOvU5/PeKA:R5yDqe/TdB4QABseFWxD1Sm3OvU5/Pej","tlshash":"7a62b42af37420dd41ba70b5b83f136472b77568711b809cb27aa8d6182dc5d2132fbe","size":15403,"data":"","first_seen":"2023-03-10T04:52:56Z","last_seen":"2026-10-10T22:14:08.872131Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"7543a2da8054e263cbb8c7d702a5c060","sha1":"b6b0996bf1431c8858ef336369a2498e64c5ad3a","sha256":"a83bd8463b628e661482010504cbb69143b13461a0178cb4f7b929aa28efa96f","sha512":"a970a5e80f3b63ab8cb8461a1d7f903e78091d46272b0b85265962e3c62bdc8260a7be52402948d1498523b9fa75e419459bf5dd40973eca6af64520787877f4","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlwpZswn+uOujAvKsPPF3cLa:0cEQxc4xN6a8EJWrO75ekwp1lEvtsd85","tlshash":"3791661b74216d7322eb75ba2c9ee98414331639a4414501b509cf6c3b7e8ca7737b6e","size":4281,"data":"","first_seen":"2026-08-31T14:42:45.211396Z","last_seen":"2026-10-11T21:01:03.019307Z","times_seen":3947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"33ac0876e2026575dc3b41a0b74c3015","sha1":"eee296d1ec66b9bf19893dbe7f8c42fa06216a4a","sha256":"6f4bf59b004ca5e48b7c151adde5f8e1a165aa9d1931c58b2cd68d7441004c0e","sha512":"bf3e21bc4db25a236fc4aa25d2ea40788bb1727099729f86f0a85fd5e7604e9608ce3e20307132e4d2c0f39ee98790ba88153a1159447fdb920c0cb3b0ae6809","ssdeep":"","tlshash":"c710003000000000000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T12:07:30Z","last_seen":"2026-10-11T07:00:08.293003Z","times_seen":903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a6ef918214af1bc786766270b839e31c","sha1":"a9a7d174dc31247857211d288f448de6e2f63bc6","sha256":"60e8cb5a49c9750a227932ce1b1afb990fd8982501b8e2402e5e469ae3354487","sha512":"279e365d9e0d9f3244f2a6b02ea75d70a02b824560174e94a7ed990e7d57dd20ec1f180b102806bcda09bdac974b9948108fc0a7dc458249ad8681789e009485","ssdeep":"","tlshash":"49f02ecdf695b8d14752b634486f413f5a35b94065180b0d494b84e5583193ea156f8a","size":471,"data":"","first_seen":"2026-10-07T04:47:04.672397Z","last_seen":"2026-10-11T07:00:08.260556Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-10-11T21:45:50.001033Z","times_seen":219835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"251046388414ef612ac6c33ac8bc53d8","sha1":"2718b0818e9c8ba92a2f920611d064853f757226","sha256":"9af64f38007fe31865314f851f410a6edc3e113b42fccccedc986b8300ee7184","sha512":"81d925d3dcc65111ec54399e47726fda5901ff93c0d4e64c248b2cf6c68dd82550259e4875ce4cdc75e90acdfb72b0505ef4fc47693932cec5c2a36982baa04a","ssdeep":"","tlshash":"b0a0028a595454d855b2b069d20f05041275c1937052bd45555ed6b02b369671165419","size":59,"data":"","first_seen":"2026-10-07T04:46:53.766431Z","last_seen":"2026-10-11T07:00:08.328786Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e44623ddf21819a3f4d1314a2d2af9a8","sha1":"1cbf59849868f13713652e1f70d860affdcd4371","sha256":"996c253588949cc8e95a0d606f24e3c0cdab34b79a3dd70428e399fef226caa4","sha512":"4d1f20c4b9517796eb79e934124fc6541e5defb1d04a70967c079aec545ee68cf2df52407d175693a59fde849bccec57dd917191c7fb2ca36871f9f22136381d","ssdeep":"","tlshash":"43e0206e7d55597e5cb508c90416f3a4570251090db5a5839962655d7a151c3803cd20","size":343,"data":"","first_seen":"2026-10-07T04:46:57.999106Z","last_seen":"2026-10-11T07:00:08.29859Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"75f4514416da8f3b3d21cd24443eb9a2","sha1":"7e6043bbf09fa2fe074dd635a56ddfe475a7a479","sha256":"33c5b0decaff023a069d8c0231e6da407836d8e00169facbeaf143fa0775937b","sha512":"70df280722f8632e16ae082fa417a041f1bceb5579570b6d4e5be278fff8f62df004eeab7a69810eb9936912db3962a14b105682984ed84f1f8986fc81da4d50","ssdeep":"","tlshash":"0fd09584be1d0587cc07361813d3d425453220c9f61015374b1d06e415f777d03b14c6","size":261,"data":"","first_seen":"2026-10-07T04:47:04.101312Z","last_seen":"2026-10-11T07:00:08.315849Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"b047bb4fef0fb0bfc3b6bfbeab3e94cb","sha1":"a7c9fd69f3adbff3d6d2e533a2ed1279e8bf71d9","sha256":"4d9c281b69c45a2d3cd284e52b31b93736365a3a53adfd63ad21d4188c288ecb","sha512":"9f85f9141efc52b5f1aa8f5b4179176b15fc2faa68db77e5ced8c6e8c253eb2253e0027898f94447cf7371af8344e4d8122671604b8b0e533f6c529506df4408","ssdeep":"","tlshash":"f2d02b1ad8f80f57fdc23ef00259feb541a87267a99069045442948209988c5b908112","size":265,"data":"","first_seen":"2026-10-10T22:14:09.295118Z","last_seen":"2026-10-10T22:14:09.295118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"777187057ab8091e5e2ebb80d9aa10c2","sha1":"ddfdd6ea9c4947e7f87f8749c8f4b4415760f51c","sha256":"f21fcc22c03819f3be8a6d9c8faa95d41bde0849175db2d2ecccc21dafb47b45","sha512":"541bdf025f02c1aac6cbe947e8e6830bbdbced370692d93eee147aa237d76d08696da1ea1bc34267e63969d73a6b7202520bc1eb69be9fe53409b39a1a3f25a1","ssdeep":"","tlshash":"46c0c086ac00704410336c3288338730500c1eb0e08588c5dec5ccfedc313402985154","size":175,"data":"","first_seen":"2026-10-10T22:14:09.296539Z","last_seen":"2026-10-10T22:14:09.296539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef8b499c884d6374a7c76ed7742d64b9","sha1":"3a0407294f38c14e3562a27d6b0b520c9953008e","sha256":"3bbf13072ff1563a147d6b975cb5b4ce7c81d32548557495b115bae5ab5a2717","sha512":"2e610572248c79710dd7c3d64bcd3f5207071130587dd0ecd21458b7595a438fe92e65cb39cc4c5585a5a15a07efdb31d4e011638588624879b296ca18a486aa","ssdeep":"","tlshash":"47d02b65c4e44f0aedc27ef1012db6fd12257223dee06d441446d84205698e1de04902","size":265,"data":"","first_seen":"2026-10-10T22:14:09.298221Z","last_seen":"2026-10-10T22:14:09.298221Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6578f08dd80cba7cb1ac662640922a09","sha1":"727444ad0625ffdaf6b257763e7033a2218d046c","sha256":"03a631b20046199a45838dc48b75d95fee80753ad005278ee9537cbca1e62243","sha512":"5e18fbce35d20e5d2ceb889e2601d94c9b8a31f0826aa7ffc89af00ecb2f62233ea97ce62094f581d0a2cbdd5bb4180e41521fef81397547c56c7fcfda209a87","ssdeep":"","tlshash":"d6c0c0479c00744410332c3049338730400c1c70e44188c9dec0ccffdc32b402cc5154","size":175,"data":"","first_seen":"2026-10-10T22:14:09.301405Z","last_seen":"2026-10-10T22:14:09.301405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"df9e5d51034a6411f834ac30e7f8d109","sha1":"331bf4cb380d3ed7195e4712f5b78f637acf0928","sha256":"57d0faf5ad18b247d3d8a0492f5e45e1fe2b9ee68b7659fb8d4fd5a974b9539b","sha512":"c6782e0e4b5cd4ab379febd29c0d7bcb1582c5466d32a84e44c12da45bda7a3cc5e98414ea969289ee942c297d0aebcd1f5e722ea7b37b5cb15df3ab4d6795aa","ssdeep":"768:Dodnf+j1ezqVLcgzf9S0an3vlr2aKwiMfRG4d5X5LI/TGdoVoVGGQdAae8d9X38q:Dodnu1eze00Yp2Q5pL6Skc5CdJsWfOc","tlshash":"dc530acef5e2b3708af261f2409b521962ba9855dc44095ebd42e7f42e71c8b843bf25","size":63005,"data":"","first_seen":"2026-10-10T22:14:09.302739Z","last_seen":"2026-10-10T22:14:09.302739Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2e276bb4bb34168b372519da93b4e00f","sha1":"44bd4b117e3363cc6ec4f8ee844305b8068eefc7","sha256":"df8af6dd22e10cba1baf63aff5718002a7b2063ccd421f5a96009786275192b0","sha512":"18b9efe4dd9a02cac2d299e07972e84680b5d1490495a067426ef968e357ed1f89162967e5e5d5e595bf23f50ce8bf1c763b7c9c80dcbf582887d40af1efdc70","ssdeep":"","tlshash":"5fa0112c8830380c20aa28a8022f000ac8f0028a08f0a003200eaaa00a38a22008280a","size":77,"data":"","first_seen":"2026-10-07T04:46:55.905985Z","last_seen":"2026-10-11T07:00:08.272457Z","times_seen":772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"29e5bf3913ba5b25d20accd9cb60806a","sha1":"93a94ddb6a26305b2738624e8b6d9fe45403678e","sha256":"ac4060d99c362cc4d0cbcca05717bff1a9f23b5cf2099a232d6825b752bb0434","sha512":"5d0dbe1d28e235fc99aaec689f298ab923a134ae5b361bb45e7a5702b0ae0e61dd80005e9b2fd73eb9d83bbba873e9105e9bae7ca45baf767de9948ea59c66f1","ssdeep":"","tlshash":"fa700008bc28208000223020802b000c00a380200a00a20a08000080083000a2003888","size":21,"data":"","first_seen":"2026-10-07T04:46:51.710826Z","last_seen":"2026-10-11T07:00:08.316352Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2e4b5626d52f8ce6e31680b40f2c9778","sha1":"3415aa4892c9eec5a3227e75bc731530a7a8a9f1","sha256":"d2d4c2390b0aa94e57320833477fe94f859c14afce429dea0b5b8deff3900366","sha512":"d4a39ccbe7153d6f06087eff97e90365cd4374c8b432cb9c3dea641ce9e8a43bcd0cd3ea1dc3aa3bf911ba2c628aa1de6c77a110d961759d81763c22532e2741","ssdeep":"","tlshash":"c7100000000000000000c00000000000000000000000000000000000c0000000000000","size":2,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-10-11T07:00:08.299722Z","times_seen":1194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.KnLLmnw14PA.2021.O/ck=ytembeds.base.UsaYRPhg50s.L.F4.O/am=AAAAQADG/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywEHDEoA8wKG3t3RH9ikbTeljqAxGw/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4172feda873b9cdca35b8c383d34a87","sha1":"c3e3b899ca1f25504c4613de15b0a3e1664bcfe1","sha256":"7616f12bb5a48325bb536386272f2a74f5faa152f6499691a4a6fd5e6b8e459e","sha512":"a0eeb5a491d3cb0dcf95de0cf801043fbe8ae4ad30c2c2a73886f5979c576a83ded076cc79812c01ef5abe8c7a6256f9fed5cdc5376de169ef64e50efcc01f4e","ssdeep":"12288:FmxXVqeZt+mLGYovZ0iHt1m6PI5WaT59eCz2twX37WPz6/wnXhkZTNvfRPr/ieK5:FqqMtSEP+ssqIuTgr2i9Vguw6iaYtv+","tlshash":"74159ef4b35271b5d503fd66b8bb8003b67e5902e004196df0b2ae9c56fca942e77329","size":909207,"data":"","first_seen":"2026-10-07T17:33:19.920236Z","last_seen":"2026-10-11T21:39:47.839887Z","times_seen":1121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"47aec5a09778ddebc66adca9b98a03a5","sha1":"dc65d36a779c69be9c08569907407ca9dc5d1e60","sha256":"87795ad89702884ad7bb03c7f3e1f1c22374e048cf2689b5a40a001ddb968fee","sha512":"4ea784ff2aa95a770539bc0baef5372860928df1b3072d80c44cb98b2ff20eafc6db2aac81909e673bc949e3834ec26f4c7561d21a892a971085d431027c0197","ssdeep":"","tlshash":"8ca01288281459428831e0e40407041051e8030a61012844100415905b66095957001b","size":78,"data":"","first_seen":"2026-10-07T04:46:55.383933Z","last_seen":"2026-10-11T07:00:08.33445Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e11d1116fcc2f1199bb5ff444a10c08f","sha1":"8c522bc50d093a37e4d8651c0da8a6fd199ce7ef","sha256":"557a3f889c7add04a879f15093244ec70fea0da1aec98c751851c02d7870cd0c","sha512":"361b8555da0e6f2a3bcd4290ea24b0c024e689809b73e4e472a4be5d101a28114fb66041b4ffa0faffde34b8a67a9bce8086d17aa8fc8f370916b7f008ff0842","ssdeep":"","tlshash":"3bf00ecbf150c3e852b05170c67b3b2b614bd252de620f88831b8a902bb1cc2446d8ab","size":493,"data":"","first_seen":"2026-10-07T04:47:03.883023Z","last_seen":"2026-10-11T07:00:08.233811Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f8e50ccf897d40bfc424668c8867b189","sha1":"8d3eb4485e5671f754320a767a762bd367d133fc","sha256":"4a227410804a22825593f70f8cd1e1aeaaf7cea65320a18045588ff1cd4bf525","sha512":"d6f186269b8acafd15439dc108990ae44016de5a610e297fcd2995347cf708056ef4ddfc5866f9f563730cd91c4e79b88884d975f9764fec6ed2fda285c85de2","ssdeep":"","tlshash":"b1d0978cb70b024c367e69b0e513e8f53720c2234eb504e82ad68133140889c3d6fa23","size":248,"data":"","first_seen":"2026-10-07T04:47:04.455034Z","last_seen":"2026-10-11T07:00:08.323392Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-10-11T21:39:48.205266Z","times_seen":205116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3eb7f3e05dc7afc73aed15ac1d3a899a","sha1":"6cb997390834d89ad170bd8ae602d8cc7b4c91bb","sha256":"c4d859fdee25e50032623eadbadea08c03c1dd39bcbb52cd25cb08a32c5c9b5b","sha512":"2f417baf62a38b650596ee4291c09f6c33a1fe10f6a2e92ed62e13c9411a7a2bab4c93d348a40944b9545afad92b0e1addb6a65117951fe8cc6ae6b3cdde6ecb","ssdeep":"","tlshash":"a9c08048dc5ff049c55131b5111b415c51b6470621641455540090d0357255dfca757d","size":159,"data":"","first_seen":"2026-10-07T04:46:58.039549Z","last_seen":"2026-10-11T07:00:08.231222Z","times_seen":783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-10-11T21:39:48.201138Z","times_seen":186469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dcbb46db3b84730ea5b097fb50fe02f","sha1":"c65f41929d0ab726f503d7fe79a67c0f252eb297","sha256":"6bda12aed8e505f2acf397ba7e5ff02601f18db339ba5fdffe32c9fc3d4ff280","sha512":"e9a6bbc58e2d69ee6f8218af35513afacb77068348eb5deff8773d29b6c22ca83507c1c17cfc06c0863ef41fc0e60761b5f0b8bb2bddd8f0caf7290f47f1cde7","ssdeep":"","tlshash":"37d02b6698b41f41fec26af1011dbda8005531b3fda145511406888144588c6ea44222","size":265,"data":"","first_seen":"2026-10-10T22:14:09.320764Z","last_seen":"2026-10-10T22:14:09.320764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f998e059c0f9b0490fe98edbba4f1ef","sha1":"ea9eec4688ee2c42810c3b3e81b208214df85d77","sha256":"57a2bdd5ee50f1e9749fb9da978488c47a7e30a32064095d3f29a30380e5514d","sha512":"d2c2904d4700d23213b886c0216f697c21fa8410781fe613afbab1ebb1b4029e11f8be11663c07cfbda5ced3e0d492b2671c36a89229b0f8e1a51103bc5f035a","ssdeep":"","tlshash":"93c0c0469c00704450333c3448328734810c5d30f08188c5dec4ccbedc31780388615c","size":175,"data":"","first_seen":"2026-10-10T22:14:09.322899Z","last_seen":"2026-10-10T22:14:09.322899Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b7173013c1d4b5040630f3ac7fae1d07","sha1":"c95e37aaf0d9eb6f7d213523eb14aa640113c2de","sha256":"7c507a64c258a883a436ea6b882abbf295f3a89558dbdf17f170cc122200b4c6","sha512":"896421c30908b27a8422fd97608c46d694798418ddf2b6521b874e7027d869741d36d0f48fab852f1f1ebdd11e57951e4368b6683230aaf31b4a72953c928e5d","ssdeep":"","tlshash":"fea0112c8c30380c202a28a8022f000accf0028a08e0b003a00eaaa00a38822008280a","size":77,"data":"","first_seen":"2026-10-07T04:47:00.984447Z","last_seen":"2026-10-11T07:00:08.32106Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NFJFX6W6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b5224fb876c3fa1391404e44b41e0ba","sha1":"7dde33429ae12512461b7135db6c12499e49707a","sha256":"a00e05d32235d0017f53d906ebf008861cfb5ae63713619b1cc94389e7f76b1e","sha512":"b5d3fd1a7138c3f9e0e958cedb8f61a4684ff242534728636588aca977dc3a47a2e6ae609e5e35e7c3f6b335538bf74a21fcfac6ae12d572d7a820d237f49c9e","ssdeep":"6144:8sfCycnlIma7ulkl+cfIb/EfD3cezMhw2rZtp:8emlph/N","tlshash":"eda419cdb3d6746683a2b578903f018b727e6d92b84cc899f14ad8e42d3465a4273f7c","size":459219,"data":"","first_seen":"2026-10-10T22:14:08.82898Z","last_seen":"2026-10-10T22:14:08.82898Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f7a1e135f5871210f8effe4de2d45ad","sha1":"66e36984f1f0e47cfe925f06799d9cdc0344e0d4","sha256":"c1ca74f33fdefda5388f699ed4af7c622faa3a2e86a678e699ad18ccffb3438f","sha512":"137881322821d56b886b4e64e507795bce0559dd7872b2baa0c1fc91657673da1075a3354030e37bc57349599b77d0071f76733c0a092f77da7b402745a6c63e","ssdeep":"","tlshash":"f9a024007c1133c04001100f450d1104d4f3d0dcd1005c03d10c05d07f3510d010d4ff","size":70,"data":"","first_seen":"2026-10-07T04:46:50.29366Z","last_seen":"2026-10-11T07:00:08.312461Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2283ccc190d020c3a2249a0777b4f372","sha1":"f058bf3d97590144f5962ce7c288db2e5d46bec2","sha256":"eb92af20ee88aa1727eb0b77fff84a1f6ad0d85a7e0d5acbe0abe130dd90e157","sha512":"966bdcc486dbe8e953a0b94c9e1ddee503dc82d2704127746b302b09d6a9e5d2623fda9f7099245847718492596fef6b5e13df9aad70cd0f5fde0647c00f3e71","ssdeep":"","tlshash":"307000082c08220000223020000b0288a022202002300c020a0200820c3c00a000ba2a","size":22,"data":"","first_seen":"2026-10-07T04:46:53.122922Z","last_seen":"2026-10-11T07:00:08.275235Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e4f1255ca81fe96b2fc86ac500bf857c","sha1":"5127d9054025e81c9cedcd08430b52376bf93291","sha256":"ca535d3714dd61b8dcbf205544552ea42255142a49f0e152efb49868599e20b0","sha512":"47fad7dfaadb550bdb2c4389c545909ef8d21774e8f5e269e54731321ccc3c46a3b8df6467f7fae4715e01aeeb79821f2bf046b37b3bd6ca409e682fe02e57c2","ssdeep":"","tlshash":"f1c023d067d14874c1d184170333121145cc1a84a51601435102fd5db2f11460428dd5","size":187,"data":"","first_seen":"2026-10-07T04:46:54.766874Z","last_seen":"2026-10-11T07:00:08.350815Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/gdpr-recaptcha-pow-js-extra","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9da1af547b5786f6958e25c1d07ead9","sha1":"bbadec7f9a714575c5febcaaccf6c6da274ed8bc","sha256":"f9d9b3cf95002d45e808f1716b3a9589e23b9260f407bcf1d2bd0ce041cb63f4","sha512":"83397a4cf94a6d4635b548af347a4ea4c7d0c569f3659be74c9d15918580d9ff9c211d9421da1fe5b4091c74ad06eca73251746f2adfa74f53e7129dfdffe39c","ssdeep":"","tlshash":"dff0eb50c0bc0e8aede3aef0411caeb500a4312bdec084501948c88108998caf40a126","size":446,"data":"","first_seen":"2026-10-10T22:14:09.329036Z","last_seen":"2026-10-10T22:14:09.329036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f51f73e078cdef979196abf481d01ee1","sha1":"032d3673fe889069e4d4f041ea15287abb0bea0a","sha256":"bdab3fa5b96595a9209d7b994ac34d225071e42f1d3aec6d641f1451d0f558e0","sha512":"c810e163cc318d5d49da06dd854c89fe185cad4195609ff18531ffa8fbd19ef9d8c5210f61dd69af45a27e3cc9b97f5ccefb8f4ac9f84107d46279ba1a80a8f8","ssdeep":"","tlshash":"6bc022d07c91a438ca816ca301338224a48a1fcdd00ba753c201fd0c766014b4c39f81","size":188,"data":"","first_seen":"2026-10-07T04:47:02.087372Z","last_seen":"2026-10-11T07:00:08.258216Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"490b2834e65737c1fce95e468cc8b8bf","sha1":"bf1c365741a4bfb5fee5c3150335ab4f867a4d9a","sha256":"f998fe06afa0cfbe73e0449dc2b1698309e1b5714960f027b2858312b152c275","sha512":"0111c4221476c957cc0ff08ac9843f806c28e08aaec978d141001473d57d9f73f90d81308ac354cd8c75eff63fa9436f9a14775d7f17567d93649967eb832bfc","ssdeep":"","tlshash":"c710000300000000000000000000000000000000000000000000000c00000003000000","size":2,"data":"","first_seen":"2023-03-07T12:25:55Z","last_seen":"2026-10-11T07:00:08.315342Z","times_seen":2518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T21:45:49.89391Z","times_seen":199824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-10-11T21:39:48.186922Z","times_seen":221915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/inc/extensions/flatsome-lazy-load/flatsome-lazy-load.js?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"30bef76f6c5678740a4b7c4b1e0ca3b5","sha1":"df55c00da88a6345d1b91bf64eb6fd3d144120c0","sha256":"ef8fea302c93f5619c53b4b7f8435c3d7dbaf5a4296593fb9f353e574c9b34d4","sha512":"598136eb7a4b79984a4ca6440a924d5091c9bbfcdb62787fda2b07322d91beefc44c8bf37110266c8c5f2809ab4296fdf03eba7add9c912397e6d19051dc5702","ssdeep":"","tlshash":"cb415b5878f1a58eb237757649af4800ba7da147000d8e61be9c9399df9423c1ba1f8d","size":2355,"data":"","first_seen":"2023-03-07T12:10:42Z","last_seen":"2026-10-11T18:38:34.718845Z","times_seen":2982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/BsfZWRv0mqXKtB60XTlsnCGJV8iWWOJuOt8gyYmLIJY.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ec338c18a49b3eae12390e56cb5660d","sha1":"8d907425b37f3b1a5e323b7b1eeedfc0b5231c42","sha256":"06c7d9591bf49aa5cab41eb45d396c9c218957c89658e26e3adf20c9898b2096","sha512":"6b71c2746c35f3fc9a507f8eff328e5d5973a71c153cf9c7b66404f86f6f84ecb5aed72964d90ff25a7c1cb98dc65b1baea49724afae51a951981e44077e332f","ssdeep":"768:j4Ridnf+j1ezqVLcgzf9S0ad3vlrmaKwiMfRG4d5X5LI/TGdoVoVGGQdAae8d9Xh:jYidnu1ezu00wpmQ5pL6Skc5CdJeWfOw","tlshash":"8a531bceb5e2b370caf361e2409b521962ba98555c440d5ebd42e7f42d71c8b843ff25","size":63406,"data":"","first_seen":"2026-10-07T04:46:48.972315Z","last_seen":"2026-10-11T07:00:08.164234Z","times_seen":823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"53d013ae1cdcd51c25e96c8065c18e80","sha1":"d45bfcf072595b537b828b3b752377739f8e7ec2","sha256":"c0c789dbd6c10e5f4754a5e2cc15f5079b433ded49185eb8f3d36f465d332eb6","sha512":"1f8ccbd3ef5e7622c4f304b290604e1d7cd0721695c7d396eeb5bde006fd7195a337593b8f3b99ff880a5adc4cbe5d3c0cd3573ba2228d15da4f2af593f3a9bb","ssdeep":"","tlshash":"f1f0dcbd5acd633dd8b31dd6005748645802ae3304b2f27b0064e530933b463ad2df81","size":448,"data":"","first_seen":"2026-10-07T04:47:00.534591Z","last_seen":"2026-10-11T07:00:08.279661Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1855c66e4c486992191f8984100c149","sha1":"41ba9d17ad91e2f72bc1aa76899b1368d5ec29d0","sha256":"5a09d3c651cf099dd2d96b9814634e16e4bf5d2f1b0133108c7c347a5dcc0c59","sha512":"e248ee273a9404cf9a078dbb1a3b87c3556f84ee489cd5d22984459f8d68b54d93572db9dcb35c30bc680f6e148370eb48e2f51c8085a568e8a1fd5aa6b926c9","ssdeep":"","tlshash":"48e0d89cfc4103589d9f4396c1c331a094547430d14a9e0e91f2670598f653785a3a45","size":352,"data":"","first_seen":"2026-10-07T04:46:57.330092Z","last_seen":"2026-10-11T07:00:08.27619Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.KnLLmnw14PA.2021.O/am=AAAAQADG/d=1/excm=base,root/br=1/rs=AGKMywGA7wrLiSC6AmQ1fWLJ64CF29Sgew/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acfee508b3052d8b3edca976aa4e059a","sha1":"8b4ce9d9179d215b8f8f3435207ce116af76eea5","sha256":"9c92ea8603874fd1c0422cbd0fa1d954e61ff76bfb41ef0b7da95d9424848954","sha512":"228c2ed480135998326fe04b91bf2993fbdb076c171b6bf80ad4a96d5b5d04eabc1891be214535da025265a1089d5d97873f393c55b29a060e01d5f9216297e6","ssdeep":"6144:hgzMmD3Nw4r9x8BNtNIZeC9bVpCbWcVXB/CnyvuUL0ACTqvq3zoXmuWNNfF:tNtNIv5VwVvfLKeTXmuWPF","tlshash":"73a44dd977a2702392a2f1e4902f4107b2bb6855f44c9c7cb6c8d9d17eb494942bbf38","size":484373,"data":"","first_seen":"2026-10-07T17:58:12.087043Z","last_seen":"2026-10-11T21:39:47.834919Z","times_seen":1171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c4ca4238a0b923820dcc509a6f75849b","sha1":"356a192b7913b04c54574d18c28d46e6395428ab","sha256":"6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b","sha512":"4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a","ssdeep":"","tlshash":"c70000000c000000c00000300000000000000000000000000000000000000000000030","size":1,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-10-11T21:45:50.078679Z","times_seen":155506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51514b711c4887ce405daf1ad70abea1","sha1":"a0ca0fb20bbedea26d59d7b80840fa7497e6f564","sha256":"a6b524ecd07c4c09b0100ae50fed62b577cd552ebc7a11d05c428bff1f569649","sha512":"1bb6d09618f961d891f6f355223c1ed71b1648afc7c22e6ebb5108d6df7330a7900349822e90595aea52a7731cd7be681fb715a6ee92d7739bc3cec3a998e4af","ssdeep":"","tlshash":"0dd05eb2384ca27fc26741a023f75d821993b55c2296ab855eb0a1e042a0d5cabc579b","size":241,"data":"","first_seen":"2026-10-07T04:46:53.878578Z","last_seen":"2026-10-11T07:00:08.329278Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T21:43:22.687463Z","times_seen":81902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"94336a7dd7b24ebbf5aea4aacdcff083","sha1":"afbd229eb8cf2fe0c69e181858b1f438defd8f10","sha256":"096eeb604913d37352f90eec666296c216321660728cd04dd7d6994897bea9fc","sha512":"8c90d29526a2563ac69e541b568431bb1cde5d761bac9d04a1c210918f9f8737b7bd4778917917f0fc5475802229cbe0b15a3c98f42c70cd7a4a4973c06aa011","ssdeep":"","tlshash":"71a01288281499428831e0e40407041455e8030661512804101415905b66096957001b","size":79,"data":"","first_seen":"2026-10-07T04:46:51.610783