{"report_id":"e722b792-d29e-4e18-9aec-52ab9ec81c3b","version":6,"status":"done","tags":[],"date":"2026-04-14T13:25:49Z","url":{"schema":"https","addr":"naplau.com","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"final":{"url":{"schema":"https","addr":"naplau.com/","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"title":"NapLau.com - Cổng Nạp Game Lậu Giá Rẻ Uy Tín Tự Động.","dom":{"size":38417,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (900)","md5":"252bed6253d610415f42c2ca615f8b41","sha1":"da5bc83da23a35effedfff7c64283b843e3a259f","sha256":"ecdb50b80f1e0bb1acd44466c01a4f0412bfe28a854fc86c56e6fde6f0279e07","sha512":"5a4b6ee5e83dbc2194b2a2f6012d0dce1acdc9fb93e5b73f37eeb38eeff27fa0ade6415b0a215351e3d8bd3ff6ef6579af33173ffd76ea3b787a43fd0da215bc","ssdeep":"384:1Wvjztsb2HFHAqQF6F/FnFGmaCMeHpvxF5S5jtjFA:1WXtsb2HFHAqQF6F/FnFRM+xF5yVFA","tlshash":"6203625649f3102a14236068abfb76197bb4d003e70bdd047eec5a98dfc6f9588a379c","dom_hash":"domhash77530426069f4e57789f3cbc4821e9b1","first_seen":"2026-04-14T13:25:53.872597Z","last_seen":"2026-04-14T13:25:53.872597Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"naplau.com","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":0,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T13:25:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"naplau.com","ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"domain_registered":"2021-09-01","domain_rank":0,"first_seen":"2021-09-01T12:38:56Z","last_seen":"2026-04-14T13:22:48.390857Z","alert_count":235,"request_count":47,"received_data":4431613,"sent_data":22342,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap:1.11.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":6659,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":1,"received_data":472256,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"naplau.com/","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d74ee66556e53f59f3d866cb2bbc6e7","sha1":"de557474d61f13ed394447e26031a9fa6643c46e","sha256":"cc702941c0473feff24acbc453590885dc1d03b004d3cb13e60943f245d43148","sha512":"ced720d273a301aff449d9aa2d62a1e8fcc9135b291ba163dbf0fb5e75b132962ba21940cda1cb63767678a42c605f756c41ae38f0e8b23e5112e2f926f9abbd","ssdeep":"","tlshash":"0bc02bdc210a1c7041f73740cb3ff600b402331894d07a32490933044e30e13d744c10","size":153,"data":"","first_seen":"2024-12-15T18:56:31.396915Z","last_seen":"2026-04-14T13:25:53.944202Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a64ae990a733d8a56ab5dc807c036ccc","sha1":"c12eb8c9c401c698d36a0d1d8bd40d62be524ee1","sha256":"330c32f931029920c68183ca4ddca083f77c08a7fa7ca025ca2a42350a2065af","sha512":"80673ae8dba8253ee4f31b1f5b4d6c3512979d6002d8f126121417530d3cfa1af30a6176dd1f50ccda366e864fcd8a00de28adcd7f9aaa5280a5782b252311f5","ssdeep":"","tlshash":"4af05c9e2c03a05633fa393dc32ba2663362030334c3c805fa0dc4102fa8ac21c86dce","size":568,"data":"","first_seen":"2025-03-17T04:30:35.060794Z","last_seen":"2026-04-14T13:25:53.944972Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/bootstrap/js/jquery-1.11.2.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9aecea3830b65ecad103ee84bd5fe294","sha1":"47ecdf62eb3cf45ba4867846cb61afa70369d23a","sha256":"a271a3f9e3cae897ced669d6652699e947928ef095e56384c4f9dd04bbb942ec","sha512":"754c25b5fc6a3e5d2027326c6814f229f9131396ea026a407dd16d092da6116bb0ee8971417463ba68268098dedc182b6fa10060ddda6ce063a5eca94be3c152","ssdeep":"1536:0P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLyFoqqhJ7SerN5sVI6xcBvPv7E+nzms9k:f4UddqhJvNPqcBH7MfWWca98Hr4","tlshash":"7593d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","size":95935,"data":"","first_seen":"2023-03-07T01:11:24Z","last_seen":"2026-08-04T15:43:38.319164Z","times_seen":2603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/bootstrap/js/bootstrap.