Z","last_seen":"2026-10-11T07:00:08.291275Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-10-11T21:39:47.957204Z","times_seen":189707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"66d2b9804a74fb2f59d817089a2ad5f0","sha1":"f289781c14635c86aeee218cff80eca865b21d84","sha256":"abc95f2db824a7b2003b7791b7f65eb70f47466e01813236f4f2311c68239b78","sha512":"e1cf5ed00b313588cb9da6844b6ccb59cd827b7e040fc9d083357b5a68be0e69a6621122af83a2f5c2532995cca548f6c0ba823536c517172317ce0a9fb3a1a0","ssdeep":"","tlshash":"24c02b117771000cc79072057c7306005cf23351545cad5c820211428d78f8d008cefc","size":142,"data":"","first_seen":"2026-10-07T04:46:55.755405Z","last_seen":"2026-10-11T07:00:08.324034Z","times_seen":776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-10-11T21:45:49.886035Z","times_seen":357475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0fe7e9f302d1bd415e7bdbc2af707c3f","sha1":"dcbd597d021d93ef28ace2c29fc2bc0c5d8866ce","sha256":"57c7ef8c3a7c64351032a9f80e6de64241b273fd89b1c9189e9b35281ae7d050","sha512":"91da08eba6a7ca57ecd032a660e14c750c676b6f0cd6ca2616f0eea08636270aa007ae0e07699969c31604feb4a5d385de7af076c0244b1bc1e2be8bd90874ef","ssdeep":"","tlshash":"4eb02bd07ce2812cdbd0586302326134914c0dccd10e42838182fc89777210f4c3cf00","size":129,"data":"","first_seen":"2026-10-07T04:46:55.261696Z","last_seen":"2026-10-11T07:00:08.296886Z","times_seen":770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f69dd16753760e40485e1d97be28519","sha1":"2b7572a143203701e7d0ab4729853b74a3da9303","sha256":"6baf425511e6d6f7af14e308d0a9ae514f86fcb0e980572f4829cc8a34683556","sha512":"58fdb358cf6479700f6a5a77202059124a30553c70fbe24396d3afbecdccc8b2346dae8550fcd6b276f4975c886c93e23700116197d29f7a30caab0c26ac8c32","ssdeep":"","tlshash":"c8b012c6441428049cee3d8840534813209c1b0327c71a10109cd236d161c3a9465407","size":92,"data":"","first_seen":"2026-10-07T04:46:50.208376Z","last_seen":"2026-10-11T07:00:08.354685Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-10-11T21:39:48.225906Z","times_seen":188738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"01e0d266d516403ad090845dd51be1b9","sha1":"e8a48feae71834cba09d787b5ffc8eadf3a8a22b","sha256":"efe5abc4e3c73c730742fd522c03ba61cf0664f07c5f6b07053f894bc71a5e18","sha512":"b911502bbdd0c990f4202ff62efcf72b820eb1875ff3e56dc6831577af64bf007a231997a14f2f1f39aab2ba79bbc767c67158eb942f484fd42be0108b520fe0","ssdeep":"","tlshash":"ebc02b8627180313c3cf13408003832f5450148a7d10280cf3c474c7c1e964548e7d0e","size":135,"data":"","first_seen":"2026-10-07T04:46:55.353566Z","last_seen":"2026-10-11T07:00:08.333491Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2190d6203ee7f2845bb8ee1612d3fc7c","sha1":"79a40cf276f350cb4153de28da97f6d5b0c98b95","sha256":"be8a1d66153a6a7b50d686c88a6eb05c0a7eaa05ff08594ed2a9e3f22be209d9","sha512":"5b68d3e61785087ad42f0a013956d0c5e0e1112ced984ba8f66ae71d1149f6516a7c6e9d1a1fac3cee33e70c77bf05991e94a45edf70a5ff51fa0bfabaa97da7","ssdeep":"","tlshash":"83d02b15c9a40a17fdc57bf0032db9b0016c7363fdd14c026c55c8d1852ddc0b944955","size":265,"data":"","first_seen":"2026-10-10T22:14:09.367765Z","last_seen":"2026-10-10T22:14:09.367765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"04b58337fa949679e3c52bd866535ea2","sha1":"c61d2b3d32ec86fc32f51afa5e6110b92eca2aa4","sha256":"e2232bf2965220b39162ab84c18325cd9afcc23b2ecc45d36afccbebd21e5ead","sha512":"312c26abc84703f6fa3dea2c3ce1cb008c7884debc291436d31f2a6b91b8fd2ccd2c3de9728372777e0e0993815e48c3977f8985bcb9e14888501fd55b334849","ssdeep":"","tlshash":"51c0c04add00704410733c3848338730810c1d30f04188c5eec0dcbfdc307802985148","size":175,"data":"","first_seen":"2026-10-10T22:14:09.369709Z","last_seen":"2026-10-10T22:14:09.369709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ad32f8d3fd14b0d24a772fea37330e7f","sha1":"aa3cfeff692b395705b79ec43672821669fe6962","sha256":"a778e81bbccd55b126d6574005b4eac08840f76a906c7a6469d3ac4db0cf0a81","sha512":"5c8e827c27a88ceca78d05a73eb6c087931904a01dfb840be44c7e2c92f1c93475a4867de4f84aa3ab08470e7496af276969cfd4c55808da753e024447725019","ssdeep":"","tlshash":"8bc08054700eb2001c1939667017d96a197a5763d8523607c1d1d695033bcf7b41e942","size":182,"data":"","first_seen":"2026-10-07T04:46:50.589818Z","last_seen":"2026-10-11T07:00:08.267896Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8677f1433f0db87189b3a88bc0881140","sha1":"9eb9c913a9af102c2692512689129fe23eb58b1b","sha256":"a17d2dfcc6fb33778b93ab2aca9016bea812e497204cd80606111fed97cddb3f","sha512":"4989a5fdf1fc3b215b11fc89ca62b19b2dd0df0bb78b279e7e52fe102017890517d3679f304bfbac109d92a965f42269e7fcd6e3224726919265811e6298e2c1","ssdeep":"","tlshash":"c2e07deb90cf259f20af2dd1a80b2ed57fa9089661312cee156020d019b79c3263f545","size":306,"data":"","first_seen":"2026-10-07T04:47:04.170155Z","last_seen":"2026-10-11T07:00:08.310692Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-10-11T21:45:50.065633Z","times_seen":253202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"49f38fe03598e4d63f4a0a8791c9c8b9","sha1":"6feddcb79702ae0cf4b8848e2cf40a86658050e8","sha256":"91f026c996feb33556b5d418d17e015945f305c96666b62e5c6284cc1df22a09","sha512":"d52475bcca79482fc170c11270605d17c175ca68d02df08285e15e39b9e90ca379cf9e4169feefcf29cb6a6eb8ef7ae3da9f504702ae14cfa5922f43ba8bae62","ssdeep":"","tlshash":"c71000300000000000000000000000000000000000000000c00000000000c000000000","size":2,"data":"","first_seen":"2023-03-13T18:22:27Z","last_seen":"2026-10-11T07:00:08.251592Z","times_seen":3295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ae1409dc2133407ed8de005bfceda6cd","sha1":"f39c33049286a7447ee5f50974b5b6033ee83f3d","sha256":"7562fb4c84a3f54733ff9a66a0ffcb8f301666bcb9c1ac3371034aa23fc078ea","sha512":"1131c035ef4a7c6a934bccabe20133117f563ff436bad652bd62ce24d9b673e95b4a6fbc50c1f80e5b8d3dea73023a46ca02bd533caae1f460886dc0360c0483","ssdeep":"","tlshash":"36d02b903750a02213a255bc2c320015f99210352d044544cb5c921438f3d82c81fa86","size":258,"data":"","first_seen":"2026-10-07T04:47:01.246944Z","last_seen":"2026-10-11T07:00:08.352459Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/5203c085/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"edf5802ab9dd13c0bbdfe06caaec3413","sha1":"08ab98ae897ef72aa9c7fae44ab5396838e001aa","sha256":"b23936895f7ecc61ecb6c24f752bc20478f6d7ac6790ec9eafe19c1bc6429f87","sha512":"1a2f7743e03808fdb4c3cd2815fa9863bf80459cdfbc6df579bac369a0b727e95be13ddf456ce768a37387265b592ce47b712de8fff900e45e87c535e04accf0","ssdeep":"24576:z3iODrFLTlRkTj1bbMM1GyZ8vDfTkxeBZ7+JdXcHhzJiuX5:ziODrFLITj1bbMM1GyZWTX5","tlshash":"5a755cdd32a3f45647a3e0a9581f0302f23e6449944cc92cf7aadae92ca4d0b557bf74","size":1629027,"data":"","first_seen":"2026-10-07T08:18:48.138558Z","last_seen":"2026-10-11T21:39:47.987302Z","times_seen":1654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7cd9c4c3344f1c6d7924b621ff783506","sha1":"f05b2deaed050668d1917ec7427de7fa8c8018ee","sha256":"b02684a5a6c4f4e60e1cb72f9bfe3d62519d14a38a50068502a177cd32183a75","sha512":"060ed14a38d9ebe3afd6b15236d7ca02a55d315fe152cba653f59f1075602b1fbca930c9e0f9e2a477aacccd3e5b981e3ea23d71bac6793e1d234ada5d909de8","ssdeep":"","tlshash":"c71000c000000300000000000000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-26T13:06:46Z","last_seen":"2026-10-11T07:00:08.291885Z","times_seen":4620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-10-11T21:45:49.878297Z","times_seen":284849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e05179d208be465a5ca8d92175def3a7","sha1":"b32f29b3c2e4456345f5ec7f75a0b6ff29b1d97b","sha256":"c82bc26becc531da2dd62fb0703ca22fa0735b206e3ec5a7fe975c6a696de171","sha512":"6b37861413d0000f6cc1ee07eeb0d596e102cdc1476494f5014542b48589315312be18721a916659defb509c09caab2f94a5ad4c95e4e0f8510b59aa573ea5eb","ssdeep":"","tlshash":"047000082c082a0000223028000b2208a0222020020000020a0000828c3808e002b82c","size":22,"data":"","first_seen":"2026-10-07T04:47:04.564961Z","last_seen":"2026-10-11T07:00:08.232848Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bdc7b991603f7c660e0774d2407a5c87","sha1":"c60d91b40bee5d71bd068e79f35fc26e1a4c4396","sha256":"6da2a5ba2c61f85a21c8af74876dddff8b1fc8bbf6e15f45ba8ada4757bf658d","sha512":"b8d909d82ffdfaa6b65d74b65250285b424efcd7da824ca832b4dd1f32f4cf5b5e1e4fc094d569f29abab3f12af6bb0621077ce2d69603c87eb89ffe7529a60f","ssdeep":"","tlshash":"c7100000000000000000000000000000c0000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-06-18T14:17:08Z","last_seen":"2026-10-11T07:00:08.26492Z","times_seen":1806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a6ee7b5c29b0084193e063e4172e7019","sha1":"2dbeb8f5198d876a8d15c5f474acedb1a6e9e229","sha256":"0fd7ac72c24a7899c69b3fd1b2905cb8cdc35728d18844ce02697cf4282882bf","sha512":"20f78d8bdfeefa2b4fdf8475de37f2cd09a245da329048973da0d4a67e728dce9ecf060ce766e76427b9fd26e3eb03da3a48a57907bc70c158b7ea53241258c8","ssdeep":"","tlshash":"49c02beba020fce143e1b1b010278127a03125e0f6064fece50b800037c1411f2ecd40","size":140,"data":"","first_seen":"2026-10-07T04:46:51.739689Z","last_seen":"2026-10-11T07:00:08.26392Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.4.02","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a6be9d65250bef59a48b7e4a7e8f68","sha1":"88c17324ae5b7db5665a74f9434556fc33886a7d","sha256":"4e894a6e908c979edbd1b7d4dc13755c9d415e95606ecb4e0e27ade365456eaa","sha512":"54dd6bcccbab0a753ff8e5d6e85a2182d9e744269893c7c0cfcf00302d3522d8c77c4c5c284cd263e81d379a93a91a95a68e84cd10da4734a585548f5928db65","ssdeep":"96:0LJ3N+1CdQBjh043aJ3v3qm3b343jDWhzXGhoSLLumHAAAgWGUXY9B7sVA+JPZ8+:093N+1CF4Of6mLo3CTTJr8p4q/1jRneZ","tlshash":"edc13050274b04a52e328b69ebf7b71473395013ea00ed05fb5d4be577e4c191232bea","size":5774,"data":"","first_seen":"2025-07-30T19:59:40.832658Z","last_seen":"2026-10-11T21:17:59.504212Z","times_seen":11921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e28f2f8e65febf6ba23cb8b1044c6452","sha1":"becebfa5b9c68c9d322cac30172d760349500d59","sha256":"a105383e03b9d06407ef4171052c6eaa7b1a6b29cafc4cb38d14dd92921dd615","sha512":"acf4c26c6366c8f3d4a892f3663d1de32fc40ffeb1eaef4d98b0ae1bf7102bad448a28165d2329b2970112521dc0089cd0a48621614bd90c4b8d87c88e85c259","ssdeep":"","tlshash":"fbd02b9e7c457ced918034d217daaabd84f211630e752605955bcd3016b97a6502c91d","size":275,"data":"","first_seen":"2026-10-07T04:46:50.732066Z","last_seen":"2026-10-11T07:00:08.254386Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1f79f4c40a09dafa65eeccc3f7568daa","sha1":"c3cae6beb3893ff296b2db0f8b5c85e703e30dfe","sha256":"0d7d0b1227efbbc6b1fc5351e885296df1e28fe5f9080654adf4ffaf7a4b6125","sha512":"0ac6b8b55de9284cb8beb0b2ab5a47d4c57c9863497f9e19b329e05f5d8ac9d35e9599fffb7809a249fbc5fa891e3e4a267bfafddf87164d34e08f9e82280080","ssdeep":"","tlshash":"75d095ac591c024964f77d91a292f50171f2459249601b414c4f556410375d5104450c","size":243,"data":"","first_seen":"2026-10-07T04:46:56.251817Z","last_seen":"2026-10-11T07:00:08.278528Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b0360239e110ce6c598e226625050459","sha1":"6ff0b07b03920d8493721851b0231f9e4010637b","sha256":"82c631689c4ade9d21fa8f6bc06bbaffb4cd0830dc6c8eb8127bdb32f387b43f","sha512":"fb1d2043b6ad418a819d4181a9f40ead7e4b4f61d57ba01bdac5467d12707e895286de39ee6c725549da6968769e3752c99481788a4e871537f035d5901d36d8","ssdeep":"","tlshash":"6fc02be07ce2812cdbd058a302326134914c0dccd10e42838182fc89777210f4c3cf00","size":131,"data":"","first_seen":"2026-10-07T04:46:53.148606Z","last_seen":"2026-10-11T07:00:08.289562Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-10-11T21:45:50.184418Z","times_seen":207217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wpascript-js-after","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"165e6dbde24c26102cc1cc5f5eb2a2d8","sha1":"6d687b466183c189125990f8d809f3922746e731","sha256":"a6a422e2983c6ea963d8c438f61cf3bfb5a80528d5d28f56c35d3b28eee2d752","sha512":"b3cdb46d0398130c4b04dd621aa6fd0f5f98518683517c1f7251d4d9c2985d0f5e6ce3510f72323b8e871a5b0c654f7a64038bde4332d166ce0812537fd724ca","ssdeep":"","tlshash":"bd41c046fc40704450732c3148738b30400c1cb2e1418cc5dec0ccffdc327412c89144","size":2050,"data":"","first_seen":"2026-10-10T22:14:09.402421Z","last_seen":"2026-10-10T22:14:09.402421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b2cc64106834c4ffdd0215c3c46a6fa","sha1":"bd17b731886b3a51ddf0d5144aeb6346a659cd0e","sha256":"4d00e7e2e4f5300081827b1105099ab9018a489b17c909f0d3c7af21e2a52448","sha512":"ecf075b518fad29c4e5dd1b21ae394e376e8692f65af14b23788cb07f6cf47b7823cac5f1273bfbba749973d2381fec864e53162ebf7e5034b89e0a7c03ec1d1","ssdeep":"","tlshash":"84d02b2de6e90e52fdc12ff143ede6bc00247222ede08404d944848245658e1fc48613","size":265,"data":"","first_seen":"2026-10-10T22:14:09.404097Z","last_seen":"2026-10-10T22:14:09.404097Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bcb54ebae2c92087f781a30d0dd2485","sha1":"45c59e1e92402d2d4fee70bee485bd29376c18a8","sha256":"de3b3412dc225f40a6b485c3de2fcc7a0d97b21e6db8171f9e2dbe80669b96c3","sha512":"77c861633fdae62ec5862a1fa0670fcbf9d9f637db6c118b9e958af5e16da8e0f54732a7719aa9848c6ca36a2ec6adf487b4c19e11acdf4241ea71fc7d11ad8c","ssdeep":"","tlshash":"d0c0c046dc00788450332c3048338730900c1e70e0958cc5ded0ccfedc307842d89144","size":175,"data":"","first_seen":"2026-10-10T22:14:09.407396Z","last_seen":"2026-10-10T22:14:09.407396Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffb3e705871905f2befba1c30bb72881","sha1":"9445a1c75c2f205cf1c17d431b199a973899f172","sha256":"eb050bb8ff009df5313548993d492b725f804bde8196dac5810979358360367b","sha512":"aa19e5c63006aab08887ca73802f694b3ef484723d2c267dc4450f5482d50444eaaf06c6b2455b9fafc12665d547caa84882b2d9d9f76d0bf62b6d37a93a9722","ssdeep":"","tlshash":"11d02b94eae80b43fec26ff4026df7e80029f222ecd08946154da4860854c85a589a26","size":265,"data":"","first_seen":"2026-10-10T22:14:09.414037Z","last_seen":"2026-10-10T22:14:09.414037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb1bfcf3650a9320e984ca4d1cf999da","sha1":"b1f21c04cf64ec46b2b86ae3a20693f22f0a7dd2","sha256":"5fdb2fd50c43ad58a804579383d3df2616d0db629bb8b8774d1d1f84129e003d","sha512":"48da2f5d372c6af4f83546f2762df02c9ecc8af4ce16515e281e6ebd36b3b2ce713fba778b49674a7ac1959d6f67d8084b5f57dc745dcf0de3c26dfd60889878","ssdeep":"","tlshash":"7bc0c04b9c0074845033bc304c328730410c1d70e09188c5dec5ccfedc313402c85144","size":175,"data":"","first_seen":"2026-10-10T22:14:09.418227Z","last_seen":"2026-10-10T22:14:09.418227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6cdb89bac910b360b7b4dc7f396bb658","sha1":"b6497a86c28150c9a287586b6a4a7c043d9a0025","sha256":"e7d735a828d6b74d8582b7025bac1b5221e19e2d0b6eb2a45dcb3abb6cbe4fcd","sha512":"0e5a253bd7afc891e12e61e16b1bfd597db65d474b8ec108f02293f5937e2d1a5115fa19d9eac187194215abd87a66cb8097120f429c680a7bd6041d7d947dee","ssdeep":"","tlshash":"57a0112c8830380c202a2ca8023f000ac8f0028a08e0a003200eaaa00a38822008280a","size":77,"data":"","first_seen":"2026-10-07T04:46:52.61637Z","last_seen":"2026-10-11T07:00:08.309285Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b8b5089c70ae62534970e2d8aa67e96d","sha1":"b661792a999a987b370423b7a021de751ba58883","sha256":"adf02dd669bdb32468d0b2d76d49042e9767984db25bc7048abb6bea29646c61","sha512":"2d956d0ee26d16de6ecf320699d4a68b473a624f8d4a51cd1dfad464daed72ade3299a84aa993b563e93471f3d85fcc106c74278cfb7482e32365df538a2bc9e","ssdeep":"","tlshash":"c7100030000000000000000000000000000000000c0000c00000000000000000300000","size":2,"data":"","first_seen":"2023-03-10T14:46:11Z","last_seen":"2026-10-11T07:00:08.250872Z","times_seen":1699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f476c8795b2a34adf963425d788881a","sha1":"4c9359d3ae970a78c277bd62396eaafc4f9e75e8","sha256":"7efbbf2f413e2d6656a6c5415e9080595d436e8284bf42336e07bee1f34279d7","sha512":"718ecb70afdcbe6e1250dc2b467db96c833ce35acdfee0f87624be1a9c1cb631bb6e0789e051eb9d2b23379a365c9fe9ed3e81ffd92934450aba12fcefd28581","ssdeep":"","tlshash":"2cd02b903750a02213a255bc2c320015f99210352d044544cb5c921438f3d82c81fa86","size":256,"data":"","first_seen":"2026-10-07T04:46:50.417662Z","last_seen":"2026-10-11T07:00:08.327225Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7cbdf8f232245efb48bb4a8d81b0053f","sha1":"7da2d4c98a18cb67e7580ddbe1de632e6f8183af","sha256":"4d29bbde32177474627779513ddd0cee7ea125b17fc63b343f957f474c69f533","sha512":"42d62aac21868ab2dae14f6798d53a331e74c30444bfd8d679f6c4ce12d8cfa650ffa1680f1a6fe7655b5fd10ff5e5ab4be3f729c18bfb6e0b0999cebc215b05","ssdeep":"","tlshash":"8d700008bc0c202c200238a8002b0238003288200c0a080802800088883200e8202808","size":25,"data":"","first_seen":"2026-10-07T04:46:53.722808Z","last_seen":"2026-10-11T07:00:08.293554Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d07108e456fcaa96868c9a7613044d11","sha1":"f652048d7737d0b8c3cad96d8e93e51bfa5b48e1","sha256":"043a2c8bae67690a8c1592da8f2d81230d6e2f10587ff42cce197ee1eaf29f80","sha512":"897834c0f7b803ff0c86c6debcf1874512eed727988c03c2e44c874487a68d3c797c21a8ce985f268e3d0cd8ecd3f88107c448cfc8e6bc7c59730cb271a99b87","ssdeep":"","tlshash":"9fb092d5e2a021a2c08585da84372324f5ea2ac13602183fe096ec0ea49060e04bd812","size":118,"data":"","first_seen":"2026-10-07T04:47:00.757288Z","last_seen":"2026-10-11T07:00:08.290682Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4b43b0aee35624cd95b910189b3dc231","sha1":"4dc7c9ec434ed06502767136789763ec11d2c4b7","sha256":"454349e422f05297191ead13e21d3db520e5abef52055e4964b82fb213f593a1","sha512":"a882f0ac848b0b6b4ca7b42bfa1d266afd0ddeba9204ae57a984a69376d59816b1ef3f4d442ea8a70396067ff5b70e0ae8eab3935b617b8e366d8e35c3bfe14c","ssdeep":"","tlshash":"c700000000000000c00000300000000000000c00000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:42:46Z","last_seen":"2026-10-11T21:48:22.245743Z","times_seen":61990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5e88bda696e70bf8815fcedf6f0fa441","sha1":"1ee50e094ad2a5d426d61e04e15d187ec496bd9e","sha256":"b75b25f8317e19c40adc8d9b8534bd7d58c527310ba8199852a91ad59dd0469a","sha512":"b623fbaf7e67175273f2cd39c51637d5fb8cb24de1967a9c20ba62ed77b99305cc12881e945b70ac6a92dba1ae74cb30cf6bccaffff69d1c9bba937a110f682e","ssdeep":"","tlshash":"d19002483462f42052155516815a9545615a5451841a2424d1d05481ae90014402795d","size":49,"data":"","first_seen":"2026-10-07T04:46:51.959462Z","last_seen":"2026-10-11T07:00:08.309925Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61e9c06ea9a85a5088a499df6458d276","sha1":"e2415cb7f63df0c9de23362326ad3c37a9adfc96","sha256":"fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4","sha512":"61037724a2fb00a12fa8a53ada233f54ff7fc6ee02048e579b83a127ce79fc03906c35b5307beb18a3cf5021fe031ae6587448d4d60a082d73252fe2e2f4ae7f","ssdeep":"","tlshash":"c700000000000000c00000300000000000c00000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T07:00:08.305504Z","times_seen":81843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-10-11T21:43:22.235055Z","times_seen":119061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4aae7fd3c815b1cfa3660cb3227a214c","sha1":"4531c0c13ac8462f9dd8f0dff0e13b1c3e150bcd","sha256":"cca00c516ba05df351915a75df4db57659d685c5af3622cedbba3c6b626af2a9","sha512":"c2f67d5e011e7ad703ab55ea89f91fff91b4245f5294cb73ded819757eb158102fd038f24b175c1f6eae717100cd63d9e9529cc90d124cd90a26ab4a1f650d4e","ssdeep":"","tlshash":"4d50003c30003000c0c0003000000000303c000cc0c000c0003c03c0c00f0c00000000","size":11,"data":"","first_seen":"2026-02-18T03:26:52.257023Z","last_seen":"2026-10-11T21:45:50.103651Z","times_seen":100478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-10-11T21:45:49.924243Z","times_seen":182019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"dd3277995804d7a0c84077097a103f6b","sha1":"038fb85922b6f617384a412dd47a4a71cc46241a","sha256":"6b398e4d7406d3fd8962049393da09333b8dae575ec00d116107423793b476e4","sha512":"2b3cf17a520287ca5a571c280975245169a1fa1a7f6263688b2e35b3dfbb6783fcf425cf2c3077a7a3aaab7f58396985b3868e55d5c0fad384425e24d0b2a04c","ssdeep":"","tlshash":"0d7000083c08208000223020000f00080022022300000003080000802e3c80a020f808","size":22,"data":"","first_seen":"2026-10-07T04:46:50.394277Z","last_seen":"2026-10-11T07:00:08.269008Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cebe60f90f71ce8f95f327ffbda7b887","sha1":"20430d4113e765ff989b1849d3e951b20494d6f9","sha256":"bfadc6ab94857d0126303f27eb4a8bd8d8742ab46cddb9cc13e7badb948fa984","sha512":"52029020c3417854a12683132a6250942ea1f3ec854a4d0294fcad55253fc6c91f126f46c36104cd277f1709ab7758d5014a40ca113dbe5fb6bdde70b74e8bd3","ssdeep":"","tlshash":"68c08c8920a2dd8deb22089584db1a8096629e82d3162a2ae11290262762c8b8d49e82","size":156,"data":"","first_seen":"2026-10-07T04:46:56.451354Z","last_seen":"2026-10-11T07:00:08.27912Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","size":15315,"data":"","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-10-11T21:38:25.25957Z","times_seen":160905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J3VKYT0F57","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"950c757010baf62582f95d280c523a14","sha1":"d33a01d58616b858b31fa9379b4fa0054b3f08dc","sha256":"4b2113a70a8ec4d5a8c0e8bebfe39c74d99fe7f6daa0ba2cd1310254d5a04d75","sha512":"8f70e790a84ad059884b814a7b0c8a4def99329fb52fb0e0654c730ac26e6326308ee53cd16b94dd6a98e0f2ca7702073159ed6e1616613ea621019051aab36a","ssdeep":"6144:l+x3sfCyqMnhIma7ulkl+cfIb/EfD3ce2XYch2rSFerr+p:l+HEKml7YcEp0","tlshash":"b7d408ceb3c67462929af568903f02cb697f29a2b45cc89bb18ddcf01d3454a5163f78","size":656170,"data":"","first_seen":"2026-10-10T22:14:08.914486Z","last_seen":"2026-10-10T22:14:08.914486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5PG9NBH8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b9caf3ea45a5e1d4d2668c7fd892645","sha1":"a2b38de9cac92b7b21ed8e1a918e2f206cb33fc3","sha256":"af7cdebc5880284bec8f8fb7176be5504020131f1a1dc8a2b474e505cb5ccfa7","sha512":"79b54ec3a1dd9157ce71ca5f3f6a66a40d5d5523213bb773c09e15c238af6020f180fb7fc67881c0c4cf066c9ac300ae78d1eac1eb94ac7d103646eb4b2bd86e","ssdeep":"6144:FsfCycnlIma7ulkl+cfIb/EfD3cezwhw2rZ9p:nemlXh/h","tlshash":"74a409ccb3d6b46683a2b578903f014b727e6d91b84cc899f14ad8e42d3865a5273f7c","size":451749,"data":"","first_seen":"2026-10-10T22:14:08.824289Z","last_seen":"2026-10-10T22:14:08.824289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3605c251087b88216c9bca890e07ad9c","sha1":"eed1903a65fb51375c9a57c0d5925ebe4056dcab","sha256":"7ef9ec0cf2c4facafddd03ab96eca0939d6749b49952bd816f1e0cc6901941d5","sha512":"6dd46f1ce6814e7ffaf176703e63e36ac21c6c3bf0a9561b5a60161c870653e336bb149900d03b5cb659fe04764d8bafa413379117049d7ca912029fa5073c95","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000003","size":2,"data":"","first_seen":"2023-03-10T01:16:47Z","last_seen":"2026-10-11T07:00:08.301457Z","times_seen":2707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9353ed11bdb541268d10e86ea9368492","sha1":"8b6197df4216a078e5450d6940d5155922eedf29","sha256":"52ee167f416ff7c352b3a68fcc69e66c923ea22951213ee67cb4038c63bf163b","sha512":"823e144519f9f342febd4550c860ef370a870f3a9e3414238a49593c9a935b9417f6930122070668378e99981ce9070e1a267fe2fb0261f2babef76a5e8b4d57","ssdeep":"","tlshash":"7fb01218340854c7d01590dc04db38e428440381d1d15d11da2d62b807ae4360c9e81f","size":93,"data":"","first_seen":"2026-10-07T04:46:53.267833Z","last_seen":"2026-10-11T07:00:08.281986Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/woocommerce-js-extra","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"242f9537e0ebe75499d9ba1a83e06b24","sha1":"81070139ba2217df20d37c4d51059ac97f575272","sha256":"42ac7eb595f862ff84c48eb71457da4671a538efffb4492da081d4c9008db699","sha512":"ee44e2a9e4fd78fc74bb555dbf7889457923815969ea84303fb92acd5b13f3524c1fddd4e2b262c26594cfb813f3637643bfe5b7739e7bcba1f8e04f8b3b14ed","ssdeep":"","tlshash":"3fe05b56d5792d83d7c86ef1041525e33df4d21af29508403abce95932368c5dd255c7","size":426,"data":"","first_seen":"2026-10-10T22:14:09.450168Z","last_seen":"2026-10-10T22:14:09.450168Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"92eb5ffee6ae2fec3ad71c777531578f","sha1":"e9d71f5ee7c92d6dc9e92ffdad17b8bd49418f98","sha256":"3e23e8160039594a33894f6564e1b1348bbd7a0088d42c4acb73eeaed59c009d","sha512":"5267768822ee624d48fce15ec5ca79cbd602cb7f4c2157a516556991f22ef8c7b5ef7b18d1ff41c59370efb0858651d44a936c11b7b144c48fe04df3c6a3e8da","ssdeep":"","tlshash":"c700000000000003c00000300000000000000000000000000003000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-10-11T07:00:08.337385Z","times_seen":85075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ff04e70febd9849133ac8a6331df8055","sha1":"25f71c070b5de7cb07e3918f85ba55815a469878","sha256":"ab5577c3da74c345e7bc351291a4008548455f486ae3615876a1b2bd10b6d6f6","sha512":"d5bfaf9c5a7c9676f006a3d787fb333e48f2c6c962cb71cbf8fb3c9b5df6c1f8f08461458656a204ba193ec2c394be757c15bd47916f2294f704cfb443d0e08e","ssdeep":"","tlshash":"26b01248b95206e0d057d370e36f232684fb0c04114faec0358361c12073a57495eb04","size":107,"data":"","first_seen":"2026-10-07T04:46:56.345081Z","last_seen":"2026-10-11T07:00:08.212816Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-10-11T21:45:50.015074Z","times_seen":263804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"32d9f8a06fef6661e400af0e2bb3a1d1","sha1":"aa5256e1f07786d88e423a0c79e5314e878ef4b5","sha256":"c377673e29de9de43b49e299803a61fa5a6538be4d208a83336cb185cceb5b5d","sha512":"e8d1510a4c0d887cb41710ffe8c5e384ec60fe6377510f68a843fa577ee44e503ad63f2e17f544473dd481a4dfbb3e6587bb823a741912c3598473d4b6a83040","ssdeep":"","tlshash":"c2a0112c8830380c20aa28a8022f000ac8f0028a08e0a003a00eaaa00a38822008280a","size":77,"data":"","first_seen":"2026-10-07T04:46:55.242323Z","last_seen":"2026-10-11T07:00:08.246021Z","times_seen":769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"338565467469af42c7b06f6238570053","sha1":"c75db274f65ddc1aa7bee1a6c92001ca5bdc7cb7","sha256":"d06b953fd0dca15f5a2b5b8db2c5f1aa3286bb916b13ba9de9fc1290159597b2","sha512":"d85c25567c13b1bbefd153b9a4eb14b91f862257eb4707f76b31d589e7062363a15ac72bdbe8359e81b3b4ebb47239f0569c4d83ae35979b7674ec8fd07b55cb","ssdeep":"","tlshash":"c710000000000000000000000000c00000000c00000000000000030000000000000000","size":2,"data":"","first_seen":"2023-03-08T07:48:22Z","last_seen":"2026-10-11T07:00:08.336887Z","times_seen":804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"68af90c152011cd02beb3a7749d994a9","sha1":"9d7abc5d6d52927c5e6774f77a699fd34ed7aeeb","sha256":"d27882edd48dd226463ea185611faeede1f6be5f79a95dc1343b331f3df7fc6e","sha512":"0b01c2846ccc88e3c33413f58818eed23b4b004b7fad248557793b49a634f7f31f1631c052583aeb5107cf459808b4eb3768b42092c2e60b1af3551562b0ae44","ssdeep":"","tlshash":"13e0d890bc2c5ac5a4dc56b7c04f3611901e38f3a94a1a5ee622fb11d7a86478f63b86","size":386,"data":"","first_seen":"2026-10-07T04:47:04.210189Z","last_seen":"2026-10-11T07:00:08.306122Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-10-11T21:45:50.107216Z","times_seen":222662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"6725ae8e9c39ab286f880393cd586abc","sha1":"89e457ebc4b54a72bf332e79b22f89385fe87608","sha256":"a0903ae511db5caad5e4f7dae5a165d398ab1d9d65029746bc444f0c69e10b72","sha512":"e9f79973bb016778e2e66846598abca0feff50314e3d64ff977b22403a349bc1832287d7b1d15ec55d3b75ab0b91f80834f3b2e408b0a3a44660eee96dae14c1","ssdeep":"","tlshash":"e8d02b51c5f40f45edd2aaf0011ebab542543232fdd088440445f58308788d4bd0a653","size":265,"data":"","first_seen":"2026-10-10T22:14:09.464759Z","last_seen":"2026-10-10T22:14:09.464759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"4133be90844fe9add933c005260902a9","sha1":"b9a41288cd5958f6d5bdedcc92a011894589b895","sha256":"3798e07a492da17838ade1ac02ceefa453d01651c9365c54300a59534e83c102","sha512":"765a6d6e6a0ebc4687a83cff063327873264406588abb0c8dd792ae849183e606211d39a60fef529a89abb72cc2d4d5afa5d19db4880089b8bdcd250cad9d4b4","ssdeep":"","tlshash":"90c0c086ac50b44420376d3048328b30d20c1d30f04188d5dec0ccbeec31b402885154","size":175,"data":"","first_seen":"2026-10-10T22:14:09.466936Z","last_seen":"2026-10-10T22:14:09.466936Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"82b339a3fd1d6fc555cb6ee04c8402c5","sha1":"9fa4d7d4dd40513a9137cd24939636ad8ad06c5d","sha256":"35f44d3de658e0b2d0c8078ec6193dffaf80ec18ce38619ce5734c46b50ce563","sha512":"cbe2a2e6052ba183194b8d92933ba3e16264884fdd535368bd432785d56a2cedc921646107d5cff3a156a4e658ecdf846107739f81051537243840baf8aa7b99","ssdeep":"","tlshash":"e5700028bc0c200c200238e0222b020cc2b28a000c0808000a8000a08c3200b8822808","size":25,"data":"","first_seen":"2026-10-07T04:46:57.044798Z","last_seen":"2026-10-11T07:00:08.257185Z","times_seen":788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2db95e8e1a9267b7a1188556b2013b33","sha1":"07c342be6e560e7f43842e2e21b774e61d85f047","sha256":"acac86c0e609ca906f632b0e2dacccb2b77d22b0621f20ebece1a4835b93f6f0","sha512":"f10127742e07a7705735572f823574b89aaf1cbe071935cb9e75e5cfeb817700cb484d1100a10ad5c32b59c3d6565211108aa9ef0611d7ec830c1b66f60e614d","ssdeep":"","tlshash":"c700000003000000c00000300000000000000000000000000000000000000000000300","size":1,"data":"","first_seen":"2023-03-07T01:15:12Z","last_seen":"2026-10-11T12:59:06.566004Z","times_seen":61935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"221335ae20cd9d88bb0f074caf700325","sha1":"caa7d3bb305d5025cd4c09615d0f3c121e2457f4","sha256":"d29fc4c10ed2cc05ab28d3876aea305350891b72a6c01e4e6ce98db9c6403533","sha512":"106dd5dc1062186336891f0b04ade49591bebc176cb02187d783b4eb6d2d2839d865e14dbc0fca69a8908af5dd96a05c8177d293a4fba278f9fa1e1a41cc32bc","ssdeep":"","tlshash":"7c9002256f09110294350d135308750322448e3b0752cad4e1d25f146e8d8111bc5602","size":55,"data":"","first_seen":"2025-10-07T15:56:26.002292Z","last_seen":"2026-10-11T21:48:22.193978Z","times_seen":13210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4f5ddcf3aec041739a88db70d12fbadf","sha1":"1c3a4bb380c15525acc40264875c2d290b3ecbdf","sha256":"14b093ce3a717d9d78e381a591cee4e161236d2877b86221dde74747536ec130","sha512":"ea4f2dc085a5081121ccf5c6187f15030da6e0a20950dc0bbd20b9e35ac0382e6813902e26a6903acbfdd4fddefef999de464ba473b94f7df97f3cd4b1474cf6","ssdeep":"","tlshash":"c71000030000000000000c000000000000000000000000000000000000000000c00000","size":2,"data":"","first_seen":"2023-03-09T01:10:10Z","last_seen":"2026-10-11T07:00:08.272948Z","times_seen":6603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05c6e49f251bbb061b761a20d95a6dc9","sha1":"0ff0ab3cf8b90fd4eca60b5d7305e5f327777439","sha256":"f96212e5abdcc68a71918250daaf7687a893e3bd6bbea0d2c8c7e33b24f7101c","sha512":"ca438cb8cb82f8def83c6eab13cb5fe6d3ef80efa923537f9593c1966b1518c91dc38705d1e347d2d5621dae73a5b26a9ea7781f9e8cbb23faecde535cd360b0","ssdeep":"","tlshash":"e2f0a2d02a12b0bc89b03045b1d9f5f0f16b9c5968113406bd5f885f5190e9b49cdf17","size":600,"data":"","first_seen":"2026-10-07T04:46:59.809933Z","last_seen":"2026-10-11T07:00:08.330323Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a7f3a855c7b32fae1b8e1728f58b391b","sha1":"faf1922476e2cf7c7222c8d9b28dec812b61d83f","sha256":"37a0ef0195ade97f8fb1f6243bbde502ae55f7a694a3f71d89bcf3ec2105b355","sha512":"2e0c4175f46dab683e3edd2cc6dff86b20740931964bf76667b171db8d9dbe6798efa5b83a079cb83207edb5147bbb361787442cf7ed79fd703eb6a68490bd4c","ssdeep":"","tlshash":"d6f081951682454577fd4175fcab4f533c2aa581520904d50b5070f212b0aea79edf5e","size":578,"data":"","first_seen":"2026-10-07T04:46:49.446504Z","last_seen":"2026-10-11T07:00:08.311368Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-10-11T21:41:59.109188Z","times_seen":169061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"536c1cdb2625f63c3d19e7393bbec70f","sha1":"31dbd04f9d008f664c7a37500ef2a08583aefcac","sha256":"e11548e8095517c3d817ea738c7ebc429095cfcf10c71406058599eeb06f37e0","sha512":"6101ef410b6bffd6127994ab01bb3214fba680e99c5e7f93c92726d4cf65f6b905d52f3911c48608dc9b4ed9104ecba1f1d5a20969523d93f933ebf2dac7159a","ssdeep":"","tlshash":"40d02b45c4ec0f46fdc13af2022db6b681283362ee824c00779a8d4709b4cd0f904522","size":265,"data":"","first_seen":"2026-10-10T22:14:09.485583Z","last_seen":"2026-10-10T22:14:09.485583Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ec78de1d37ccad034c99d3fb81e4047","sha1":"389791a3a1a14b0d98aeb91c9493469bdda18fb7","sha256":"55ea6d759556dc2a494e1e46510898eb8da001f118734580c891032d22ab73a6","sha512":"32204a8875f6016bfc9ef4a4b2e17d7d3cc4e686dbad1396fa5f3e7fa75b29089f6efe56070981ed8c9bb905b3a7419a2ba4847af8b876bf0d50864c1ebbfd38","ssdeep":"","tlshash":"69c0c046bc00b04450332c3448738735810c1c30e046c8c5dec4ccbedc317402e85144","size":175,"data":"","first_seen":"2026-10-10T22:14:09.488321Z","last_seen":"2026-10-10T22:14:09.488321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"9966f2298309e6606accbbbea73d1c8d","sha1":"789167bdacb8d9b4ae78421afea4f4a628fbf585","sha256":"aed9777d12942b2a47bab6b5655d92000e2b3478afea612595eea6f2d0cb1e33","sha512":"8ad6fc352e2a5441bc755af4efa63a4e5a5044c8377969761d7aa9bd828e59699d8e0d4e689c9e86fa7820043207aa1bde3d0420bb4cc6776bba692612dcc6a1","ssdeep":"","tlshash":"c2d02b5adabd1e51fcc37bf5011eba7144687665edf0944024c79a430a288e0fb48517","size":265,"data":"","first_seen":"2026-10-10T22:14:09.490772Z","last_seen":"2026-10-10T22:14:09.490772Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"089672379d1682a29e19d4b1db6146ed","sha1":"59d6be690221185029a24cc38e43fdb5a5a057f7","sha256":"3ee96b6a21cb7048cb8f0407ae767e7e8a951a11df688c632cccda2fa5463390","sha512":"9cbe80f6905984ddcf87d2c53824da3b646350fdc97bc06e5df38dde478db234d6e65c10298f3d4312fb3646cde9e84d0b0f878554c8a23702a785a907ee2748","ssdeep":"","tlshash":"88c0c0869d0070c420332c334832c734400c1d70f0418cc5dec5ccbfec313412886288","size":175,"data":"","first_seen":"2026-10-10T22:14:09.493935Z","last_seen":"2026-10-10T22:14:09.493935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9636,"data":"","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-10-11T21:38:25.322456Z","times_seen":186030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4350,"data":"","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-10-11T21:45:49.542817Z","times_seen":58278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f05e6b0725038cfac0610a69e75b8f3","sha1":"f60c1d6b4b4b221796e5db04836985580dc48822","sha256":"020dc37e83cd04c2ec254c28a59de742444865fa4f71d62aa4fd2504a8702de5","sha512":"505e7100af4fd0d96d10fcb513d480ab8a553b9f4dd64173b52ba48900eacfb223f83c4989d1192b46dbe9cd9088a0c952267126a5d1e1d3cf582bc534db9df1","ssdeep":"","tlshash":"bde0df9cfc810358ad9f43aac2c331a098587430d18a9e0ea1f26b0698f653786a3a45","size":350,"data":"","first_seen":"2026-10-07T04:46:55.202273Z","last_seen":"2026-10-11T07:00:08.229794Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1d7b33fc26ca22c2011aaa97fecc43d8","sha1":"762cf7076b068d306d32ea79b0d0e2277121f2b5","sha256":"c13539d1568999137c4e0354795cd37b649a19a855b77ce217e8e7b8e293a555","sha512":"f14703c6a332755e0d908bc239fc832217185344a04d6bd09d9ab44bddb6509be2b885ee314ceec1df181817b9d6d0fafa97d4ce86204728eadc2dbc286672cc","ssdeep":"","tlshash":"c7100000000000000000000300000000c00000c0000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T12:06:30Z","last_seen":"2026-10-11T07:00:08.267212Z","times_seen":6021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"643bd8524879f22341f52921c7ab4038","sha1":"1935e1b80b8e89c48df0980ff124f1c3da6277f8","sha256":"eac064f4bea8a746345a47ef16837cef242860ee41aef9a1c23ab7ea83433c79","sha512":"2a28528955840d70770c3a4ca8451ebd5b40b4bda8aa9bd11a4a342d76637d17f09aa9379c51fede2363d956f7b80051bd1c25c46e9cf0d3bda513202262156d","ssdeep":"","tlshash":"b5e02258fc100258dd9b83abc1c731e080057030e08a8e1ae5f1ab16e8e45b3a563e85","size":392,"data":"","first_seen":"2026-10-07T04:46:57.697283Z","last_seen":"2026-10-11T07:00:08.295238Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-10-11T21:39:48.243032Z","times_seen":221955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f1b01cd6a60f04914380d0903f9e925","sha1":"cac93d9e8a89ee82ac24753820820a0f4d9745b3","sha256":"1d978d7874607e2ea38fcca3d48a76daf951cca95dc9523eb0346fd4324b4c6e","sha512":"8ac592aec4c41cd4f89e4bf65c38a39c910d4536d6a4738ba413a8e73d835b7b06e990952c948916e700178e8b326c2c11a3aada9e1ac1dd1016706d16c152a7","ssdeep":"1536:RN1g2dcyjmCsxaLBUxVTVXUgMAvy3Jh2/tty8MAczhP0Ncz9+rhlQwKvEVHNGMNC:u2dm8n3JiUV6MvEPGl8Jbm7P","tlshash":"d5f30749f251353a42ebb1b6a13f530e72336428640280acb569e8da6dbdd8d3137f7d","size":159882,"data":"","first_seen":"2023-03-07T22:14:13Z","last_seen":"2026-10-10T22:14:08.833868Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bea9834170067795ccedf04b1d1e90fb","sha1":"b6baef8a98a84485fcbcc44a179b6349b9430553","sha256":"35d88f769f114203a5e0fa46eb51a0eb2d9567f2971dfc18d74fa1d1165f583c","sha512":"4d1a5ac9ef959aac8ebe268816f4de6be5cbd41889d433353763dbd22123153933bc33e8b35679955aeb0d3e956e8a632e7c10981a26bc6569d1bff81e527ef2","ssdeep":"","tlshash":"a7c0220831bcdc21aaace620ccd38ec0e9afe222c19b032d1888be089c93028495c806","size":183,"data":"","first_seen":"2026-10-07T04:47:00.002608Z","last_seen":"2026-10-11T07:00:08.289042Z","times_seen":773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6b62befb44a0bc7dbbdf0e21b6d8ede0","sha1":"5a5a32a3f278550138e73a74286e46896fc0b4cb","sha256":"ff9e360f5c78e54d0d05ffc6e93ecefd38c6219ad0f0eb61ae042fc790103251","sha512":"b3902f7ddef2782a078228fe59bd40cab9b76422a2ed5c33681b541c71b74935e141a55902ae898c962e2231aa6f81081c56509ba4fe903c560e3a27a761894b","ssdeep":"","tlshash":"c0a012500a0c61003814106120c612281061408920a1702c110482a09b3a51734060c8","size":74,"data":"","first_seen":"2026-10-07T04:47:00.691393Z","last_seen":"2026-10-11T07:00:08.253212Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wc-order-attribution-js-extra","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f79b28c1d35bda93cdff36a8e3d0a187","sha1":"afcca8bc022355fe22d12a369f77dd34a8d70137","sha256":"3ba88d7746588547d072d3a0b059e87e2d8cab04e2244465cfa98ced29a99eb2","sha512":"25017ffff274c01ac139f7c94db5dd98f8dcca512ac23c9d1015007271e5ce57fa805ed5124ec67a799a87a7d15362a346ad75c409fad320caa8ec5583c5b9ea","ssdeep":"","tlshash":"a1517612ee14a835f7c2813141ac5bfd32b713b6f8c0412dd3ad8b5cd268b81e0d2a0e","size":2616,"data":"","first_seen":"2026-10-10T22:14:09.507177Z","last_seen":"2026-10-10T22:14:09.507177Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-10-11T19:01:54.948618Z","times_seen":66366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J3VKYT0F57","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bc61c8ed488ad349a6141a242aad6be","sha1":"3146e7ce817be71d6d58ab25c0f2a5dc697fad60","sha256":"68e20fb1a3ae6cfc3e3f41c3e42e1e4a7c01f3500145ee5703e4806df2cac038","sha512":"9f62b136f9b493378cbccc822795b5c9d1d02c5525a804a183c82b0b257f80c31c8f8e157d38dca481735880186bb065aadd4af9e59568748632271f9f1c1321","ssdeep":"6144:l+x4sfCyqMnhIma7ulkl+cfIb/EfD3ce2XYch2rSFerr+p:l+EEKml7YcEp0","tlshash":"f9d408ceb3c67462929af568903f02cb697f29a2b45cc89bb18ddcf01d3454a5163f78","size":656170,"data":"","first_seen":"2026-10-10T22:14:08.846765Z","last_seen":"2026-10-10T22:14:08.846765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"354b4721a382b6286743526dc388f1d5","sha1":"45b8d3123a90a6d907eb5fddac14b397bd96ad19","sha256":"07e48c3bfc776f352b83c1ee52b639c3a28c7495a728408e27dda4ea5103643d","sha512":"3524b2d8982b33ff37451bacaa2c6d9ec83254dae19bd850ff5c25f181affc05852e5722f10b1f6c0a7843ad2fbc662245718de7b748fe5c3ab59de1a1fa846c","ssdeep":"","tlshash":"fab012843424301d582204b3103d0900b0c28c073d811012a044215013b4fc8440649f","size":93,"data":"","first_seen":"2026-10-07T04:47:04.791489Z","last_seen":"2026-10-11T07:00:08.285556Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"349587c164dd0a7e1a635fc3294fddcd","sha1":"50ced7116c9cd4fad5777fa7fa283450810d45c6","sha256":"71daa9d79fca972da6932bbf199432aa01bedb3e5ab6edbd2ae5643ba156ff4a","sha512":"0465bbe8f73d37f75900a5f82a87b301ad33d7e17f0307a687078abb45bfdbe964154831baee295a9adc23f97b1a8c45c14eafb6867f1f6944cc665ae1da841f","ssdeep":"","tlshash":"5911541c705e379aac9677bb424dd53832e20e4b01310f57925f02d0a7aef97e35c200","size":986,"data":"","first_seen":"2026-10-07T04:46:52.859171Z","last_seen":"2026-10-11T07:00:08.353339Z","times_seen":767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://lichxuansaigon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-sms2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.349Z","timestamp":1791670313349,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-sms2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5PG9NBH8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.152Z","timestamp":1791670314152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtm.js?id=GTM-5PG9NBH8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nexpires: Sat, 10 Oct 2026 22:11:54 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 10 Oct 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156606\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451749,"size_decoded":157236,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5394)","md5":"9b9caf3ea45a5e1d4d2668c7fd892645","sha1":"a2b38de9cac92b7b21ed8e1a918e2f206cb33fc3","sha256":"af7cdebc5880284bec8f8fb7176be5504020131f1a1dc8a2b474e505cb5ccfa7","sha512":"79b54ec3a1dd9157ce71ca5f3f6a66a40d5d5523213bb773c09e15c238af6020f180fb7fc67881c0c4cf066c9ac300ae78d1eac1eb94ac7d103646eb4b2bd86e","ssdeep":"6144:FsfCycnlIma7ulkl+cfIb/EfD3cezwhw2rZ9p:nemlXh/h","tlshash":"74a409ccb3d6b46683a2b578903f014b727e6d91b84cc899f14ad8e42d3865a5273f7c","first_seen":"2026-10-10T22:14:08.824289Z","last_seen":"2026-10-10T22:14:08.824289Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NFJFX6W6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.155Z","timestamp":1791670314155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtm.js?id=GTM-NFJFX6W6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nexpires: Sat, 10 Oct 2026 22:11:54 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 10 Oct 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158601\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459223,"size_decoded":159231,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5381)","md5":"4b5224fb876c3fa1391404e44b41e0ba","sha1":"7dde33429ae12512461b7135db6c12499e49707a","sha256":"a00e05d32235d0017f53d906ebf008861cfb5ae63713619b1cc94389e7f76b1e","sha512":"b5d3fd1a7138c3f9e0e958cedb8f61a4684ff242534728636588aca977dc3a47a2e6ae609e5e35e7c3f6b335538bf74a21fcfac6ae12d572d7a820d237f49c9e","ssdeep":"6144:8sfCycnlIma7ulkl+cfIb/EfD3cezMhw2rZtp:8emlph/N","tlshash":"eda419cdb3d6746683a2b578903f018b727e6d92b84cc899f14ad8e42d3465a4273f7c","first_seen":"2026-10-10T22:14:08.82898Z","last_seen":"2026-10-10T22:14:08.82898Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/5203c085/player_embed_es6.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:54.543Z","timestamp":1791670314543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s/player/5203c085/player_embed_es6.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed\r\nCookie: __Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; YSC=0SfBoWLFxnE; VISITOR_INFO1_LIVE=bjMeMSNQWEk; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; __Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ"},{"name":"YSC","value":"0SfBoWLFxnE"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 483184\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Oct 2026 07:42:24 GMT\r\nexpires: Thu, 07 Oct 2027 07:42:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 07 Oct 2026 04:33:48 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 311370\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1629027,"size_decoded":483872,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (894)","md5":"a5a2a85b805fe968d163cfae93bba88c","sha1":"90bc2c6b01ecc8d00f6e7a0062d4a3d5a22bc3c1","sha256":"3085129d17677acceeac9a23bcf21b480b9cc5e4057c7f5f8dcd7e3da245a747","sha512":"ac519c183eaa36f65577b313a689aa7127e3cbe21d57924748dbf1280edf8010ded4fe08ae7f010c5dedacb4a3bd7a0908e6b868bf31a89b03e2022ebd6c0fa8","ssdeep":"12288:mReD87YiO/4gTf5FDFLTlROsSTj1bbMM1uTbx:z3iODrFLTlRkTj1bbMM1Gt","tlshash":"d0254aec32a2b49353d3f0a5485f0306b13f5915948ccc2cf7aad6e42c7994a85bbf69","first_seen":"2026-10-07T08:18:47.704703Z","last_seen":"2026-10-11T21:39:47.870659Z","times_seen":1710,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.358Z","timestamp":1791670315358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-origin: https://lichxuansaigon.com\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:67:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:67:0\r\nreport-to: {\"group\":\"ascnsrsgac:67:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:67:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:57.892Z","timestamp":1791670317892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Request-Time: 1791670317867\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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%3D%3D\r\nX-Goog-Event-Time: 1791670317867\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 2.20261007.