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36874,"data":"","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-08-04T19:30:03.762243Z","times_seen":2249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/plugins/slick/slick.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2cc822267081e60bc3fd1c4f151486e","sha1":"b432aa8910b77fed23a03bb46bd6112eb825e7ab","sha256":"a89d7f490396d41e2467a7a91df4507ed27050ba5813f5e2709f014fba1877c5","sha512":"766ac6c05bdabe09d2ae2c6233a92c1e5ffc9ce3fb9d82929eb0cc3a59da37817e8b377c88822c2e703394c5301ce046f6977d1b3d218250bd5a0a67424905ab","ssdeep":"768:mFdsdVCKcdMLhFn2DpFGecAsGEflCptaPNM:ofcAsGsi","tlshash":"7133930aa210173684e725f52047c64db3ffe77a9a01c1d8a8d687ca25da405dfcfbe9","size":50818,"data":"","first_seen":"2023-11-28T13:21:51Z","last_seen":"2026-07-19T05:36:39.252934Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfe0f0702ada160f065418344ecb17ac","sha1":"f059ce635761b1c0c20a7adeef8c6ba25f64baa0","sha256":"8cfff6955bf768f6a78fddc3bdc66b3475c7de2d2261daf29e94a62a72f66202","sha512":"9c387850e8c7760905c1c87f2a738d13ce62cd11c0a160f4b9b12efec345c4deee64eff7e272686bea4a4438653b32e5abcaa09a5bdf721fb7d52afa5c5f4302","ssdeep":"","tlshash":"f7f09e9a1c43a45633e9253dc3679666375207036482d505ba0d84142fa49951856dce","size":568,"data":"","first_seen":"2025-03-17T04:30:35.063025Z","last_seen":"2026-04-14T13:25:53.945678Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a9cf31961e7398f850b8716df323e25","sha1":"464a01cf58c75ee771683943c76341a1ac1c8b8b","sha256":"7c5e08ee898ea653dccd9accd338df320deebcb7ad4f7cbf1843a2910807d6d1","sha512":"42bc81f1d2e2408ede98b28ff5f46de6fdd18496ab79ab646a79fb6bd71a39bfda9397365c2e3c5d95602b3edb1a6e7c171620b8339e21d04c5199b12b300c10","ssdeep":"","tlshash":"1e51cb4561621499007b303d0baf60142eaa6057a90ccc217e5efa905f26b3db1fbfda","size":2727,"data":"","first_seen":"2025-03-17T04:30:35.064466Z","last_seen":"2026-04-14T13:25:53.946404Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-N4HYHH2PWZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6869497b0585da5f18b81f88e5a8c71","sha1":"81e4f2e379f72a950211c1381d34aad4e4ce760e","sha256":"ffa2548ed2c36b46e29be78569648b9fdadcb7530ba8e9bdcfb7a6a87950f76d","sha512":"95b6afc80267fd3b4b6e5cfffecacd63d8643fbc5fcc936e025b723bcaa52ab1fef2bf62f062eef5ca72670e498975e272bedbd4b080c3b9fbb9959616168c6a","ssdeep":"6144:rBljee+PEqAOUi5/IGP8RkHAiXf9TgJI8EL/0ObqmRX1:WPEPOUiOI855APDF","tlshash":"98a4f9ceb3d674625396f478903f018ba57b29e2b44cc8aaf189ccd42d7465a4227f7c","size":471652,"data":"","first_seen":"2026-04-14T13:25:53.912758Z","last_seen":"2026-04-14T13:25:53.912758Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/js/function90059005.js?v=37","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3256a05de468097e30ff03131e637df","sha1":"5b275c8856b3ede71c65b791146ced8df8e618dc","sha256":"455873035f7c42ce21f75e389cd17912c06585e1091fd572e8c53e93f04ffa48","sha512":"2b3780a5b253f098ee82763d40c05ea6388010393c49290553cd820a56a992bbc89ee687a401128966947b8e98f2e61311d6708a016a411356af1fc4454fa5c3","ssdeep":"","tlshash":"93515acdbaf9102241b7316c4f6fa504347261cb6908ec107e8cab944f1d67de5a7b9d","size":2511,"data":"","first_seen":"2025-03-17T04:30:35.053593Z","last_seen":"2026-04-14T13:25:53.907998Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/js/homePage07790779.js?modified=122","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec5a8fde45b2f1f428fbf4ee44ebe192","sha1":"ac5763faeb4c0cf33fb34294d0fccbd8ff2bc07c","sha256":"4136fdb6d398c533693e8b2dc0b2361bfef27d79f65361f1e6c4b523db796f17","sha512":"95bc29b352d345e063022426d2b1cef5c5e07537fee9017f91f7c803abf45681ae3a7db41fea52e3311aef18e8ed403085733c2fc1449d158a3764eb413ec710","ssdeep":"96:sQ0QFJ5enAjeBRPfnl5oO1nvAsJie9uaZaXe9g2bUjM3aYeMadT2CAAQH:fsnASBFfMO1noa19n9freMadKCAAQH","tlshash":"c6810f56341714ba49bb666fc7db4288ffb800ab80906360bccc455a2f74de565f2fe8","size":4112,"data":"","first_seen":"2025-03-17T04:30:35.05948Z","last_seen":"2026-04-14T13:25:53.908917Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"naplau.com/master-images/header/BAOHANH.