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 994852314\r\nX-YouTube-Page-Label: youtube.embeds.web_20261007_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1791670314705\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C499%2C302\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 13475\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed\r\nCookie: __Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; YSC=0SfBoWLFxnE; VISITOR_INFO1_LIVE=bjMeMSNQWEk; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; __Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ"},{"name":"YSC","value":"0SfBoWLFxnE"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D"}],"method":"POST","post_data":{"size":13475,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"2.20261007.01.00\",\"configInfo\":{\"appInstallData\":\"CKrwqtYGEMn2gBMQyvuAExD36NIcEKSOgRMQwY_QHBDt-9IcEL22rgUQnOXSHBDcrdIcELjkzhwQ2vfOHBCHrM4cELCKuCIQ5Yq4IhC_2tIcEJ_PgBMQzN-uBRC2tYATEI7w0hwQnpWBExDevM4cEK7w0hwQ8N7RHBCBzc4cEJmNsQUQ9quwBRC-hNEcEPjEgBMQ09rSHBD82tIcEOfr0RwQrt7RHBCkqdEcEK7WzxwQ6PLSHBDxtNAcEL2KsAUQntCwBRC8pNAcEKXj0hwQjLnSHBDvu9IcEJPy0RwQr_jRHBC269IcEImwzhwQs5HRHBDx7tIcEPb30RwQxP3SHCp0Q0FNU1VoVkotWnEtRE1lVUVwVUNuQTc1RlhLa0J1QVd2LVFQNFFQZUJRQzVCUWViQWJJRTBBU0lydWtMTXF1c0JKUE1BN2JrQnVTRkY2eTdBOW5WQmQwc25Jc0Q5WFAycEFVRkJRUUQ0NndBaGI4R0hRYz0wAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\",\"windowWidthPoints\":499,\"windowHeightPoints\":302},\"thirdParty\":{\"embedUrl\":\"https://lichxuansaigon.com/\"}},\"events\":[{\"eventTimeMs\":1791670314719,\"latencyActionTicked\":{\"tickName\":\"mm_is\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314723,\"latencyActionTicked\":{\"tickName\":\"mm_ie\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314731,\"latencyActionTicked\":{\"tickName\":\"ep_init_cus\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314731,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314732,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314732,\"latencyActionTicked\":{\"tickName\":\"ep_init_cue\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314965,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314967,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314453,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314247,\"latencyActionBaselined\":{\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314346,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314453,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314467,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314310,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314346,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314319,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314346,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314547,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314583,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314530,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314584,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314530,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314557,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314530,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314574,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314530,\"latencyActionTicked\":{\"tickName\":\"rsf_ecc\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314549,\"latencyActionTicked\":{\"tickName\":\"rse_ecc\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314973,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314703,\"latencyActionTicked\":{\"tickName\":\"rses_dpj\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314978,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670314982,\"latencyActionInfo\":{\"serverTimeMs\":87,\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1791670315023,\"screenCreated\":{\"csn\":\"zGm5wjIsP_-4_5qm\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"KrjKaqPmFYCHu_wPk7LeyAc\"}}}},\"context\":{\"lastActivityMs\":\"20\"}},{\"eventTimeMs\":1791670315024,\"latencyActionInfo\":{\"clientScreenNonce\":\"zGm5wjIsP_-4_5qm\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"20\"}},{\"eventTimeMs\":1791670315024,\"screenCreated\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"zGm5wjIsP_-4_5qm\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"21\"}},{\"eventTimeMs\":1791670315024,\"visualElementHidden\":{\"csn\":\"zGm5wjIsP_-4_5qm\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"21\"}},{\"eventTimeMs\":1791670315024,\"latencyActionInfo\":{\"clientScreenNonce\":\"b_dlXZ6fBLzfhsHH\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"21\"}},{\"eventTimeMs\":1791670315024,\"visualElementAttached\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMI08WThbywlwMV4xMeBR1blju6ygEEw2KHZQ==\"}]},\"context\":{\"lastActivityMs\":\"21\"}},{\"eventTimeMs\":1791670315026,\"latencyActionTicked\":{\"tickName\":\"qoes\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"23\"}},{\"eventTimeMs\":1791670315027,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"24\"}},{\"eventTimeMs\":1791670315058,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"rHJbtgVJk_gRLemO\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"55\"}},{\"eventTimeMs\":1791670315059,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"57\"}},{\"eventTimeMs\":1791670315188,\"latencyActionTicked\":{\"tickName\":\"ep_init_ijs\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"185\"}},{\"eventTimeMs\":1791670315190,\"latencyActionTicked\":{\"tickName\":\"ep_init_ije\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"187\"}},{\"eventTimeMs\":1791670315191,\"latencyActionTicked\":{\"tickName\":\"ep_init_rs\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"188\"}},{\"eventTimeMs\":1791670315195,\"latencyActionTicked\":{\"tickName\":\"ep_init_re\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"192\"}},{\"eventTimeMs\":1791670315203,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"200\"}},{\"eventTimeMs\":1791670315205,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"GAK4c550TuwjD-Pj\",\"clientScreenNonce\":\"zGm5wjIsP_-4_5qm\"},\"context\":{\"lastActivityMs\":\"203\"}},{\"eventTimeMs\":1791670315206,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"GAK4c550TuwjD-Pj\",\"clientScreenNonce\":\"b_dlXZ6fBLzfhsHH\"},\"context\":{\"lastActivityMs\":\"203\"}},{\"eventTimeMs\":1791670315230,\"visualElementAttached\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"227\"}},{\"eventTimeMs\":1791670315231,\"visualElementShown\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"228\"}},{\"eventTimeMs\":1791670315301,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"298\"}},{\"eventTimeMs\":1791670315317,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"315\"}},{\"eventTimeMs\":1791670315319,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"315\"}},{\"eventTimeMs\":1791670315319,\"visualElementAttached\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"316\"}},{\"eventTimeMs\":1791670315319,\"visualElementShown\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"316\"}},{\"eventTimeMs\":1791670315319,\"visualElementAttached\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0}]},\"context\":{\"lastActivityMs\":\"316\"}},{\"eventTimeMs\":1791670315320,\"visualElementShown\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1},\"context\":{\"lastActivityMs\":\"316\"}},{\"eventTimeMs\":1791670315321,\"visualElementShown\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"ve\":{\"veType\":28572,\"veCounter\":2,\"elementIndex\":0},\"eventType\":1,\"clientData\":{}},\"context\":{\"lastActivityMs\":\"318\"}},{\"eventTimeMs\":1791670315386,\"visualElementShown\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"ve\":{\"veType\":23851,\"veCounter\":3,\"elementIndex\":0},\"eventType\":1,\"clientData\":{}},\"context\":{\"lastActivityMs\":\"383\"}},{\"eventTimeMs\":1791670315387,\"visualElementShown\":{\"csn\":\"b_dlXZ6fBLzfhsHH\",\"ve\":{\"veType\":36925,\"veCounter\":4,\"elementIndex\":0},\"eventType\":1,\"clientData\":{}},\"context\":{\"lastActivityMs\":\"383\"}},{\"eventTimeMs\":1791670315506,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"503\"}},{\"eventTimeMs\":1791670315718,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFA==\"},\"context\":{\"lastActivityMs\":\"715\"}},{\"eventTimeMs\":1791670315720,\"streamzIncremented\":{\"serializedIncrementBatch\":\"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\"},\"context\":{\"lastActivityMs\":\"717\"}},{\"eventTimeMs\":1791670315859,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"856\"}},{\"eventTimeMs\":1791670315859,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"856\"}},{\"eventTimeMs\":1791670315861,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"mYqGry-dHByb39h2\"},\"context\":{\"lastActivityMs\":\"858\"}},{\"eventTimeMs\":1791670316721,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAAPCcQA==\"},\"context\":{\"lastActivityMs\":\"1717\"}},{\"eventTimeMs\":1791670316721,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"1718\"}},{\"eventTimeMs\":1791670316722,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADNAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAAAAAiGAoDCgFvCgYKBGFHSWYSCREAAAAAAHCEQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABA\"},\"context\":{\"lastActivityMs\":\"1719\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"KrjKaqPmFYCHu_wPk7LeyAc\",\"clientCounter\":\"4290\"}}"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sat, 10 Oct 2026 22:11:57 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":381,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-10-11T21:45:49.744783Z","times_seen":297050,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.355Z","timestamp":1791670313355,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.13.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"2708a-6ab5d470-2265f2;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:54:56 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 43225\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":159882,"size_decoded":43589,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (21487)","md5":"6f1b01cd6a60f04914380d0903f9e925","sha1":"cac93d9e8a89ee82ac24753820820a0f4d9745b3","sha256":"1d978d7874607e2ea38fcca3d48a76daf951cca95dc9523eb0346fd4324b4c6e","sha512":"8ac592aec4c41cd4f89e4bf65c38a39c910d4536d6a4738ba413a8e73d835b7b06e990952c948916e700178e8b326c2c11a3aada9e1ac1dd1016706d16c152a7","ssdeep":"1536:RN1g2dcyjmCsxaLBUxVTVXUgMAvy3Jh2/tty8MAczhP0Ncz9+rhlQwKvEVHNGMNC:u2dm8n3JiUV6MvEPGl8Jbm7P","tlshash":"d5f30749f251353a42ebb1b6a13f530e72336428640280acb569e8da6dbdd8d3137f7d","first_seen":"2023-03-07T22:14:13Z","last_seen":"2026-10-10T22:14:08.833868Z","times_seen":141,"resource_available":true,"data":null}},"time_used":1000,"timings":{"blocked":754,"dns":0,"connect":0,"send":0,"wait":242,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-mesenger2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.362Z","timestamp":1791670313362,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-mesenger2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-phone2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.273Z","timestamp":1791670314273,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-phone2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:54.562Z","timestamp":1791670314562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:25 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454769\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-10-11T21:43:22.230306Z","times_seen":1021845,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.254Z","timestamp":1791670314254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Oct 2026 16:16:22 GMT\r\nexpires: Fri, 08 Oct 2027 16:16:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 194132\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-10-11T21:07:04.32072Z","times_seen":22358,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":37,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.289Z","timestamp":1791670314289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /embed/i1i3wDJv7Uw?feature=oembed HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, base-uri 'self';object-src 'none';script-src 'nonce-ytBRx_QTDJOsWnLFY7uwmA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-embedder-policy-report-only: require-corp; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=CJMF; Domain=.youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=lax\n__Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; expires=Thu, 08-Apr-2027 22:11:54 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=0SfBoWLFxnE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Sun, 14-Jan-2024 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=bjMeMSNQWEk; Domain=.youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; Domain=.youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D; Domain=youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-BUCKET","value":"CJMF","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-04-08T22:11:54Z","raw_expires":"Thu, 08-Apr-2027 22:11:54 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-BUCKET=CJMF; Domain=.youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=lax"},{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-04-08T22:11:54Z","raw_expires":"Thu, 08-Apr-2027 22:11:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; expires=Thu, 08-Apr-2027 22:11:54 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none"},{"name":"YSC","value":"0SfBoWLFxnE","quoted":false,"path":"/","domain":".youtube.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"YSC=0SfBoWLFxnE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"__Secure-YEC","value":"","quoted":false,"path":"/","domain":".youtube.com","expires":"2024-01-14T22:11:54Z","raw_expires":"Sun, 14-Jan-2024 22:11:54 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-YEC=; Domain=.youtube.com; Expires=Sun, 14-Jan-2024 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=lax"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-04-08T22:11:54Z","raw_expires":"Thu, 08-Apr-2027 22:11:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_INFO1_LIVE=bjMeMSNQWEk; Domain=.youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-04-08T22:11:54Z","raw_expires":"Thu, 08-Apr-2027 22:11:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; Domain=.youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=none"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D","quoted":false,"path":"/","domain":"youtube.com","expires":"2027-04-08T22:11:54Z","raw_expires":"Thu, 08-Apr-2027 22:11:54 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D; Domain=youtube.com; Expires=Thu, 08-Apr-2027 22:11:54 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154350,"size_decoded":64121,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52162)","md5":"60b91041fa6f89b07d0b2857d1785b61","sha1":"f61f549e80529c2a7f057c2d97382764ebfe2902","sha256":"1df0f0709bd3fc682d114f40bc2f047eeb6aee73433b73c76331107a8d7a9279","sha512":"ab6699e98dba696429cf6952da00334bda59493b2fad51c7a21712d73fb372b70c63b431cfe98a7cd20b14735faf1971fd8f454e4334f1c05ccfbfb2d69f4dbf","ssdeep":"1536:oGeYhSME+nYpMGbLGZJh4+nW4Zoj34EwgP+1/0AgBzY5BMJExR8YCYGA8O2K2SSs:+8SMYibnP7EwgxzYyExR8YnGRZPo5r","tlshash":"91e30a250858b8b6c5939447edb9ff3e9cf8023a4789966ebcbbd35c01dc6520e6f412","first_seen":"2026-10-10T22:14:08.840893Z","last_seen":"2026-10-10T22:14:08.840893Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":6,"dns":0,"connect":9,"send":0,"wait":107,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/11413217107/?random=1791670315805\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1435296111.1791670316\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.846Z","timestamp":1791670315846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /pagead/1p-conversion/11413217107/?random=1791670315805\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1435296111.1791670316\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlocation: https://www.google.com/pagead/1p-conversion/11413217107/?random=179976299\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwxKfWBhCG2snu9uSwsCESMwC2uJsI9UkAPoYxU6vhxL0rtHROo0sl-GOe6GaRLFrMQPwfqNQcQ8CJPtmYr3hYS5DBS_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCIvysQII9NqxAgji6rECCOjusQIIkuuxAgjJ47ECCJfUsQIIyduxAgjN5rECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=CgyCsL4tueu-LZ3ptzg\u0026fsk=ChAI8MSn1gYQ6-GJlaqKz_8jEiwAXuLv_cQdtNSe7QpkQNF5djWokfncr4eXM-cHcEDYei2zEkwc2gH2BneR4xoCy0o\u0026pscrd=IhMIu6OUhrywlwMVi-vKAB3p1xsKOhtodHRwczovL2xpY2h4dWFuc2FpZ29uLmNvbS9CV0NoRUk4TVNuMWdZUTZxZWk4YVBxcnRPU0FSSXNBSXp1MTduX0g3eWd1ODRsYTRsNUZxUHBKc2lja0dtbFBadmJmcU9jZGZjdDh0RzUtS2NLWjY5UGxLMHoMCAliCAgAEAAYACAA\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.251Z","timestamp":1791670314251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:55:52 GMT\r\nexpires: Tue, 05 Oct 2027 15:55:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454562\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T21:40:26.807251Z","times_seen":313606,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":25,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/pagead/1p-conversion/11413217107/?random=179976299\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwxKfWBhCG2snu9uSwsCESMwC2uJsI9UkAPoYxU6vhxL0rtHROo0sl-GOe6GaRLFrMQPwfqNQcQ8CJPtmYr3hYS5DBS_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCIvysQII9NqxAgji6rECCOjusQIIkuuxAgjJ47ECCJfUsQIIyduxAgjN5rECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=CgyCsL4tueu-LZ3ptzg\u0026fsk=ChAI8MSn1gYQ6-GJlaqKz_8jEiwAXuLv_cQdtNSe7QpkQNF5djWokfncr4eXM-cHcEDYei2zEkwc2gH2BneR4xoCy0o\u0026pscrd=IhMIu6OUhrywlwMVi-vKAB3p1xsKOhtodHRwczovL2xpY2h4dWFuc2FpZ29uLmNvbS9CV0NoRUk4TVNuMWdZUTZxZWk4YVBxcnRPU0FSSXNBSXp1MTduX0g3eWd1ODRsYTRsNUZxUHBKc2lja0dtbFBadmJmcU9jZGZjdDh0RzUtS2NLWjY5UGxLMHoMCAliCAgAEAAYACAA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:56.523Z","timestamp":1791670316523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /pagead/1p-conversion/11413217107/?random=179976299\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwxKfWBhCG2snu9uSwsCESMwC2uJsI9UkAPoYxU6vhxL0rtHROo0sl-GOe6GaRLFrMQPwfqNQcQ8CJPtmYr3hYS5DBS_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCIvysQII9NqxAgji6rECCOjusQIIkuuxAgjJ47ECCJfUsQIIyduxAgjN5rECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=CgyCsL4tueu-LZ3ptzg\u0026fsk=ChAI8MSn1gYQ6-GJlaqKz_8jEiwAXuLv_cQdtNSe7QpkQNF5djWokfncr4eXM-cHcEDYei2zEkwc2gH2BneR4xoCy0o\u0026pscrd=IhMIu6OUhrywlwMVi-vKAB3p1xsKOhtodHRwczovL2xpY2h4dWFuc2FpZ29uLmNvbS9CV0NoRUk4TVNuMWdZUTZxZWk4YVBxcnRPU0FSSXNBSXp1MTduX0g3eWd1ODRsYTRsNUZxUHBKc2lja0dtbFBadmJmcU9jZGZjdDh0RzUtS2NLWjY5UGxLMHoMCAliCAgAEAAYACAA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlocation: https://www.google.no/pagead/1p-conversion/11413217107/?random=179976299\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwxKfWBhCG2snu9uSwsCESMwC2uJsI9UkAPoYxU6vhxL0rtHROo0sl-GOe6GaRLFrMQPwfqNQcQ8CJPtmYr3hYS5DBS_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCIvysQII9NqxAgji6rECCOjusQIIkuuxAgjJ47ECCJfUsQIIyduxAgjN5rECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=CgyCsL4tueu-LZ3ptzg\u0026fsk=ChAI8MSn1gYQ6-GJlaqKz_8jEiwAXuLv_cQdtNSe7QpkQNF5djWokfncr4eXM-cHcEDYei2zEkwc2gH2BneR4xoCy0o\u0026ipr=y\u0026pscrd=IhMIu6OUhrywlwMVi-vKAB3p1xsKOhtodHRwczovL2xpY2h4dWFuc2FpZ29uLmNvbS9CV0NoRUk4TVNuMWdZUTZxZWk4YVBxcnRPU0FSSXNBSXp1MTduX0g3eWd1ODRsYTRsNUZxUHBKc2lja0dtbFBadmJmcU9jZGZjdDh0RzUtS2NLWjY5UGxLMHoMCAliCAgAEAAYACAA\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.346Z","timestamp":1791670313346,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js?ver=11.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"3bd3-6ab612c9-228643;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:20:57 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4609\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15315,"size_decoded":4971,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15315), with no line terminators","md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-10-11T21:38:25.25957Z","times_seen":160905,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":709,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J3VKYT0F57","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.143Z","timestamp":1791670314143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-J3VKYT0F57 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nexpires: Sat, 10 Oct 2026 22:11:54 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 206683\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656170,"size_decoded":207267,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23563)","md5":"9bc61c8ed488ad349a6141a242aad6be","sha1":"3146e7ce817be71d6d58ab25c0f2a5dc697fad60","sha256":"68e20fb1a3ae6cfc3e3f41c3e42e1e4a7c01f3500145ee5703e4806df2cac038","sha512":"9f62b136f9b493378cbccc822795b5c9d1d02c5525a804a183c82b0b257f80c31c8f8e157d38dca481735880186bb065aadd4af9e59568748632271f9f1c1321","ssdeep":"6144:l+x4sfCyqMnhIma7ulkl+cfIb/EfD3ce2XYch2rSFerr+p:l+EEKml7YcEp0","tlshash":"f9d408ceb3c67462929af568903f02cb697f29a2b45cc89bb18ddcf01d3454a5163f78","first_seen":"2026-10-10T22:14:08.846765Z","last_seen":"2026-10-10T22:14:08.846765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.256Z","timestamp":1791670314256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Oct 2026 16:16:22 GMT\r\nexpires: Fri, 08 Oct 2027 16:16:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 194132\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-10-11T21:07:04.32072Z","times_seen":22358,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":50,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=scroll\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315388\u0026tfd=6212\u0026tids=AW-10972879735\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.403Z","timestamp":1791670315403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=scroll\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315388\u0026tfd=6212\u0026tids=AW-10972879735\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-LE8EKF0KRF\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=1212744356","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.439Z","timestamp":1791670315439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-LE8EKF0KRF\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=1212744356 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-11T21:43:42.094175Z","times_seen":1102638,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":117,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/button-contact-vr/legacy/css/style.css?ver=1","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.878Z","timestamp":1791670312878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/button-contact-vr/legacy/css/style.css?ver=1 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"1ab7-6ab6121d-225bcd;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:18:05 GMT\r\ncontent-type: text/css\r\ncontent-length: 1660\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6839,"size_decoded":2006,"mime_type":"text/css","magic":"ASCII text, with very long lines (6297)","md5":"078a52eaa8f676289e3abf99b7d7dcb3","sha1":"1f74b8d2d1884b5e2295cc0cf15fec41a3c9c75f","sha256":"63709bf15f6f461acca13315bcd255471a7c9b49b6af803d2dea585b08c7d9b7","sha512":"c6f9aea73b2e813c8c4b7fb255a94fb38b3fc953e34255e2cb66347eb7bf25e5ccfe5ada1d3aa13e354119dde87b256cb6f377793b2d8486b240ea4831b8bbd1","ssdeep":"96:pM+xMMqktha6HSW1nGRUbeyXNf39Fb/oolCXb2fN2605nIDMVb1A4yyh:pNxMy6yS2nbeyZ/osJ7SRpTd","tlshash":"d0e12fb5455520aef02bde885ec0068e232fd217fb430ffa660974a686cafdd9477b05","first_seen":"2024-12-10T09:46:35.798055Z","last_seen":"2026-10-11T02:53:52.952305Z","times_seen":277,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":236,"send":0,"wait":237,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.901Z","timestamp":1791670312901,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"3509-6ab5d48d-226fc7;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:55:25 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4679\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5041,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T21:43:22.652406Z","times_seen":1005456,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":694,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.245Z","timestamp":1791670314245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"1988-6ab5d470-22660e;;;\"\r\nlast-modified: Fri, 25 Sep 2026 01:54:56 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 6536\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6536,"size_decoded":6839,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6536, version 1.0","md5":"21c4c69602dadee988f10c502b44d1c1","sha1":"7d28ed1775492300f859296ef85ce371c26a6ff3","sha256":"815e5395652e03d7051b767baade615d279fe3644bbf8f8bbdc54a8b9573be67","sha512":"12a547aad3290d47833b218958aa4400f95c0ccb559126238768438ce422339af2e86ef9b289a5922cd137afd17f68fff95bb08b8a8f2b6440ad9f5bf0a4caa8","ssdeep":"192:vSkj+sVFyH45jc5aU8pOTsrt9xt9E0EToWx4nVc:akjkYlBUGrtft9EzxMc","tlshash":"6ad18e1a1d41bb15fe24973bec378e4b1f99ce63c9a7e174738d48b432041967024ae5","first_seen":"2023-04-10T03:44:24Z","last_seen":"2026-10-11T19:22:50.591587Z","times_seen":1318,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-267837238-1\u0026cx=c\u0026gtm=4e6a72h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.049Z","timestamp":1791670315049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=UA-267837238-1\u0026cx=c\u0026gtm=4e6a72h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\nexpires: Sat, 10 Oct 2026 22:11:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128904\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368072,"size_decoded":129488,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5464)","md5":"db786b7d280f5a7a7be4eddb0158b93e","sha1":"2af1bab42ed84f36b24848a368030f5895b701fd","sha256":"c8697f3972fda9770239100b6ab6bcfc16f68958c2239bf137b3146b02a11be6","sha512":"7fa9c1dbf0f58f1f27a2210f6959bd335917c32ffbaf1d6e31509b12d3cddde8ca08e6104e11b6c869569de955b18689be11543ed9f5c85de3e65048579d2acf","ssdeep":"6144:4sfCyDnGI9amdFcfIb/EfD3ceVijGupYp:XR9NjGu8","tlshash":"3e7408ccb3d6b42683a2b574503f018bb27a69d2b84cd889f146ece42d3469a5177f7c","first_seen":"2026-10-10T22:14:08.852997Z","last_seen":"2026-10-10T22:14:08.852997Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.303Z","timestamp":1791670315303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13004\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:59:59 GMT\r\nexpires: Tue, 05 Oct 2027 15:59:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454316\r\nlast-modified: Thu, 29 May 2025 23:41:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13004,"size_decoded":13817,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13004, version 1.0","md5":"38263f69e18d5ea4e094cb38cfb1030e","sha1":"fd310cfd141bd2f891164784739aa27d996423be","sha256":"38ca68052df6bb72126ff9cedd7d78d2afe62079e9149ddedf650ae8f4c744cf","sha512":"ff27a17133aabe79a844013d91c54aff11bca0839b63045905bc9d4cbafe0072bef343e1869a8066181db59df1ced7757be58298e7398193e59d7d8cf8cba89f","ssdeep":"192:Dnu1HXqwf45uYmb6EHUp6VCwCYp3uo2flIoIWFAda7Fxe1ep//Gg5PxnwuhjsgFL:DuRqwx6IwOp32flww7nz3nTjomejMoM","tlshash":"2d42bf7a463fe34fdfdf0b2305429ad1a0c80322721637a52a935a710856278be428bf","first_seen":"2025-01-09T08:14:29.323559Z","last_seen":"2026-10-11T04:24:17.613643Z","times_seen":4151,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-HHZ1S5DKHJ\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=974482743","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.387Z","timestamp":1791670315387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-HHZ1S5DKHJ\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=974482743 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-11T21:43:42.094175Z","times_seen":1102638,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":37,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-DZ0SRGE3ZW\u0026cid=217880455.1791670315\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xf1\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=502098402","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.853Z","timestamp":1791670315853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-DZ0SRGE3ZW\u0026cid=217880455.1791670315\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xf1\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938469~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=502098402 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":558,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-11T21:43:42.094175Z","times_seen":1102638,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/uploads/2023/03/cropped-icon.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.093Z","timestamp":1791670313093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/cropped-icon.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"aa87-6ab5d34f-203e2b;;;\"\r\nlast-modified: Fri, 25 Sep 2026 01:50:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 43655\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43655,"size_decoded":43958,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6d42448608cf4fdb952484b77c85b37f","sha1":"a8dff3d319c03a7d0125f1306e69bab7aa2f7db9","sha256":"d9c5c1f4887613efc4549a5523749c93894bef9723cb56cbf82c7407eafa22f9","sha512":"2c8d4b46d7f65d9a3194c1b46571a276d789291d465a4ec5bb2a3afcb9d813761fa5d4263ca24197c445cee4dc18879bf4ff98389ac926354b4c25cd958cba7c","ssdeep":"768:+GkKGKlsGTJ0EbGwUsfWk1W2Rn2fmCMsS8iobsW5yyM7NWUa9QQuNU:+tpKlseGlh+W4wPS+bsWi7wU61uNU","tlshash":"ad13f10f5d17d89bfaff8b3c056788f45a4e61a02f87cd28e3f542451989e1e752e0a0","first_seen":"2026-10-10T22:14:08.855699Z","last_seen":"2026-10-10T22:14:08.855699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1927,"timings":{"blocked":1452,"dns":0,"connect":0,"send":0,"wait":238,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/BsfZWRv0mqXKtB60XTlsnCGJV8iWWOJuOt8gyYmLIJY.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.208Z","timestamp":1791670315208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /js/th/BsfZWRv0mqXKtB60XTlsnCGJV8iWWOJuOt8gyYmLIJY.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 24377\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Oct 2026 03:28:42 GMT\r\nexpires: Thu, 07 Oct 2027 03:28:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Oct 2026 19:00:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 326593\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63406,"size_decoded":25188,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (62149)","md5":"5ec338c18a49b3eae12390e56cb5660d","sha1":"8d907425b37f3b1a5e323b7b1eeedfc0b5231c42","sha256":"06c7d9591bf49aa5cab41eb45d396c9c218957c89658e26e3adf20c9898b2096","sha512":"6b71c2746c35f3fc9a507f8eff328e5d5973a71c153cf9c7b66404f86f6f84ecb5aed72964d90ff25a7c1cb98dc65b1baea49724afae51a951981e44077e332f","ssdeep":"768:j4Ridnf+j1ezqVLcgzf9S0ad3vlrmaKwiMfRG4d5X5LI/TGdoVoVGGQdAae8d9Xh:jYidnu1ezu00wpmQ5pL6Skc5CdJeWfOw","tlshash":"8a531bceb5e2b370caf361e2409b521962ba98555c440d5ebd42e7f42d71c8b843ff25","first_seen":"2026-10-07T04:46:48.972315Z","last_seen":"2026-10-11T07:00:08.164234Z","times_seen":823,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":3,"connect":25,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=session_start\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315387\u0026tfd=6211\u0026tids=AW-10972879735\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.400Z","timestamp":1791670315400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=session_start\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315387\u0026tfd=6211\u0026tids=AW-10972879735\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.4.02","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.873Z","timestamp":1791670312873,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.4.02 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"2f7-6ab6384c-2298da;br\"\r\nlast-modified: Fri, 25 Sep 2026 09:01:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 247\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":759,"size_decoded":591,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a0b823f7ab1f0a3a563fb10c3664d2a6","sha1":"0dd5bce879ab0d3b972f3ea4dedc301bcfc9d6b1","sha256":"7e7d81a09a47d0726c0de06e37e162c4b83fc2b1a4a5f5962fb5c29840183421","sha512":"20cb6d2625469aeb463242449d5040a416dd9919b63074a7adeac3912e4d779db06816dc7388d2c6a3ac23664865c3233d4b1d466b01ff01cbe41c30d929dcba","ssdeep":"","tlshash":"1901ad13f6d81181a41747a8a96bf7fd7f7e825283410f7568a1b3388b88efb2d24585","first_seen":"2024-06-04T14:19:26Z","last_seen":"2026-10-11T21:17:59.542244Z","times_seen":13919,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":244,"send":0,"wait":245,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-zalo2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.360Z","timestamp":1791670313360,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-zalo2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.231Z","timestamp":1791670315231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-origin: https://lichxuansaigon.com\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:67:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:67:0\r\nreport-to: {\"group\":\"ascnsrsgac:67:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:67:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.332Z","timestamp":1791670315332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /youtube/img/icons/mweb/youtube_fill/logo/v2/67px.svg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://www.youtube.com\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 272\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 09 Oct 2026 17:21:55 GMT\r\nexpires: Sat, 09 Oct 2027 17:21:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 03:18:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin\r\nage: 103800\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478,"size_decoded":1017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e78ea4caa31c35bac97a41e5930ffe8","sha1":"dbf99131b9b5087e664b9fdc7097c97655474517","sha256":"6fa88a20839537ae66da730e5bd183035265176d972bc8df075b89da0c6186ea","sha512":"cf798ef67c90f90f23635beb202095a2c76052d491c224aa14535bb9b16f28fa9a850b8db887f158afd01d634aecb9e2b05a27efdfd225d3583e6297bdd78b43","ssdeep":"","tlshash":"2ef09e6d577829d8930f87c0be5974127d9f23e85194b3b541d4f9326138ee2d141cd9","first_seen":"2025-05-26T15:52:21.952281Z","last_seen":"2026-10-11T21:47:11.226406Z","times_seen":59652,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":18,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/button-contact-vr/legacy/img/Facebook.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.335Z","timestamp":1791670313335,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/button-contact-vr/legacy/img/Facebook.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"a2a-6ab6121d-225bcf;;;\"\r\nlast-modified: Fri, 25 Sep 2026 06:18:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2602\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2602,"size_decoded":2903,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"a108066373b82261bb41e99522f3b50e","sha1":"032cf3a15f383a625d5d0e77a1d4bea89bfd83e8","sha256":"b885bf57c8f75e23552fef0c2c4a242ddf2c38867cd20e5a7e988b99b4e2da6a","sha512":"56c0b90b6b07879af6d6569eac096144a4bdce43ea6784aa85a4f340ba4117b850709bc6213fb63b4f06c326c5bf5324aff59e95b6daed96180dd799fc22cdf3","ssdeep":"","tlshash":"985117ac620203c97b6322df1109129808b6fffce46481bf9503b212a6b00199ee531a","first_seen":"2023-06-30T20:55:06Z","last_seen":"2026-10-10T22:14:08.863211Z","times_seen":155,"resource_available":false,"data":null}},"time_used":1263,"timings":{"blocked":1021,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=user_engagement\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315388\u0026tfd=6212\u0026tids=AW-10972879735\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.402Z","timestamp":1791670315402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=user_engagement\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315388\u0026tfd=6212\u0026tids=AW-10972879735\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/conversion/11413217107/?random=1791670315805\u0026cv=11\u0026fst=1791670315805\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1435296111.1791670316\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.861Z","timestamp":1791670315861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /ccm/conversion/11413217107/?random=1791670315805\u0026cv=11\u0026fst=1791670315805\u0026fmt=3\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oid=GG_1435296111.1791670316\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=1\u0026sscte=1\u0026ct_cookie_present=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Sun, 17 May 1998 03:00:00 GMT\r\nx-content-type-options: nosniff\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:130:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:130:0\r\nreport-to: {\"group\":\"ascnsrsgac:130:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:130:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 35\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":871,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-10-11T21:49:41.715352Z","times_seen":62118,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.899Z","timestamp":1791670312899,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"15601-6ab5d48d-226fc4;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:55:25 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 29597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":29961,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T21:43:55.40408Z","times_seen":1101442,"resource_available":true,"data":null}},"time_used":1173,"timings":{"blocked":689,"dns":0,"connect":0,"send":0,"wait":240,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/button-contact-vr/legacy/img/zalo.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.339Z","timestamp":1791670313339,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/button-contact-vr/legacy/img/zalo.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"f9e-6ab6121d-225be3;;;\"\r\nlast-modified: Fri, 25 Sep 2026 06:18:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 3998\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3998,"size_decoded":4299,"mime_type":"image/png","magic":"PNG image data, 100 x 95, 8-bit colormap, non-interlaced","md5":"5b983baae6dbf4b632e7a4694d4076b4","sha1":"c7b1cafc2270a73ad31975be2c9a7fad38568d73","sha256":"3a60f04d2c74a4eadad3c5bad7bd0a6d9e038f7725fd31ed03a0e93091362dd1","sha512":"ad99e9f6d0150018063ee9ef910e6e1706a6c62cdbece886fc60f1d4ea046dc2791b59d79dd96f5432989878369db9a9f1125cb76b15106b33d782d4a32673f0","ssdeep":"","tlshash":"1e816b9cf860e46a3dadb6d10ed849a7ca98167cea07262cf543b9cd00d4f0376a6079","first_seen":"2023-05-12T04:05:30Z","last_seen":"2026-10-11T02:53:52.992489Z","times_seen":655,"resource_available":false,"data":null}},"time_used":1398,"timings":{"blocked":1160,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.4.02","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.343Z","timestamp":1791670313343,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.4.02 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"168e-6ab6384c-2298eb;br\"\r\nlast-modified: Fri, 25 Sep 2026 09:01:00 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1753\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5774,"size_decoded":2115,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (379), with CRLF line terminators","md5":"88a6be9d65250bef59a48b7e4a7e8f68","sha1":"88c17324ae5b7db5665a74f9434556fc33886a7d","sha256":"4e894a6e908c979edbd1b7d4dc13755c9d415e95606ecb4e0e27ade365456eaa","sha512":"54dd6bcccbab0a753ff8e5d6e85a2182d9e744269893c7c0cfcf00302d3522d8c77c4c5c284cd263e81d379a93a91a95a68e84cd10da4734a585548f5928db65","ssdeep":"96:0LJ3N+1CdQBjh043aJ3v3qm3b343jDWhzXGhoSLLumHAAAgWGUXY9B7sVA+JPZ8+:093N+1CF4Of6mLo3CTTJr8p4q/1jRneZ","tlshash":"edc13050274b04a52e328b69ebf7b71473395013ea00ed05fb5d4be577e4c191232bea","first_seen":"2025-07-30T19:59:40.832658Z","last_seen":"2026-10-11T21:17:59.504212Z","times_seen":11921,"resource_available":true,"data":null}},"time_used":918,"timings":{"blocked":679,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/inc/extensions/flatsome-lazy-load/flatsome-lazy-load.js?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.357Z","timestamp":1791670313357,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-lazy-load/flatsome-lazy-load.js?ver=3.13.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"933-6ab5d474-22672c;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:55:00 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 533\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2355,"size_decoded":893,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"30bef76f6c5678740a4b7c4b1e0ca3b5","sha1":"df55c00da88a6345d1b91bf64eb6fd3d144120c0","sha256":"ef8fea302c93f5619c53b4b7f8435c3d7dbaf5a4296593fb9f353e574c9b34d4","sha512":"598136eb7a4b79984a4ca6440a924d5091c9bbfcdb62787fda2b07322d91beefc44c8bf37110266c8c5f2809ab4296fdf03eba7add9c912397e6d19051dc5702","ssdeep":"","tlshash":"cb415b5878f1a58eb237757649af4800ba7da147000d8e61be9c9399df9423c1ba1f8d","first_seen":"2023-03-07T12:10:42Z","last_seen":"2026-10-11T18:38:34.718845Z","times_seen":2982,"resource_available":true,"data":null}},"time_used":1156,"timings":{"blocked":918,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.253Z","timestamp":1791670314253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10212\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 18:27:12 GMT\r\nexpires: Tue, 05 Oct 2027 18:27:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445482\r\nlast-modified: Tue, 09 Sep 2025 18:33:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10212,"size_decoded":11025,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10212, version 1.0","md5":"b4116ee119caa0aff77a0f99bf188184","sha1":"f1e75276e3c00e2023e07eef94288f1b5e5c4ee3","sha256":"0515874177f0862384d111fccea0b6e7c32a7da106202949775b96b1fb56b236","sha512":"956f75a5e7e46d9436c6c20d493988901701a8cb846296c27779d72f3a24c58f0d7083a52eac77ebdcd15dbb97a1654599a46a9dccc7120b30fe5516c5739971","ssdeep":"192:9STaMoBFOLgYxDRMI5Y7VblGW7jsBF9W5C1IK8WQrjNn5DCY8LRUNwjUiyq3K6+O:M0BFWVxiI5YhlnsBbgCxJQrHDECslyGf","tlshash":"5f22bf68a663671fdcc7e63004f0da5042662e491253d776dbbdb78901278fe0417bd3","first_seen":"2025-02-02T06:10:28.700493Z","last_seen":"2026-10-11T21:39:25.332858Z","times_seen":3574,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":44,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.262Z","timestamp":1791670314262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Oct 2026 16:16:22 GMT\r\nexpires: Fri, 08 Oct 2027 16:16:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 194132\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-10-11T21:07:04.32072Z","times_seen":22358,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":47,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DZ0SRGE3ZW\u0026cx=c\u0026gtm=4e6a72","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.475Z","timestamp":1791670315475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-DZ0SRGE3ZW\u0026cx=c\u0026gtm=4e6a72 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\nexpires: Sat, 10 Oct 2026 22:11:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 202540\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":634412,"size_decoded":203124,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11117)","md5":"316897b62ac16bb977dea869dd85342e","sha1":"073c3abb0e60f06c75ab76489db5284fd8ceac10","sha256":"4a0de0d2050bbd1da8644dca0672d0da6d608883f8fda4a02ad4518981f215d7","sha512":"b6e3409644c3a3bc4b443af5150f4971d697cf828ee9ca7a86722a1f6f00f14e3e42cb1398432da2ac859635db7a2c82a6c166810e37a63cfadda77183e5cb1b","ssdeep":"6144:cfFsfCyqMnhIma7ulkl+cfIb/EfD3ce2Xkcw2rSFergOp:c3EKml7kc/pB","tlshash":"dcd4f9ceb3c67422a2daf568943f01cb697b29a2b45cc89bb18ddcf01d3454a5163f78","first_seen":"2026-10-10T22:14:08.869738Z","last_seen":"2026-10-10T22:14:08.869738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.358Z","timestamp":1791670313358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/woocommerce.js?ver=3.13.