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/header/BAOHANH.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:00:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10860\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"2f98fb0b74cf7bac7fc23125b09b94c4","sha1":"9034293d940a305a8a8fbc9ef7fb3467759e4213","sha256":"a6367871837590ecb7d5961838486b101488ce8a4162c59a47c1a2d7a1d7191e","sha512":"cc5e8521aedfc546c4f9e868e28d03d70157928d837a86fc452a00838cfc6aae59d3aea03a619b7a49861461c5a192f479447003c5a9ee3890fada496a08236b","ssdeep":"192:WSBknJQnjHSoRjVblvQGl9Ib8cIUPNsKbiTHxQQ5/x4Z5CFzTX9fpv2JhvM:5anwyQjxlRO88Ns1HFCSFztpv2bk","tlshash":"f2227e47bcebdc51a848ef5826eda24bd2eb0fc95e40d40abcd8c8534d5592dcd6ca82","first_seen":"2025-03-17T04:30:35.018783Z","last_seen":"2026-04-14T13:25:53.87716Z","times_seen":4,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/img/favicon.ico","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:25.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/img/favicon.ico HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123; screenWidth=1280\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:25 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 24 Jun 2023 02:25:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2230\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"7b5f1fd9cf6548793d4de72549a59e9e","sha1":"ef3973a203f49c32a53e616b42af2a58dcc48f7a","sha256":"258a8b8e5d8f8884c9e623f4d28c264b8158d1d1a1af853613c660605c2a7b74","sha512":"d2ca49100e2688a431bf2eaa853df4469b2da5d589265e6fe1eb48f89de0b090df7c0a4c66f948d9a9a0550a29af8f2523dc9a2a2a81dbc154fc9c76003fbb23","ssdeep":"","tlshash":"71412bb7716aa9c78d2340aa4278b73f773705f9e826485d476514a83c0241d4f23a5f","first_seen":"2024-12-15T18:56:31.342533Z","last_seen":"2026-04-14T13:25:53.879356Z","times_seen":8,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/fonts/Roboto-Regular-2.html","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:25.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/custom/fonts/Roboto-Regular-2.html HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/vietnam/custom/css/style8d498d49.css?v=3128\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 02 Sep 2021 00:52:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89596\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89596,"size_decoded":0,"mime_type":"text/html","magic":"Web Open Font Format, TrueType, length 89539, version -25336.0","md5":"d304410c639a87e13ccd8d7dd402121c","sha1":"40e84d033b4ce98aad23a10efc0c84788125dd5d","sha256":"ceb9cd3d7e52d7dd0880e79068b005ec9682e01a1647a09bc868097f55ae8acd","sha512":"f42d9566ac304ef227a57313faf90721386b8b59bc58b844dcabe0cd05127aea2e2e218e71c786ba34d0a1ce297f97f605fcc311adfe067f6ffb96b8a7f63008","ssdeep":"3072:OKwGj7ASQaVYkkbdhQzLHU7L5xUDN1jcQnK8Zrd4:O+vASek6dhQqDUDN1jRZC","tlshash":"cad3e111a311e7a0e3f741fa65050bd473119e99f69ebd98d934c2301e8b12db2ee9f2","first_seen":"2025-03-17T04:30:35.045821Z","last_seen":"2026-04-14T13:25:53.881706Z","times_seen":4,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_ff.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_ff.