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"3c2b-6ab5d470-2265f5;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:54:56 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4783\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15403,"size_decoded":5145,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (8956)","md5":"ad9cdd1b48337071f1ff86a71d92f6e9","sha1":"70d1d3f2ee855d08b5be9013c6a4348242c0dbc5","sha256":"2afe17dd653e7659864c6c28e642808ca328c8defb92e251c24d1df2f3ff0ebb","sha512":"db761bbc67292766f6d8fdc9b0c370e625e0a5caea84be2596f01219c5dc51f89f2d00e817305d85b180c01a3acb58be41f287fe324e6582b3e27544363915da","ssdeep":"384:R5ycWqe/TdB4QABseZLWxD141m3nOvU5/PeKA:R5yDqe/TdB4QABseFWxD1Sm3OvU5/Pej","tlshash":"7a62b42af37420dd41ba70b5b83f136472b77568711b809cb27aa8d6182dc5d2132fbe","first_seen":"2023-03-10T04:52:56Z","last_seen":"2026-10-10T22:14:08.872131Z","times_seen":103,"resource_available":true,"data":null}},"time_used":1183,"timings":{"blocked":946,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=first_visit\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315387\u0026tfd=6211\u0026tids=AW-10972879735\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.401Z","timestamp":1791670315401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=first_visit\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315387\u0026tfd=6211\u0026tids=AW-10972879735\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.746Z","timestamp":1791670315746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:43 GMT","end":"Fri, 11 Dec 2026 20:01:42 GMT"},"fingerprint":{"sha1":"A6:C0:81:49:02:5D:55:F8:AA:9D:F1:C6:9E:4A:41:81:F1:AB:0A:88","sha256":"80:F5:46:E0:B9:70:82:92:76:41:07:3D:0C:47:81:6B:0C:25:BA:5D:3C:80:F9:ED:61:2F:24:50:D3:99:78:A5"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":555,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":6,"dns":4,"connect":8,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/related-posts-by-taxonomy/includes/assets/css/styles.css?ver=7.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.875Z","timestamp":1791670312875,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/related-posts-by-taxonomy/includes/assets/css/styles.css?ver=7.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"1a0-6ab61251-223980;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:18:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 225\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":416,"size_decoded":569,"mime_type":"text/css","magic":"ASCII text","md5":"ef87605f3e119bb43a79486ebaae3979","sha1":"cf87ed116cb0623729615a652ec444f6d7acb602","sha256":"715d95401a0252ab3f290b8d318f8f6bfd0bf1163f025767fa065200c5e6f883","sha512":"8c0c81dfab54cdccf9892317fa0afaa7f471d04d953b6909529b075caa3f2f06d44f150acca86b2f03cb78f369b8461c733c71832570a5bcaa8f27342f7ae908","ssdeep":"","tlshash":"93e0a3be9d9432a4541f5b627c586a949d2a103373165c17a142bdec135847622273fe","first_seen":"2023-04-11T18:32:53Z","last_seen":"2026-10-10T22:14:08.874228Z","times_seen":497,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":236,"send":0,"wait":237,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.909Z","timestamp":1791670312909,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=11.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"10b9-6ab612c9-228610;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:20:57 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1386\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4281,"size_decoded":1748,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4281), with no line terminators","md5":"7543a2da8054e263cbb8c7d702a5c060","sha1":"b6b0996bf1431c8858ef336369a2498e64c5ad3a","sha256":"a83bd8463b628e661482010504cbb69143b13461a0178cb4f7b929aa28efa96f","sha512":"a970a5e80f3b63ab8cb8461a1d7f903e78091d46272b0b85265962e3c62bdc8260a7be52402948d1498523b9fa75e419459bf5dd40973eca6af64520787877f4","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlwpZswn+uOujAvKsPPF3cLa:0cEQxc4xN6a8EJWrO75ekwp1lEvtsd85","tlshash":"3791661b74216d7322eb75ba2c9ee98414331639a4414501b509cf6c3b7e8ca7737b6e","first_seen":"2026-08-31T14:42:45.211396Z","last_seen":"2026-10-11T21:01:03.019307Z","times_seen":3947,"resource_available":true,"data":null}},"time_used":1186,"timings":{"blocked":941,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.353Z","timestamp":1791670313353,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"5db-6ab5d48a-226ed6;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:55:22 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 669\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1499,"size_decoded":1029,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-10-11T21:32:17.043205Z","times_seen":95145,"resource_available":true,"data":null}},"time_used":988,"timings":{"blocked":743,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.887Z","timestamp":1791670312887,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.13.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"2a518-6ab5d470-226600;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:54:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 28982\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":173336,"size_decoded":29330,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3732ae083316f333374564e879dbe383","sha1":"d17b3460f8f7f4894df3e55abc69ea70c6d7d31a","sha256":"6bd69c22264468eb3292bf127a9cfe7e4592547063d5ea812985f1c52a973bd8","sha512":"c9a796bbb1132194e1ff2f7b21c98c9a851e085f8301b6bb0cb5f88be8361e5c4b2ff77f142a2aadc20e16b62a94e6f2da05ad4f27e507d090194b58826c7a54","ssdeep":"3072:pp1ZZXBYHDC8KL1CTXYJsEhhrAbHLMchHE3Ls51MHSRnmyTXHLcxbN0AgL6opP4A:cEhhrAbHLMchHE3Ls51MHSRnmyTXHLco","tlshash":"ee04c863a24121086017c708d7c9fbac773dd162e7220afff553aa29c7c76de1166b4a","first_seen":"2023-04-09T19:28:49Z","last_seen":"2026-10-11T17:17:29.504239Z","times_seen":441,"resource_available":true,"data":null}},"time_used":1125,"timings":{"blocked":648,"dns":0,"connect":0,"send":0,"wait":240,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.260Z","timestamp":1791670314260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10212\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 18:27:12 GMT\r\nexpires: Tue, 05 Oct 2027 18:27:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445482\r\nlast-modified: Tue, 09 Sep 2025 18:33:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10212,"size_decoded":11025,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10212, version 1.0","md5":"b4116ee119caa0aff77a0f99bf188184","sha1":"f1e75276e3c00e2023e07eef94288f1b5e5c4ee3","sha256":"0515874177f0862384d111fccea0b6e7c32a7da106202949775b96b1fb56b236","sha512":"956f75a5e7e46d9436c6c20d493988901701a8cb846296c27779d72f3a24c58f0d7083a52eac77ebdcd15dbb97a1654599a46a9dccc7120b30fe5516c5739971","ssdeep":"192:9STaMoBFOLgYxDRMI5Y7VblGW7jsBF9W5C1IK8WQrjNn5DCY8LRUNwjUiyq3K6+O:M0BFWVxiI5YhlnsBbgCxJQrHDECslyGf","tlshash":"5f22bf68a663671fdcc7e63004f0da5042662e491253d776dbbdb78901278fe0417bd3","first_seen":"2025-02-02T06:10:28.700493Z","last_seen":"2026-10-11T21:39:25.332858Z","times_seen":3574,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-EST7LR0H7K\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=708905330","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.447Z","timestamp":1791670315447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-EST7LR0H7K\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=708905330 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-11T21:43:42.094175Z","times_seen":1102638,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":36,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/uploads/font-awesome/v5.15.2/css/svg-with-js.css","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.846Z","timestamp":1791670312846,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/uploads/font-awesome/v5.15.2/css/svg-with-js.css HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"18d7-6ab6123f-204ede;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:18:39 GMT\r\ncontent-type: text/css\r\ncontent-length: 1392\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6359,"size_decoded":1738,"mime_type":"text/css","magic":"ASCII text, with very long lines (6173)","md5":"64070b953b929413fe4c788f8baa7c38","sha1":"6a6781147680fd849fceb3242012fdf5ce23c32a","sha256":"4ad098e977ae91d8a665ff80da612ef7eafd683fed6d5decdaa1c07e80ae65a7","sha512":"70dbc2e6247cadfb81a6a6f8551878f18efb2533399f08ec1014184bf2c7ce85b27f86e6990f0b34c6e0e4ab0414e04ee6f19b2d45f01f70408c6d26d28356a8","ssdeep":"96:SP6Oh8o/66Eeckx3HRcR1RtRfRZ05zBZMWch4y:SP6Oh/kt05FZzg4y","tlshash":"d4d1186b8742224744194f21d3d86d1cb238ff3326e3498fb24636556b8baed71d2396","first_seen":"2025-04-25T00:35:58.671633Z","last_seen":"2026-10-11T09:57:48.512172Z","times_seen":440,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":237,"send":0,"wait":240,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-mesenger2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.282Z","timestamp":1791670314282,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-mesenger2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026tid=G-PD80MHVZFQ\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=719921784","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.460Z","timestamp":1791670315460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026tid=G-PD80MHVZFQ\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=719921784 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-11T21:43:42.094175Z","times_seen":1102638,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":35,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?oH1vRg","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.560Z","timestamp":1791670315560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /generate_204?oH1vRg HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed\r\nCookie: __Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; YSC=0SfBoWLFxnE; VISITOR_INFO1_LIVE=bjMeMSNQWEk; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; __Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ"},{"name":"YSC","value":"0SfBoWLFxnE"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":172,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:regular,700,regular,600|Dancing+Script:regular,400\u0026display=swap\u0026ver=3.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.896Z","timestamp":1791670312896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Inter:regular,700,regular,600|Dancing+Script:regular,400\u0026display=swap\u0026ver=3.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Oct 2026 22:11:52 GMT\r\ndate: Sat, 10 Oct 2026 22:11:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8931,"size_decoded":1492,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4ea09fcb51b9eaf51e38ce6789e63b74","sha1":"02cf37c8666728b7cbd0ef97800150a9b447ea47","sha256":"044e55f8a9564c948861ccdcfce88f3f9e6b9f705e8fff90034c145088f5b9b0","sha512":"802b27a9e6fae2e18f31e4bc0bdbabca88f9f3d34ff567fc2ca3f1c1fee673c0728c02082e6809ea8e4fc6678168b1b5edb7b1bba6c01667f42a63d479ca6159","ssdeep":"192:czlg+MNNIxO34OxvNNryfO3iExBONEhYO3RrxSx:cqXtpi+8","tlshash":"6402ba92002ba500ab871dc223cf7f3aaece60856485d1796ffd0cc5acead66536875d","first_seen":"2026-10-10T22:14:08.890101Z","last_seen":"2026-10-10T22:14:08.890101Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/button-contact-vr/legacy/img/phone.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.341Z","timestamp":1791670313341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/button-contact-vr/legacy/img/phone.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"3b8-6ab6121d-225bd8;;;\"\r\nlast-modified: Fri, 25 Sep 2026 06:18:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 952\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":952,"size_decoded":1252,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a48ce4305cb2dc71a11d1d488b3324ae","sha1":"c329352ae45a42489fce48dcc5594f3db8c52028","sha256":"6c3669b8e2c8d60c9eb6b00acf6b79c7fa2d976ed3cb7ead7f4de59fbfd52fba","sha512":"78a0ba8af04cf1fe41b1be0de71872e4e63cb64639ab0430816b239b98a334538f7a0735c1111a5aa2a707628b58cd9e470fab82492c79c9ef9d72d361b85914","ssdeep":"","tlshash":"f411948e99eaa83bd277d4114b1a0748fd761a56ac32694d20ec317f0d50714f9b6029","first_seen":"2023-05-01T21:32:11Z","last_seen":"2026-10-11T02:53:52.749727Z","times_seen":1083,"resource_available":false,"data":null}},"time_used":1423,"timings":{"blocked":1185,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.956Z","timestamp":1791670315956,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F; _ga_J3VKYT0F57=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h89233601; _ga=GA1.1.217880455.1791670315; _ga_HHZ1S5DKHJ=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0; _gcl_au=1.1.339265876.1791670315.2017249300.1791670315.1791670315.2033502641.1791670315.1791670315; _ga_LE8EKF0KRF=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h208911186; _ga_EST7LR0H7K=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h611277062; _ga_PD80MHVZFQ=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h522295742; _ga_DZ0SRGE3ZW=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0; _ga_B512EBZZGE=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F"},{"name":"_ga_J3VKYT0F57","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h89233601"},{"name":"_ga","value":"GA1.1.217880455.1791670315"},{"name":"_ga_HHZ1S5DKHJ","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0"},{"name":"_gcl_au","value":"1.1.339265876.1791670315.2017249300.1791670315.1791670315.2033502641.1791670315.1791670315"},{"name":"_ga_LE8EKF0KRF","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h208911186"},{"name":"_ga_EST7LR0H7K","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h611277062"},{"name":"_ga_PD80MHVZFQ","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h522295742"},{"name":"_ga_DZ0SRGE3ZW","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0"},{"name":"_ga_B512EBZZGE","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:56 GMT\r\netag: \"58e0-6ab611cf-226f10;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:16:47 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4938\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5300,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T21:43:22.687463Z","times_seen":81902,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.884Z","timestamp":1791670312884,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"148-6ab5d470-2265ff;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:54:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 142\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":328,"size_decoded":486,"mime_type":"text/css","magic":"ASCII text, with very long lines (327)","md5":"8a1c4f5626a521ebb41f5d989f6e2c7f","sha1":"91fa777e0689ff76d0fd41625f04de231b3e0569","sha256":"30fd9ec16112567ac68f1db9d60e71dd610be376f97dd1856ad61ba4265e8fd2","sha512":"596f5711728e3bdce95a57f1b5cff51b9250f55c4bc29840fba40cc68d2324a2088debe43287350501dfe8179ee5f08d9941a814355ffbc4327b2687193ac333","ssdeep":"","tlshash":"50e012224f0e04174352151674ca7f132b0b772ddc10dcd795ca8c9d6ef6d4101a0fb5","first_seen":"2023-04-09T08:14:55Z","last_seen":"2026-10-11T19:22:50.621798Z","times_seen":1595,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":239,"send":0,"wait":239,"receive":0,"ssl":244},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/print/style.css?ver=3.0","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.893Z","timestamp":1791670312893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/print/style.css?ver=3.0 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"126-6ab5d468-226419;gz\"\r\nlast-modified: Fri, 25 Sep 2026 01:54:48 GMT\r\ncontent-type: text/css\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ntransfer-encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":294,"size_decoded":562,"mime_type":"text/css","magic":"ASCII text","md5":"f0ea3b94ba362d6925e9bf6fd5f2af03","sha1":"e19d87b0d7566ee50396c4138097d7cd59d46b3f","sha256":"9d5d79809fa45722097c7c64dec0a6b3f742776fd0087043c95e3a198cfa331f","sha512":"78b8a2440fc4380fe77fe642a63dd2d64dee9897347869d97bd6f9d85e75a544309d6c27e5050f9a5ba4c839c371f0e1df3a931602039e418e0632da13112735","ssdeep":"","tlshash":"1ae02bd064d19d0c5036530b047602c893607a102776056ce08c3528c15d7d504f4f81","first_seen":"2026-07-08T22:41:10.648522Z","last_seen":"2026-10-10T22:14:08.899285Z","times_seen":2,"resource_available":true,"data":null}},"time_used":915,"timings":{"blocked":677,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.904Z","timestamp":1791670312904,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.11.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"25a4-6ab612c9-228616;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:20:57 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3283\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9636,"size_decoded":3645,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-10-11T21:38:25.322456Z","times_seen":186030,"resource_available":true,"data":null}},"time_used":956,"timings":{"blocked":710,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/uploads/2023/03/Logo.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.091Z","timestamp":1791670313091,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/Logo.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"a03f-6ab5d34e-203df6;;;\"\r\nlast-modified: Fri, 25 Sep 2026 01:50:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 41023\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41023,"size_decoded":41326,"mime_type":"image/png","magic":"PNG image data, 500 x 205, 8-bit/color RGB, non-interlaced","md5":"951dab3831e9f5676c4c77928497e82a","sha1":"a04f4727a4bbbb3b99ebca9be8213756b0a4f944","sha256":"601df89ebf8f4ea57fc41b5487de58599f2512080a839b0f562a93c6608bb3d4","sha512":"a52f12c3b6c4d4709f2a9e0483f9b95e91398cd05e1b6d2927528fcd0296d6c6eea8d63ffc6aa1780cff87da2a5b91276f74e04fedbbb0bf63e93ca78ea125fd","ssdeep":"768:qqyqqPcJNSL1iC/ArVzBpGz16RrUONNxxLUQhRPcbHSv6K8XehOl9:q5kLSJiCqzG6RUINqSyKS","tlshash":"0f03f253f11a3291ef1121a521f6c8969e4e44c58d1843927dab65e2ae7fce03c3e0e3","first_seen":"2026-10-10T22:14:08.903551Z","last_seen":"2026-10-10T22:14:08.903551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1716,"timings":{"blocked":1237,"dns":0,"connect":0,"send":0,"wait":241,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.291Z","timestamp":1791670315291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-origin: https://lichxuansaigon.com\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:67:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:67:0\r\nreport-to: {\"group\":\"ascnsrsgac:67:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:67:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=13\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-11413217107\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315852\u0026tfd=6676\u0026tids=AW-11413217107\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.859Z","timestamp":1791670315859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=13\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-11413217107\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315852\u0026tfd=6676\u0026tids=AW-11413217107\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.15.2/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.852Z","timestamp":1791670312852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v5.15.2/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spSSGJwKkIChNZK5JWnVXkKTufsB8oUlmr1V1ghOyNHhqh7twwk7YmXMTdVGZwBWEykBhbyOrdkPRAIbbrY5m3fYYiLUA9dkfzXukPpoSTkxsUbOAq%2FHW%2BymLwCypnsW4YcI3r5P\"}]}\r\nlast-modified: Fri, 22 Sep 2023 01:45:20 GMT\r\nvary: Origin\r\netag: W/\"c4af24ce595437830af0a401897698b2\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a488f69f7e62b4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59344,"size_decoded":14366,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"c4af24ce595437830af0a401897698b2","sha1":"06b7f92dd894a9edb0aeb9d040b489460ecff593","sha256":"d1fb8d8337cd22568295b0ed998c85c58f0b4cd083af0b0db21cb0af80002f2d","sha512":"1cae5f80b04bfb1bba766fc88b7cf8c619525326604d3f6db9cfe14abb70eaecc93af811af66bd8f2c714f57a5cbe07ec4502624a5524dba4cfc2b8beeac4ef3","ssdeep":"768:5Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:5E0PxXE4YXJgndFTfy9lt5B","tlshash":"d843fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-06T12:58:57Z","last_seen":"2026-10-11T20:55:12.352528Z","times_seen":8360,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":11,"connect":9,"send":0,"wait":135,"receive":-1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/5203c085/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:54.532Z","timestamp":1791670314532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s/player/5203c085/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed\r\nCookie: __Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; YSC=0SfBoWLFxnE; VISITOR_INFO1_LIVE=bjMeMSNQWEk; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; __Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ"},{"name":"YSC","value":"0SfBoWLFxnE"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 58727\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Oct 2026 07:39:45 GMT\r\nexpires: Thu, 07 Oct 2027 07:39:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 07 Oct 2026 04:33:48 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 311529\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":548133,"size_decoded":59407,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"0144215f1a68ffe29de0513c90935569","sha1":"e4ad3ab3d354164586f9016b830859cca45e78f3","sha256":"bcc8fec871a793d4b6fdccc256f1b7c05dcc7656ab8529e7cebea97ba1be166e","sha512":"6bf385f0f1dc460c09158a3f2c6f039dcf548cc422695ca20bd6f644aa7a44b5f1e6aacf8614239fe711616df1a9a32d86ebfc6a0bc845f0fff2e4b16c7cca9a","ssdeep":"6144:p8d5Fe/qoMOg7UABLdIoImM5KPHp8Oi4u7:OYxMOg7UAfIoIr5KPHpTg","tlshash":"0fc4d972e0a1233cb2278d9997d9d54d7339d983e2e12afff11166dacbc77821316206","first_seen":"2026-10-06T05:18:10.280083Z","last_seen":"2026-10-11T21:00:59.646055Z","times_seen":2230,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-J3VKYT0F57\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=364019440","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.426Z","timestamp":1791670315426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-J3VKYT0F57\u0026cid=217880455.1791670315\u0026gtm=45je6a72h1v9116824332za208zd9116824332xf1\u0026rcb=7\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=364019440 