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:17:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76535\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"037a70695f4923843f01e5f5f94115e8","sha1":"77eed1967158fc88bc2ed43d4858401959b6f613","sha256":"06e60a383e72834538b94d9a68f25cd64cee75f54f12fc008bd86418685bd3af","sha512":"c78aae012bfcc39b376db4465ef93da15e3ca954291968524264dadbb598e41d1b9f04a5b0f0be2a8b98760484c0f29887fe89f47fb22027adb7d31d6b9d9783","ssdeep":"1536:TjNHSv2yHBZpV8CkHO5+dFYTs8HKu9m4VbM1FYK1gAsv1Pd/p:x/yHBzVSQ+dFqs8HvNMzYK1Dsxd/p","tlshash":"a773021c17b0a5225c4bb4c8339b5ef3264351257593bde3eed848bbc5086e40e9a2fb","first_seen":"2025-03-17T04:30:35.029737Z","last_seen":"2026-04-14T13:25:53.885336Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":564,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/header/CODE.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/header/CODE.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Sep 2021 09:14:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3788\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"a54ea7d867137a5642b4fed8bad6b60f","sha1":"34f6740128e9efaf97295c54bbd4f9df751c1b52","sha256":"5aac6260d05af052858efcf73950d5d1e3ab060828858b91f204cde2e53eab21","sha512":"f2ea2bf1e737d9d8375878996d1cbb3f81f1817124195d5f317c50e2d0ee74d6608e514857a57ff6d7a96d40e5561f2f5e3c84bbe8931c4b6414aceef21f23b8","ssdeep":"","tlshash":"af71b51cbe2178149e2ce9492edd606b556b0fe8dad1e54a6dfcce470c010b8c96d1e3","first_seen":"2025-03-17T04:30:35.051118Z","last_seen":"2026-04-14T13:25:53.888109Z","times_seen":4,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdnjs.cloudflare.com/ajax/libs/limonte-sweetalert2/7.4.1/sweetalert2.min.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/limonte-sweetalert2/7.4.1/sweetalert2.min.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/banner/banner_2.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/banner/banner_2.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:10:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1158460\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1158460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 640, 8-bit/color RGB, non-interlaced","md5":"02cda716c6772189d3d4cfef8be2fd3f","sha1":"a65ff2c1cb339dfe4c2c8bb7fac9561559771305","sha256":"0d911a71a928be94deb0ad9c2be96bc2a7f1db75179cb0133e0ad5ce01aa068d","sha512":"42953ed343288ea914e1160c0af462ef18b14a4517dfa7010b1c95149419849b041921a0ecb24acbcefa866dab33b982bf5ec06af0f531a89398833733127c1b","ssdeep":"24576:fpIWOb1pai53hPV406RdeGgsCOzssNmzkg4LA0YHWf:fpcb1Y+00/lSNmzu9YA","tlshash":"242533a7a85b8f49935ebd2d6e460c5b9bc46f4440e3fc670c0c5cd224739fd282daa9","first_seen":"2025-11-30T17:50:22.629396Z","last_seen":"2026-04-14T13:25:53.891409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1092,"receive":1158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_vltk1.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_vltk1.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 265295\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":265295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"70b7f2ade3365488e755c488ba64005f","sha1":"da62668ea77c5fec20b7b4d4f41f8ad9d2d6a508","sha256":"e4da1158de561a52cf410a4ba218eadfc1a25b838e0c81c7606dcf19fc0ca916","sha512":"6dc31cea96fb05736b2a4b09e7419d8b1c0180e1bb222a31af2589ca4958fe6eeaa537fd8c4a90f8d3f882525ba290a341edda13ac1f5b2aa224091382362494","ssdeep":"6144:xBDy9cX4BLOny2xxzUHzvCICRJwRlAAQZof6U8Eo6QlPvLPP:vymkLOykSzvh0AQZove6mHLPP","tlshash":"034423449f36338637eea28b65f4cc156530fb966eb6f083018458b3972b5cc71a4b1b","first_seen":"2025-03-17T04:30:35.031719Z","last_seen":"2026-04-14T13:25:53.894012Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":868,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/apis.google.com/js/platform.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:24.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /apis.google.com/js/platform.