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-11T21:43:42.094175Z","times_seen":1102638,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":37,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J3VKYT0F57","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.914Z","timestamp":1791670312914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-J3VKYT0F57 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nexpires: Sat, 10 Oct 2026 22:11:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 206677\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656170,"size_decoded":207281,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23563)","md5":"950c757010baf62582f95d280c523a14","sha1":"d33a01d58616b858b31fa9379b4fa0054b3f08dc","sha256":"4b2113a70a8ec4d5a8c0e8bebfe39c74d99fe7f6daa0ba2cd1310254d5a04d75","sha512":"8f70e790a84ad059884b814a7b0c8a4def99329fb52fb0e0654c730ac26e6326308ee53cd16b94dd6a98e0f2ca7702073159ed6e1616613ea621019051aab36a","ssdeep":"6144:l+x3sfCyqMnhIma7ulkl+cfIb/EfD3ce2XYch2rSFerr+p:l+HEKml7YcEp0","tlshash":"b7d408ceb3c67462929af568903f02cb697f29a2b45cc89bb18ddcf01d3454a5163f78","first_seen":"2026-10-10T22:14:08.914486Z","last_seen":"2026-10-10T22:14:08.914486Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":51,"receive":72,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.KnLLmnw14PA.2021.O/am=AAAAQADG/d=1/excm=base,root/br=1/rs=AGKMywGA7wrLiSC6AmQ1fWLJ64CF29Sgew/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:54.541Z","timestamp":1791670314541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.KnLLmnw14PA.2021.O/am=AAAAQADG/d=1/excm=base,root/br=1/rs=AGKMywGA7wrLiSC6AmQ1fWLJ64CF29Sgew/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed\r\nCookie: __Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; YSC=0SfBoWLFxnE; VISITOR_INFO1_LIVE=bjMeMSNQWEk; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; __Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ"},{"name":"YSC","value":"0SfBoWLFxnE"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 163727\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Oct 2026 12:56:13 GMT\r\nexpires: Thu, 07 Oct 2027 12:56:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 07 Oct 2026 09:10:47 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 292541\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":484373,"size_decoded":164641,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"acfee508b3052d8b3edca976aa4e059a","sha1":"8b4ce9d9179d215b8f8f3435207ce116af76eea5","sha256":"9c92ea8603874fd1c0422cbd0fa1d954e61ff76bfb41ef0b7da95d9424848954","sha512":"228c2ed480135998326fe04b91bf2993fbdb076c171b6bf80ad4a96d5b5d04eabc1891be214535da025265a1089d5d97873f393c55b29a060e01d5f9216297e6","ssdeep":"6144:hgzMmD3Nw4r9x8BNtNIZeC9bVpCbWcVXB/CnyvuUL0ACTqvq3zoXmuWNNfF:tNtNIv5VwVvfLKeTXmuWPF","tlshash":"73a44dd977a2702392a2f1e4902f4107b2bb6855f44c9c7cb6c8d9d17eb494942bbf38","first_seen":"2026-10-07T17:58:12.087043Z","last_seen":"2026-10-11T21:39:47.834919Z","times_seen":1171,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:54.564Z","timestamp":1791670314564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:25 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454769\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-10-11T21:43:22.230306Z","times_seen":1021845,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/uploads/2023/03/cropped-icon-192x192.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.263Z","timestamp":1791670315263,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/cropped-icon-192x192.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F; _ga_J3VKYT0F57=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h89233601; _ga=GA1.1.217880455.1791670315; _ga_HHZ1S5DKHJ=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0; _gcl_au=1.1.339265876.1791670315.2017249300.1791670315.1791670315.2033502641.1791670315.1791670315; _ga_LE8EKF0KRF=deleted; _ga_EST7LR0H7K=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h611277062; _ga_PD80MHVZFQ=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h522295742\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F"},{"name":"_ga_J3VKYT0F57","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h89233601"},{"name":"_ga","value":"GA1.1.217880455.1791670315"},{"name":"_ga_HHZ1S5DKHJ","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0"},{"name":"_gcl_au","value":"1.1.339265876.1791670315.2017249300.1791670315.1791670315.2033502641.1791670315.1791670315"},{"name":"_ga_LE8EKF0KRF","value":"deleted"},{"name":"_ga_EST7LR0H7K","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h611277062"},{"name":"_ga_PD80MHVZFQ","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h522295742"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:55 GMT\r\netag: \"294f-6ab5d34f-203e17;;;\"\r\nlast-modified: Fri, 25 Sep 2026 01:50:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 10575\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10575,"size_decoded":10878,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"24858accc0d79516d2d756f8a3a518e7","sha1":"336d005b5f0e82a86bdb256076a494564027c52c","sha256":"84eb317186aedde42bd3c2adede8165f20d88bb472d9356ec7234d7f8ff3b71e","sha512":"dabd4634f7a816d81914287ea9d74f81cd520220ad92f6607a54c68a14c38ae756743471acb0d9bc1bb1b6423d533367a2582dffa58a57dc7974af286a532352","ssdeep":"192:fykt5LbiqTSseYxj1r5BalSjQN9HD7v5natgf3rAa0JQEtXZtt8w/:a4pTSKjnBySa95aOjezRZjZ/","tlshash":"fc229ee01ed4ecb4df10729d5b3e61eb552451b9e72a6ece28a67e05e13f0e134344c6","first_seen":"2026-10-10T22:14:08.919036Z","last_seen":"2026-10-10T22:14:08.919036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.304Z","timestamp":1791670315304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13004\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:59:59 GMT\r\nexpires: Tue, 05 Oct 2027 15:59:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454316\r\nlast-modified: Thu, 29 May 2025 23:41:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13004,"size_decoded":13817,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13004, version 1.0","md5":"38263f69e18d5ea4e094cb38cfb1030e","sha1":"fd310cfd141bd2f891164784739aa27d996423be","sha256":"38ca68052df6bb72126ff9cedd7d78d2afe62079e9149ddedf650ae8f4c744cf","sha512":"ff27a17133aabe79a844013d91c54aff11bca0839b63045905bc9d4cbafe0072bef343e1869a8066181db59df1ced7757be58298e7398193e59d7d8cf8cba89f","ssdeep":"192:Dnu1HXqwf45uYmb6EHUp6VCwCYp3uo2flIoIWFAda7Fxe1ep//Gg5PxnwuhjsgFL:DuRqwx6IwOp32flww7nz3nTjomejMoM","tlshash":"2d42bf7a463fe34fdfdf0b2305429ad1a0c80322721637a52a935a710856278be428bf","first_seen":"2025-01-09T08:14:29.323559Z","last_seen":"2026-10-11T04:24:17.613643Z","times_seen":4151,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.117.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.743Z","timestamp":1791670315743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:43 GMT","end":"Fri, 11 Dec 2026 20:01:42 GMT"},"fingerprint":{"sha1":"A6:C0:81:49:02:5D:55:F8:AA:9D:F1:C6:9E:4A:41:81:F1:AB:0A:88","sha256":"80:F5:46:E0:B9:70:82:92:76:41:07:3D:0C:47:81:6B:0C:25:BA:5D:3C:80:F9:ED:61:2F:24:50:D3:99:78:A5"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1879\r\nOrigin: https://www.youtube.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1879,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$A5w5nPhRAAatBPRsjQTe9GJzWiS-a32nAEABEArZ1OaVi-Vg8mjEKLKfXtA96Dd2quMuENCcmg-HGdV9blHcnN018ch4LCjMWEPy5dBk1aM_4fXcy-yddmjvngAAAUjOAAAAEvQBB-IAWXROG-WC0to8tcJQatEzTB_3yNf43qfybt6qsTDkYodbVkHfbYCJ8d3VWCkhgj4bL9jda0z5CHH2iSMaVwjHdQAr5S2voJSkXP6L9kzW5N8CxWKMY_rTFPduBQSmqrmYehSA7oz-_ln0Ie7kKW5vpkWoI36yMqVVTWK9ERMq5StOwHF7XxUOeEzYlQoHldxQscu2Gobn9_nwyPZ0TNKWb-FQ5iMlzh6NEYOwu-1i4vqUwriWXtfEdU7t0ClSinUODtOQMOQM6qKiIlr0loCYHLWESMxIE_QeBluzOoQp-MITRAL4DzyU2bFB8inz-y65_sFMeDDdQKI8m1c9zfc5nP7wcpHXcBZbQr59FTDbMokvYxVczXYMB9DPWf8Jq3b6gv1rJkdld7nw-Mw6w-swZNhkexGtEDfwzOjnFrIHJ6CDJH9yIvRntzJWJkHAzQkCHFhxOwtaMxc4p0d5BDpLKfnWC4CxEfZ_J-7CjX03443agqKPKljGYZddH-lqtmcPh7D1l7tTmXlEzuqXyQh-IpJQu8LWpVVBxjECB2iLgv92bWLU4NUxFQoXDqzdNL5I4-0CJv9sep33yzMDm-hLOkDnHKxl40PGoBucQUUWMfr3xKejefls4QrSmsbI0pY7QdA9ZNwk54M_BVWrZWz-GSbnotGASh6YA-VQR7lhdKzEW5vaWwItfeYUCBDf_lYoaw3t_7eumacmcKOT6qzgKf_Rw1f0Ky7vpdV91NSBlQ5lOJS-0hMWJCLGIbIcE0Y1wb2sJp4nYBnXfRu6Kp_eggYeNk5Xcq5pYZ_0vdnJQeslTCr7a8VN8ZO-BZI58zYjAZhp82kw_vJxPCyKMgJWlyBabEaI0oJfXfV-aiKTNjYcGaptSE1iNyIrqp_rkYK59wPdTaFeg4uKTapVCEv0QAcinAcf4GPfy8QnQkpW4lusOjWHjCMps3z3BYFRWoivsXiuhozcS5eFqcKuLZ_ja_0veVApmmEIFBCfTxlvl-k0aiNwTyDozy4sM2CzdKmghmTlSa2IG8F_Ftju7al3dXKweRc5qpvf6n29UivWw6rIKQ-I2XbnbQglYnHiDwaiXKVmo15XLTfWl7Fp7Iyu8jCO4QuMQdoFtZHgC0NqyaqOBdp_lW4zJpTjfvfeKSQgOGujyIFJThNa1Qo5zVRoBzn7UaDEK3o5FMbKVnvnuOyZyAv2NPoUwPAqAx8JS-jF6J7tQGhNpXgMjvZGYvlsP1hM3TMB4c7bacYyzH0D46RtNpeUmwW2_FtPDYiDhiKDt6vtoY0fhheUreTUtk6zaLF0muUcQcwdTbCkSunN1yJ3xrQrCYbXMqMOGw4oIx9k7ujYiej_IvmVoT6YrrjtdUov_871o9xSMof7b6j6YSCQt8dPSUiZdluEHKk5WHh3M8rElP3ZUGOwSqgKHhZMBY2kFIDmCMpWlKqjd1QSwYlwOeQptw-T-p_AkS_F600-BQVkrEsfNGP_cnPLQBsZCN2RVvR3HSjYLxQEP42FxMXnR6EaDWdx5t08_cyAw436GrVgdYwJdliKxOP8DgoIqjapp017WJv5AqCSCOVGTEXfNS-JAfzttl83gxHwTj-Wv3D__wDDxURqio11gQj98zOspd1L5NGbA8cEGkMAF_DlKLR-D1YuzoAS6J8tTukr2XLq5SxqsTXyXOusOnf3ZeX28n_uONrkQMzulaiUM_a3NnA\"]"}},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":662,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"8ff235108a9a3ec6e2541b80398b4772","sha1":"ddbc60a6e1cd9589835fbdcdad9492cbfb455682","sha256":"c5e5216da21f8ccaac109667fb6a43134bcbcf45e73601ad69ab4cf2a9b2e4e8","sha512":"d5ef4c535a318b0899f2b6396efbbe355276aca06fa2008b333428b0f785e51a25c940556e5a88c72b9adfa6943fce00a381aff95e7ab3e48ba4986febae4dd1","ssdeep":"","tlshash":"23b012b0a806b1c170066462137e610ac11c20c05a9434a45c65d26545550320ec82ba","first_seen":"2026-10-10T22:14:08.920414Z","last_seen":"2026-10-10T22:14:08.920414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":2,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.908Z","timestamp":1791670312908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.11.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"6b8-6ab612c9-22862e;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:20:57 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 762\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1720,"size_decoded":1122,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-10-11T21:38:25.290233Z","times_seen":164749,"resource_available":true,"data":null}},"time_used":1153,"timings":{"blocked":915,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.351Z","timestamp":1791670313351,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js?ver=11.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"987-6ab612c9-228600;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:20:57 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1019\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2439,"size_decoded":1380,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2439), with no line terminators","md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-10-11T21:38:25.320754Z","times_seen":52097,"resource_available":true,"data":null}},"time_used":968,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/ss/k=ytembeds.base.UsaYRPhg50s.L.F4.O/am=AAAAQADG/d=1/br=1/rs=AGKMywF1XZoISmxxRVK17gdsIlmIT83jkg/m=root,base","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:54.535Z","timestamp":1791670314535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s/_/ytembeds/_/ss/k=ytembeds.base.UsaYRPhg50s.L.F4.O/am=AAAAQADG/d=1/br=1/rs=AGKMywF1XZoISmxxRVK17gdsIlmIT83jkg/m=root,base HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed\r\nCookie: __Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; YSC=0SfBoWLFxnE; VISITOR_INFO1_LIVE=bjMeMSNQWEk; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; __Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ"},{"name":"YSC","value":"0SfBoWLFxnE"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 2570\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Oct 2026 12:57:36 GMT\r\nexpires: Thu, 07 Oct 2027 12:57:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 07 Oct 2026 03:11:49 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 292458\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11351,"size_decoded":3475,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11351), with no line terminators","md5":"843bdb15498b8fe99fca2ffb1037923e","sha1":"034570145f16508f8c41b3d035369f39f7c5972b","sha256":"811e1d5a3836a96efc7f7503d8c82f28c9c9d604689ad2c31670f759ee5ee280","sha512":"cc9d13eb9a779f6234f075d06e06b6cfe44b95e04d0419449384525f77d59fb67a082866b6a39cfe496f9216a46020e59ce1883e7075c954b9d4ce451f3b4cfc","ssdeep":"192:1TqRd/x+KU75K4+92vjIQqGsqdsy/uEap79HDPs60KvtjTbuZ20sg4sIsZhr0C5p:1TKd/xw75UwsRp79QmTD1k17DR","tlshash":"5f321fa0c8d31f6383508997e4ba966e72e19f315bfe441d49a35fc3f9c72aea191401","first_seen":"2026-10-06T17:36:46.36427Z","last_seen":"2026-10-11T21:00:59.6709Z","times_seen":1420,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi/i1i3wDJv7Uw/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGH8gFigaMA8=\u0026rs=AOn4CLD3Bq5e9WDCSaoZmTJIQGnqGFamKg","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.310Z","timestamp":1791670315310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:09 GMT","end":"Fri, 11 Dec 2026 20:00:08 GMT"},"fingerprint":{"sha1":"06:E6:E3:93:C8:EF:84:33:44:D0:A3:5A:EC:36:1B:26:51:11:5C:E3","sha256":"D3:E4:B5:D3:84:A6:8E:CF:1E:61:1C:F4:33:3A:CE:3C:BD:75:26:4F:FE:94:CE:05:85:E3:F0:96:22:0C:09:86"}}},"request":{"raw":"GET /vi/i1i3wDJv7Uw/sddefault.jpg?sqp=-oaymwEmCIAFEOAD8quKqQMa8AEB-AH-CYAC0AWKAgwIABABGH8gFigaMA8=\u0026rs=AOn4CLD3Bq5e9WDCSaoZmTJIQGnqGFamKg HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52172\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\nexpires: Sun, 11 Oct 2026 00:11:55 GMT\r\ncache-control: public, max-age=7200\r\netag: \"0\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52172,"size_decoded":52825,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3","md5":"3e8f158efe3b0a3bc8988cdc73e6c2e3","sha1":"3bedcea020cfe0f9dff612251930d45c049c4cfc","sha256":"47ce3e915d9edcf9626f9ff4b26a68586b773d8963fa1ebc8a3832b0c4c73546","sha512":"8120370fc9023244413df823b686b1dc5c7788beeaba98340d9621d045bc94b19136285ec4e6655341cfb2e669443ad06107f20ad856a8a5e2515bee18e73845","ssdeep":"1536:gVyEIc28t5Zu8zIOaFMr4iiaCzHwyytz29:UyyRfZu8FaFMCzwyJ","tlshash":"be33e0e78b21cc03c531db10bf973bae4b48bd511ae536e701ed26c837b585a047da69","first_seen":"2026-10-10T22:14:08.936063Z","last_seen":"2026-10-10T22:14:08.936063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":78,"receive":22,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-sms2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.279Z","timestamp":1791670314279,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-sms2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.13.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.889Z","timestamp":1791670312889,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.13.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"5cd2-6ab5d470-226602;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:54:56 GMT\r\ncontent-type: text/css\r\ncontent-length: 5149\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23762,"size_decoded":5495,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (23758)","md5":"35f3c83ba3df0ed00dd41fd2ff2176a8","sha1":"1e18e02ae549ff21280c9ede4236bef181b1860c","sha256":"c3e2022b9378b2b6988f378d805089837206fe6e1da12e07168461a785d2001d","sha512":"9eb9197b96c31a64669ee4561973da9497b31ff6b6265ec285a870d380aaf947ba9747d1453243069bb05436712f79694a1afa96555d62ee3d9e9efa7b18d207","ssdeep":"384:RRGdK9WpuyECjL5i9wMga6vQx6mQibX7lIQjw8RlS1Bkn0QSYczlPVCBsGY:RRGmWhjMBgaN6mQ87lIQjw8RluBkn0Q8","tlshash":"0bb2c872e2b13518903bc721e9d0bbedb5a8e172f39705fee8523615c7861ea163264c","first_seen":"2023-04-09T19:28:49Z","last_seen":"2026-10-10T22:14:08.938852Z","times_seen":406,"resource_available":true,"data":null}},"time_used":916,"timings":{"blocked":677,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-phone2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.348Z","timestamp":1791670313348,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-phone2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.258Z","timestamp":1791670314258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:55:52 GMT\r\nexpires: Tue, 05 Oct 2027 15:55:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454562\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T21:40:26.807251Z","times_seen":313606,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":30,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.339Z","timestamp":1791670315339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-origin: https://lichxuansaigon.com\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:67:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:67:0\r\nreport-to: {\"group\":\"ascnsrsgac:67:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:67:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5PG9NBH8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.145Z","timestamp":1791670314145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtm.js?id=GTM-5PG9NBH8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nexpires: Sat, 10 Oct 2026 22:11:54 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 10 Oct 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156606\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451749,"size_decoded":157236,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5394)","md5":"9b9caf3ea45a5e1d4d2668c7fd892645","sha1":"a2b38de9cac92b7b21ed8e1a918e2f206cb33fc3","sha256":"af7cdebc5880284bec8f8fb7176be5504020131f1a1dc8a2b474e505cb5ccfa7","sha512":"79b54ec3a1dd9157ce71ca5f3f6a66a40d5d5523213bb773c09e15c238af6020f180fb7fc67881c0c4cf066c9ac300ae78d1eac1eb94ac7d103646eb4b2bd86e","ssdeep":"6144:FsfCycnlIma7ulkl+cfIb/EfD3cezwhw2rZ9p:nemlXh/h","tlshash":"74a409ccb3d6b46683a2b578903f014b727e6d91b84cc899f14ad8e42d3865a5273f7c","first_seen":"2026-10-10T22:14:08.824289Z","last_seen":"2026-10-10T22:14:08.824289Z","times_seen":1,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yt3.ggpht.com/sLw2rHfKapBIMxpOtdsOYA_3dtGA-hXWikycTuZfeSv1BwbRKe7r0JqpDWjwLhLjxqhXdp0d=s68-c-k-c0x00ffffff-no-rj","fqdn":"yt3.ggpht.com","domain":"ggpht.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:55.328Z","timestamp":1791670315328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:46 GMT","end":"Fri, 11 Dec 2026 20:01:45 GMT"},"fingerprint":{"sha1":"23:43:A0:11:7B:7F:06:34:48:5E:D9:68:CC:D1:AD:56:A7:AC:62:31","sha256":"7C:46:C9:EE:93:E6:42:16:8C:A9:70:41:D7:87:3A:AA:93:46:6A:5C:BC:02:C1:4C:6D:23:12:55:1F:A9:1E:01"}}},"request":{"raw":"GET /sLw2rHfKapBIMxpOtdsOYA_3dtGA-hXWikycTuZfeSv1BwbRKe7r0JqpDWjwLhLjxqhXdp0d=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: yt3.ggpht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sun, 11 Oct 2026 22:11:56 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"channels4_profile.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\nserver: fife\r\ncontent-length: 1486\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1486,"size_decoded":2058,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"77ce7c3b09095e82eacb0e10850ed72c","sha1":"da7beff7ce9f1d6e4dfe15b1dd4b8748a09d188f","sha256":"7d7beedfec028e961b0102b4364ccdc0c829456a459717a56e8185c2b42da2a6","sha512":"30709db1c30db0946a512574cc7c7e5d72c84f0f4c5393c339b5ed0e774835b9c2fd6cea815e08fb7e3032366865c27c9134bcc635de19ee60d4897e38c72c0d","ssdeep":"","tlshash":"5431191b35c91667ee6c013e031a6774fa0483b01237ce9889cb16550b01fe88ed9b6c","first_seen":"2026-10-10T22:14:08.939618Z","last_seen":"2026-10-10T22:14:08.939618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":542,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=S%E1%BB%B1%20Ki%E1%BB%87n%20LXSG2026\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315386\u0026tfd=6211\u0026tids=AW-10972879735\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.399Z","timestamp":1791670315399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026apvc=0\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=S%E1%BB%B1%20Ki%E1%BB%87n%20LXSG2026\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315386\u0026tfd=6211\u0026tids=AW-10972879735\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.15.2/css/v4-shims.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.855Z","timestamp":1791670312855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v5.15.2/css/v4-shims.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFCdn0COHwm40e6YKUW7fx%2FEiOYDhQDg9t1p2Ku9vgdlGYnoHVD%2By35InrEoIa5zajU46de47YaUJf5naLSol6kzD1yinMkUZ5VOqQwyCYvehIncAtgjUB%2BBjUYq9%2BSVSjrvZd9K\"}]}\r\nlast-modified: Fri, 22 Sep 2023 01:45:20 GMT\r\nvary: Origin\r\netag: W/\"e87bb9f39a9be8e3f6fc0573c53213ff\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a488f69fcf7bb512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26702,"size_decoded":5033,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"e87bb9f39a9be8e3f6fc0573c53213ff","sha1":"373b031efdcf8b4bb36b8085eb02e650956d76aa","sha256":"23dc0579b933d942c0e46488214c394922cc3e9434f757d307bb1a3b72b276d7","sha512":"35f84b1aec72e86d765c78fbfdbbe6d110b78e6476e517692269fc3f5f5a20c98de699dd3b47ef220efc8a137658826d551b3e01856b9d8178022a558a418f2e","ssdeep":"192:SP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:5Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"06c20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-13T04:48:32Z","last_seen":"2026-10-11T09:57:48.674917Z","times_seen":777,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":118,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=11.1.2","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.905Z","timestamp":1791670312905,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=11.1.2 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"10fe-6ab612c9-2285ec;br\"\r\nlast-modified: Fri, 25 Sep 2026 06:20:57 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1294\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4350,"size_decoded":1656,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4350), with no line terminators","md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-10-11T21:45:49.542817Z","times_seen":58278,"resource_available":true,"data":null}},"time_used":1153,"timings":{"blocked":915,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/button-contact-vr/legacy/img/showroom4.