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/plugins/slick/slick.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/plugins/slick/slick.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Sep 2021 09:14:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 393\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ba0a074847049332f4bff7d94b01c916","sha1":"f97fc42650f0f9e9687dd6fc134bf906c249a710","sha256":"fd368778b34d31bdde9012e93ebdef0c7a8997336272e5d4bf9241e01a4aa2e1","sha512":"4e7c7bd7bb4e19170fd1576b68c108e4c8714a4b44e91162a8156197ffbbcd366112a3357b02ec68c5e7fb6e4d5937d60c7ff9bc7942779331d6121ee7a34a50","ssdeep":"","tlshash":"b2217b19015291da4027e2095de39e963ddff2120c36028eb7448309cacfbef2eda5d7","first_seen":"2025-01-07T16:59:40.330019Z","last_seen":"2026-06-29T21:10:06.631306Z","times_seen":6,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/img/logo/new1.gif","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/img/logo/new1.gif HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 01 Sep 2021 09:14:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4406\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4406,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 48 x 48","md5":"0f353acb2812e67ac27bf0c571d09132","sha1":"8ac1600739d90ec15d3a328ae5fcf797c2c4225d","sha256":"145ec7175b5450ed0e5039f7ee569e03885f5d5336e04414b1d1ddeefefa11fe","sha512":"85b0bbe1e3ef1d938ef3cd88d726f7579010f92434c62fc793376ad882932ebb4333c0fe97802409af2070b3b64c296268e18381030c633822b6fbb5a7c07fd5","ssdeep":"96:ggXTSCCKQtHupvUnKHN1Si4FyDfWQXz8FptW06gpzXf14v:N1QK7SFQwDt1bU","tlshash":"bd916d045550fc41c54568db12ea9f1f1e63249099d4ecd4dee6ce6b87b92b2c5151c3","first_seen":"2025-03-17T04:30:35.025454Z","last_seen":"2026-04-14T13:25:53.898282Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_mobile_legends.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_mobile_legends.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114641\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 230, 8-bit/color RGBA, non-interlaced","md5":"6b99cd0a271fb51a87035b9155374ee5","sha1":"65031eda837ae2f237d386351005e172f81cabbe","sha256":"3fe0dc0b237df10057a85560ea5978bb7ef121c30d0b691c9c2ab624b8eff0d6","sha512":"06e962ee8db423c1c1c3ba1d1bddd0a7ec1763985afdb22c973062a34dbfdea6e3a9c115833f8404d4f4de23bc631edd4d0d095c46aab4f8327b51405369142c","ssdeep":"3072:XqhBeLK521dZFV2nJvPk/oxOZctGLzr6VUo0iWJ4ErxJ+:6hwLKohV2pUwKziUZxJHP+","tlshash":"9db312e2e3b1b3ec555d5aa55db1d9287f99a32c0d8c04636b660e2b38e13854f78ccc","first_seen":"2025-03-17T04:30:35.016644Z","last_seen":"2026-04-14T13:25:53.900067Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdn.jsdelivr.net/npm/sweetalert2%409.17.2/dist/sweetalert2.all.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:24.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdn.jsdelivr.net/npm/sweetalert2%409.17.2/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:24 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/css/all.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/css/all.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/bootstrap/js/jquery-1.11.2.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/bootstrap/js/jquery-1.11.2.min.