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.332Z","timestamp":1791670313332,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/button-contact-vr/legacy/img/showroom4.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"a68-6ab6121d-225bdc;;;\"\r\nlast-modified: Fri, 25 Sep 2026 06:18:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2664\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2664,"size_decoded":2965,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"15bc91696ed6dbb6e5c3e71c3f3b027c","sha1":"d6fb27c3d43340934d374c75de3eee0cfd090659","sha256":"37a8aa022510334dc78ebeda3b4de121a26802d7711a0b3647c534e07a7a6aca","sha512":"c7edcbaefdfec44496c26b60d103692bac1b6639b0e0eba497680a42ba2b5044a6ec2a4cf70f60c815b0597c86492c084f167527dd7b7dcb39fe961ac3a55d13","ssdeep":"","tlshash":"635129d67e722003911cad9118ec1537e37258c99a82f0fee8f6c10b49380fa187e8ed","first_seen":"2023-11-02T14:39:39Z","last_seen":"2026-10-11T02:53:52.810721Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1259,"timings":{"blocked":1014,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.250Z","timestamp":1791670314250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10212\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 18:27:12 GMT\r\nexpires: Tue, 05 Oct 2027 18:27:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445482\r\nlast-modified: Tue, 09 Sep 2025 18:33:56 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10212,"size_decoded":11025,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10212, version 1.0","md5":"b4116ee119caa0aff77a0f99bf188184","sha1":"f1e75276e3c00e2023e07eef94288f1b5e5c4ee3","sha256":"0515874177f0862384d111fccea0b6e7c32a7da106202949775b96b1fb56b236","sha512":"956f75a5e7e46d9436c6c20d493988901701a8cb846296c27779d72f3a24c58f0d7083a52eac77ebdcd15dbb97a1654599a46a9dccc7120b30fe5516c5739971","ssdeep":"192:9STaMoBFOLgYxDRMI5Y7VblGW7jsBF9W5C1IK8WQrjNn5DCY8LRUNwjUiyq3K6+O:M0BFWVxiI5YhlnsBbgCxJQrHDECslyGf","tlshash":"5f22bf68a663671fdcc7e63004f0da5042662e491253d776dbbdb78901278fe0417bd3","first_seen":"2025-02-02T06:10:28.700493Z","last_seen":"2026-10-11T21:39:25.332858Z","times_seen":3574,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=6\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6a72v9235371194za200zd9235371194xeaxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~117776796~118131810~118897920~118897930~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315520\u0026tfd=6344\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.523Z","timestamp":1791670315523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=6\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6a72v9235371194za200zd9235371194xeaxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~117776796~118131810~118897920~118897930~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315520\u0026tfd=6344\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-B512EBZZGE\u0026cid=217880455.1791670315\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xf1\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=164949020","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.855Z","timestamp":1791670315855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-B512EBZZGE\u0026cid=217880455.1791670315\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xf1\u0026rcb=13\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026z=164949020 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":558,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-11T21:43:42.094175Z","times_seen":1102638,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/uploads/2026/08/ChatGPT-Image-14_32_05-11-thg-8-2026-1024x512.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.897Z","timestamp":1791670314897,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/ChatGPT-Image-14_32_05-11-thg-8-2026-1024x512.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"d461f-6ab5d2d4-202bb1;;;\"\r\nlast-modified: Fri, 25 Sep 2026 01:48:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 869919\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":869919,"size_decoded":870224,"mime_type":"image/png","magic":"PNG image data, 1024 x 512, 8-bit/color RGBA, non-interlaced","md5":"01546136ae20cbe8e2494731e361e6e8","sha1":"2ea7a4ec101714156c1c080682e697afbbdee649","sha256":"f00da76c843078f6afa2c4892d7f0f3a2d2d25238557d436df535c61926c4624","sha512":"d1e66173a8e9c7c8586dbd09519e84c7f27826774c30eb0651698ea1000e8c9dfbccc7ffaf48bc837b9915dd346d41236f41d25b4408914ac49dd535ecce6b72","ssdeep":"24576:I3Z8zjihYG1w8vooapdFxtX6jWKNHwSdgt:I3OHih0AZap/xtpKaht","tlshash":"e7052315e39feb31fe3b1f8a56ef047411ca31b14b31482658ece53868ad89d4bd6368","first_seen":"2026-10-10T22:14:08.946713Z","last_seen":"2026-10-10T22:14:08.946713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":1726,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/pagead/1p-conversion/11413217107/?random=179976299\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwxKfWBhCG2snu9uSwsCESMwC2uJsI9UkAPoYxU6vhxL0rtHROo0sl-GOe6GaRLFrMQPwfqNQcQ8CJPtmYr3hYS5DBS_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCIvysQII9NqxAgji6rECCOjusQIIkuuxAgjJ47ECCJfUsQIIyduxAgjN5rECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=CgyCsL4tueu-LZ3ptzg\u0026fsk=ChAI8MSn1gYQ6-GJlaqKz_8jEiwAXuLv_cQdtNSe7QpkQNF5djWokfncr4eXM-cHcEDYei2zEkwc2gH2BneR4xoCy0o\u0026ipr=y\u0026pscrd=IhMIu6OUhrywlwMVi-vKAB3p1xsKOhtodHRwczovL2xpY2h4dWFuc2FpZ29uLmNvbS9CV0NoRUk4TVNuMWdZUTZxZWk4YVBxcnRPU0FSSXNBSXp1MTduX0g3eWd1ODRsYTRsNUZxUHBKc2lja0dtbFBadmJmcU9jZGZjdDh0RzUtS2NLWjY5UGxLMHoMCAliCAgAEAAYACAA","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:56.562Z","timestamp":1791670316562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /pagead/1p-conversion/11413217107/?random=179976299\u0026cv=11\u0026fst=1791670315805\u0026fmt=8\u0026bg=ffffff\u0026guid=ON\u0026async=1\u0026en=page_view\u0026gtm=45je6a72v879003925za20ozb9235371194zd9235371194xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938469~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026u_w=1280\u0026u_h=1024\u0026url=https%3A%2F%2Flichxuansaigon.com%2F\u0026rcb=13\u0026frm=0\u0026tiba=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026npa=1\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026label=H5fFCPma2sEbENO-n8Iq\u0026hn=www.google.com\u0026ec_mode=a\u0026oidsrc=3\u0026ecsid=2017249300.1791670315\u0026ecsid2=2033502641.1791670315\u0026_tu=ABA\u0026gcl_ctr=1~0~0~0\u0026data=event%3Dgtag.config\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026gcp=2\u0026sscte=1\u0026ct_cookie_present=1\u0026ept=8\u0026ct_cookie_present=false\u0026eoid=CkcKEAjwxKfWBhCG2snu9uSwsCESMwC2uJsI9UkAPoYxU6vhxL0rtHROo0sl-GOe6GaRLFrMQPwfqNQcQ8CJPtmYr3hYS5DBS_D_BwE\u0026crd=CLTesQII8t-xAgit4bECCK_hsQIIobixAgixwbECCLDBsQIIscOxAgiKxbECCMLJsQII1-ixAgi0xrECCIfbsQII08WxAgjrzLECCO3OsQII1c-xAgiK8rECCIvysQII9NqxAgji6rECCOjusQIIkuuxAgjJ47ECCJfUsQIIyduxAgjN5rECCKbdsQIIsN6xAgiA27ECCM3hsQI\u0026cerd=CgyCsL4tueu-LZ3ptzg\u0026fsk=ChAI8MSn1gYQ6-GJlaqKz_8jEiwAXuLv_cQdtNSe7QpkQNF5djWokfncr4eXM-cHcEDYei2zEkwc2gH2BneR4xoCy0o\u0026ipr=y\u0026pscrd=IhMIu6OUhrywlwMVi-vKAB3p1xsKOhtodHRwczovL2xpY2h4dWFuc2FpZ29uLmNvbS9CV0NoRUk4TVNuMWdZUTZxZWk4YVBxcnRPU0FSSXNBSXp1MTduX0g3eWd1ODRsYTRsNUZxUHBKc2lja0dtbFBadmJmcU9jZGZjdDh0RzUtS2NLWjY5UGxLMHoMCAliCAgAEAAYACAA HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: script-src 'none'; object-src 'none'\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":593,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/uploads/2023/03/cropped-icon-32x32.png","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.265Z","timestamp":1791670315265,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/cropped-icon-32x32.png HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F; _ga_J3VKYT0F57=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h89233601; _ga=GA1.1.217880455.1791670315; _ga_HHZ1S5DKHJ=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0; _gcl_au=1.1.339265876.1791670315.2017249300.1791670315.1791670315.2033502641.1791670315.1791670315; _ga_LE8EKF0KRF=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h208911186; _ga_EST7LR0H7K=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h611277062; _ga_PD80MHVZFQ=GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h522295742\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-10%2022%3A11%3A54%7C%7C%7Cep%3Dhttps%3A%2F%2Flichxuansaigon.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Flichxuansaigon.com%2F"},{"name":"_ga_J3VKYT0F57","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h89233601"},{"name":"_ga","value":"GA1.1.217880455.1791670315"},{"name":"_ga_HHZ1S5DKHJ","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h0"},{"name":"_gcl_au","value":"1.1.339265876.1791670315.2017249300.1791670315.1791670315.2033502641.1791670315.1791670315"},{"name":"_ga_LE8EKF0KRF","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h208911186"},{"name":"_ga_EST7LR0H7K","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h611277062"},{"name":"_ga_PD80MHVZFQ","value":"GS2.1.s1791670315$o1$g0$t1791670315$j60$l0$h522295742"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:55 GMT\r\netag: \"2d4-6ab5d34f-203e0a;;;\"\r\nlast-modified: Fri, 25 Sep 2026 01:50:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 724\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:11:55 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":724,"size_decoded":1024,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1568a1978b9098d6df054d5f08f3d67f","sha1":"a430a8a66d4aaf9d8e1f10e6b9c24181a3d61a02","sha256":"85729ba5db745c8573d0616e7ab87970b6520bb36a532c630a92d5e1af6adf61","sha512":"e33b12f7c9724a3aa6665ec0174078b8997c29ab620ca7bfaff6b152ac9645bfcb06343a421ef2e8cfa9ed0f190dd6ec39c378cf72d98e8eeed593db6c9cc2d4","ssdeep":"","tlshash":"0b0194eaa03128e887d7033b7d13109f59b240a0a374b760a582cdb071002a6c3dffdb","first_seen":"2026-10-10T22:14:08.949737Z","last_seen":"2026-10-10T22:14:08.949737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.369Z","timestamp":1791670315369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-origin: https://lichxuansaigon.com\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:67:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:67:0\r\nreport-to: {\"group\":\"ascnsrsgac:67:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:67:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026apvc=1\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za208zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315385\u0026tfd=6210\u0026tids=AW-10972879735\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.393Z","timestamp":1791670315393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026apvc=1\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026tid=AW-10972879735\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026gtm=45je6a72h1v9116824332za208zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315385\u0026tfd=6210\u0026tids=AW-10972879735\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\npragma: no-cache\r\ncontent-type: text/plain\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6a72h1v9235335024za200zd9235335024xeaxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315531\u0026tfd=6356\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.534Z","timestamp":1791670315534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/collect?rcb=15\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=339265876.1791670315\u0026dt=Trang%20ch%E1%BB%A7%20-%20L%E1%BB%8Bch%20Xu%C3%A2n%20S%C3%A0i%20G%C3%B2n\u0026en=page_view\u0026dl=https%3A%2F%2Flichxuansaigon.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=908348068.1791670315\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6a72h1v9235335024za200zd9235335024xeaxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026tft=1791670315531\u0026tfd=6356\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://lichxuansaigon.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":547,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/plugins/gdpr-compliant-recaptcha-for-all-forms/scripts/recaptcha-gdpr-pow.js?ver=6.1.0","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:52.912Z","timestamp":1791670312912,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/plugins/gdpr-compliant-recaptcha-for-all-forms/scripts/recaptcha-gdpr-pow.js?ver=6.1.0 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:53 GMT\r\netag: \"9cd6-6ab63b28-22997b;br\"\r\nlast-modified: Fri, 25 Sep 2026 09:13:12 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 13049\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:53 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40150,"size_decoded":13412,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2f85f5ffa923ae1ea2e15ed44440cc48","sha1":"77d10eef9b63d4610cb0b23b6fe0354b66e37244","sha256":"bb7f5d4331b453ccc1dc605a42aba93272dfc94386cfec9b8ea662d0c30f6e42","sha512":"5642b243766010e1a85f8849313b2b586d60c115f9466f365cd1733ba79268b19f37fd60375ab9a7cd4c1c9a1d998abd8cefa746460608bb98ecfbe9c5b16d60","ssdeep":"768:go7jUw9LR0DCo0aXQcy27pQFBmBukf6bnt6hzfIvTGg0xQWOttLuILtjDjAYVCEB:BBIRqmuFBmf6bnWfskouIl/A2v","tlshash":"1403f8d5a79d032a09a630a15a0fa1cef72c9471679408e1ac5ec57c375083e836ffeb","first_seen":"2026-08-21T16:00:29.649641Z","last_seen":"2026-10-10T22:14:08.953717Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1198,"timings":{"blocked":956,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tintuc4.ninhbinhweb.net/wp-content/uploads/2019/02/icon-zalo2.png","fqdn":"tintuc4.ninhbinhweb.net","domain":"ninhbinhweb.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.280Z","timestamp":1791670314280,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2019/02/icon-zalo2.png HTTP/1.1\r\nHost: tintuc4.ninhbinhweb.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:55.381Z","timestamp":1791670315381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"POST /ccm/form-data/10972879735?gtm=45je6a72h1v9116824332za200zd9116824332xecxf1\u0026gcs=G1--\u0026gcd=13l3l3R2l5l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~117776796~118131810~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121246026~121246034\u0026rcb=7\u0026npa=1\u0026frm=0\u0026pscdl=noapi\u0026auid=339265876.1791670315\u0026ec_mode=a\u0026ecsid2=2033502641.1791670315\u0026em=tv.1~em.9Gw6ZNwbkEaIdk-lnu9mHM_Lwh8OVuoA-CertYgn-FU\u0026ecsid=2017249300.1791670315\u0026emd=tvd.1~i1.fem.ma.r24.n24.lSPAN.s!b64!I2hlYWRlci1jb250YWN0PjpudGgtY2hpbGQoMSk-LnRvb2x0aXAudG9vbHRpcHN0ZXI\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://lichxuansaigon.com/\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-origin: https://lichxuansaigon.com\r\ndate: Sat, 10 Oct 2026 22:11:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:67:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgac:67:0\r\nreport-to: {\"group\":\"ascnsrsgac:67:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:67:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":818,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T21:43:24.883506Z","times_seen":19038374,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/wp-content/themes/flatsome/inc/extensions/flatsome-instant-page/flatsome-instant-page.js?ver=1.2.1","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:53.345Z","timestamp":1791670313345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-instant-page/flatsome-instant-page.js?ver=1.2.1 HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lichxuansaigon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 22:11:54 GMT\r\netag: \"dd2-6ab5d474-226726;br\"\r\nlast-modified: Fri, 25 Sep 2026 01:55:00 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 916\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:11:54 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3538,"size_decoded":1276,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"dbfc65337a326c1c5b7a720becb486cd","sha1":"40f1aa033240d056477cbbc8ea0a02e4efddf66f","sha256":"44d8986e61b7b212a93ba0c3a3a9c880420451d7efa7938d711dd03e655c0969","sha512":"d89b22f803e903feb99bc93d91a882cbb0dc953b4cdf4e912413f31ead3341eb950817b7a1021af88b4c78788fa00cc2550c1522412bee99f2fa2297cce4a4e5","ssdeep":"","tlshash":"56711eaa769061770297673ce18fe304b67a42534006c931bc6d8a54af18ff952a3ecf","first_seen":"2023-03-07T01:32:00Z","last_seen":"2026-10-11T18:38:34.736521Z","times_seen":2127,"resource_available":true,"data":null}},"time_used":947,"timings":{"blocked":709,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lichxuansaigon.com/","date":"2026-10-10T22:11:54.247Z","timestamp":1791670314247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lichxuansaigon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:55:52 GMT\r\nexpires: Tue, 05 Oct 2027 15:55:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454562\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-11T21:40:26.807251Z","times_seen":313606,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":20,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/_/ytembeds/_/js/k=ytembeds.base.en_US.KnLLmnw14PA.2021.O/ck=ytembeds.base.UsaYRPhg50s.L.F4.O/am=AAAAQADG/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywEHDEoA8wKG3t3RH9ikbTeljqAxGw/m=r78Drb","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed","date":"2026-10-10T22:11:54.982Z","timestamp":1791670314982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:11 GMT","end":"Fri, 11 Dec 2026 20:00:10 GMT"},"fingerprint":{"sha1":"81:58:83:A3:C8:EB:81:F3:A5:FE:6C:6B:D8:F7:B3:E8:49:83:32:0F","sha256":"30:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5"}}},"request":{"raw":"GET /s/_/ytembeds/_/js/k=ytembeds.base.en_US.KnLLmnw14PA.2021.O/ck=ytembeds.base.UsaYRPhg50s.L.F4.O/am=AAAAQADG/d=1/exm=base,root/excm=base,root/ed=1/br=1/rs=AGKMywEHDEoA8wKG3t3RH9ikbTeljqAxGw/m=r78Drb HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/i1i3wDJv7Uw?feature=oembed\r\nCookie: __Secure-YNID=22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ; YSC=0SfBoWLFxnE; VISITOR_INFO1_LIVE=bjMeMSNQWEk; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D; __Secure-ROLLOUT_TOKEN=CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"22.YT=d5euv9bPlFBwZMA6qGWkCAIecwxs2CSUWLrXrLIq8kU8lBmLqF2PXCMZh9CENgwLqYz6sCGKFjUd8GQQYlNfF-TzxJhi4N1TRSR7S06ck4o90ZWWLTivXUB68UDt0wgegnN877WUTFZppkQSWOSByQCBvbWnkqF5zmUcb_wxspZ0CUDwCWwo56vqjNHvajfwnUlFrUvtCG4xxt1dWZ5VA63BpMAcCdGeDay8r4kILk39HW-qU2aM_yI0p-KUd4w9l9pFeRmgCOZOE-K4r1ZvZdCAMV02k_YmO--d4P9DPGX3gPsHo0V-1CeVtvBf8gNO-Rkh3kvXtYWn56HuglcKdQ"},{"name":"YSC","value":"0SfBoWLFxnE"},{"name":"VISITOR_INFO1_LIVE","value":"bjMeMSNQWEk"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgFw%3D%3D"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CKeE5dbF_5GungEQ96uRhbywlwMY96uRhbywlwM%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"youtube-main-app-web-scs-key\"\r\nreport-to: {\"group\":\"youtube-main-app-web-scs-key\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key\"}]}\r\ntiming-allow-origin: *youtube.com\r\ncontent-length: 224708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Oct 2026 12:57:37 GMT\r\nexpires: Thu, 07 Oct 2027 12:57:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 07 Oct 2026 03:11:49 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 292457\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":909207,"size_decoded":225622,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"c4172feda873b9cdca35b8c383d34a87","sha1":"c3e3b899ca1f25504c4613de15b0a3e1664bcfe1","sha256":"7616f12bb5a48325bb536386272f2a74f5faa152f6499691a4a6fd5e6b8e459e","sha512":"a0eeb5a491d3cb0dcf95de0cf801043fbe8ae4ad30c2c2a73886f5979c576a83ded076cc79812c01ef5abe8c7a6256f9fed5cdc5376de169ef64e50efcc01f4e","ssdeep":"12288:FmxXVqeZt+mLGYovZ0iHt1m6PI5WaT59eCz2twX37WPz6/wnXhkZTNvfRPr/ieK5:FqqMtSEP+ssqIuTgr2i9Vguw6iaYtv+","tlshash":"74159ef4b35271b5d503fd66b8bb8003b67e5902e004196df0b2ae9c56fca942e77329","first_seen":"2026-10-07T17:33:19.920236Z","last_seen":"2026-10-11T21:39:47.839887Z","times_seen":1121,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lichxuansaigon.com/","fqdn":"lichxuansaigon.com","domain":"lichxuansaigon.com","tld":"com"},"ip":{"addr":"125.253.121.164","port":443,"asn":45538,"as":"ODS Joint Stock Company","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:11:49.214Z","timestamp":1791670309214,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lichxuansaigon.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 25 Sep 2026 04:16:04 GMT","end":"Thu, 24 Dec 2026 04:16:03 GMT"},"fingerprint":{"sha1":"C6:F8:08:08:14:90:56:A2:B9:0F:96:CF:C4:D5:20:E7:44:21:A0:0D","sha256":"42:E2:FC:89:AE:4E:20:AE:AA:21:09:CB:EB:65:F8:BB:9F:70:AD:AE:11:71:BF:AC:B0:EC:DE:1D:B2:B3:9D:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lichxuansaigon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nx-pingback: https://lichxuansaigon.com/xmlrpc.php\r\nlink: \u003chttps://lichxuansaigon.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://lichxuansaigon.com/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://lichxuansaigon.com/\u003e; rel=shortlink\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ntransfer-encoding: chunked\r\ndate: Sat, 10 Oct 2026 22:11:52 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WooCommerce:11.1.2","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO Premium:11.5","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":171279,"size_decoded":35411,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17201), with CRLF, LF line terminators","md5":"57148a95d9c75031c0cf6e377be7e075","sha1":"51b1fa5afba61a0c7e2841ff54bf8276ce31ecf2","sha256":"655888dc259e847ffca5c35547cb3ee92890f53762d6f95dca0d10a5e46f49d1","sha512":"b1632b4bd80bb86837d369745264c45735ac4ba4db3fdf038ed68bf10551046e8780e950da80db7e0cc2cd9fdd6293f31df5e02a0eda780b0e2087b54b344c79","ssdeep":"3072:oxmy0+ADvA8AXqARG35rZ0sp/HrWZfsOx2VJcX/14VTF:t8B/E5rysxHrWNsz","tlshash":"9ff31bb34b6c2439195773e69119fa0db3833422cf958aa0b3fe8588cfc2fd51562789","first_seen":"2026-10-10T22:14:08.957631Z","last_seen":"2026-10-10T22:14:08.957631Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4410,"timings":{"blocked":-1,"dns":639,"connect":241,"send":0,"wait":2024,"receive":1023,"ssl":483},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lichxuansaigon.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}