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 01 Sep 2021 09:13:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32371\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\ncache-control: max-age=3600, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95935,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32047), with CRLF line terminators","md5":"9aecea3830b65ecad103ee84bd5fe294","sha1":"47ecdf62eb3cf45ba4867846cb61afa70369d23a","sha256":"a271a3f9e3cae897ced669d6652699e947928ef095e56384c4f9dd04bbb942ec","sha512":"754c25b5fc6a3e5d2027326c6814f229f9131396ea026a407dd16d092da6116bb0ee8971417463ba68268098dedc182b6fa10060ddda6ce063a5eca94be3c152","ssdeep":"1536:0P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLyFoqqhJ7SerN5sVI6xcBvPv7E+nzms9k:f4UddqhJvNPqcBH7MfWWca98Hr4","tlshash":"7593d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","first_seen":"2023-03-07T01:11:24Z","last_seen":"2026-08-04T15:43:38.319164Z","times_seen":2603,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@600\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:23.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@600\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Apr 2026 13:25:23 GMT\r\ndate: Tue, 14 Apr 2026 13:25:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8ebb68917ca0801004fb0772a67168fe","sha1":"e3248f9b09e81704bd02d193b69bf895e416c72c","sha256":"1baad3fc052ece11959b1fe3a5cd281514ef20d496cd36780539cd115e674e1a","sha512":"bdd6728afb6a93adace4c6c66564804823ea44f47b604a1c20751b3aa05e667c9a572ba9aa140d3ace1232d9c0e5585aa2112e1c0f753ff193ea7b1d526d7de0","ssdeep":"96:ZOxMM5JOxMMqvFZ8OxMMkOxMMRYOxMMVOxMMJy+aZjzBrWOxMMvubqGIFuV4UOxC:e5uqjrRPaJqxmbqGIwV47tJMV","tlshash":"bac13fa00017545467431de623cfbe34ee0fa2606144c076abfd8b5aeed7da9a37531e","first_seen":"2025-09-17T05:52:29.933309Z","last_seen":"2026-08-04T09:53:57.909087Z","times_seen":1171,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/connect.facebook.net/en_US/fbevents.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:25.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /connect.facebook.net/en_US/fbevents.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/fonts/Roboto-Bold-2.html","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:25.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/custom/fonts/Roboto-Bold-2.html HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/vietnam/custom/css/style8d498d49.css?v=3128\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 02 Sep 2021 00:52:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 90080\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90080,"size_decoded":0,"mime_type":"text/html","magic":"Web Open Font Format, TrueType, length 90051, version -26260.0","md5":"32f01893c6c7a39667487510b3825b7d","sha1":"73ce2fe0535264c679721751054db60ebaf55ef1","sha256":"ec4a882899ccdaf419dae2f4b21fda1fddbfcca561c13d1436207e0f2a4ef478","sha512":"dc7f6a81c6f2df217bd5f7ec33877a1ec696934dd6766176bba637b2f0fe4510709da65f357603a668d1b371611c912bab476c7962e87d7768152b331e26605e","ssdeep":"3072:qN8CPl8qmaRgGF6dU6+T2Xka17X3AKsGNfqSswREu+QmlkpGOj4:68alHmaRgIuU6j53A7GNy5wJqlglM","tlshash":"3cd3f1135142f350d6a9caf949160fc8f9056a88e3dffd50c67486a02cca51e7aff8b5","first_seen":"2025-03-17T04:30:35.011546Z","last_seen":"2026-04-14T13:25:53.903562Z","times_seen":4,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/apis.google.com/js/platform.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /apis.google.com/js/platform.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_caithe.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_caithe.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74636\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0d1b65b3079f4492e80e8ed8d2bb2d75","sha1":"4acbb1d95a69ea64d2e6d48c7aad5400efa3611b","sha256":"cf684a15363b57bc1951fd8fd9d77a9bb5f255f48ca703e894a87b584a1dd2e4","sha512":"27fcd63e76be84003be6f04956eba3842f868217d46ed727b2f581926823f02fbc006ffbf0465ea747956fdaabe18532de046f180b13bfd97c0bdca7dbc868ed","ssdeep":"1536:eGjHpZMrkmng9pNiIJ4Y+eozkxy17jFBxAP5CrV9Qu:JFZMrA9WIBozsy17hoP5CUu","tlshash":"1a7302b1e7b71963949e451790d2ae238924ae933a7f4f54b3f180b29b7d3d188c81d3","first_seen":"2023-05-01T09:26:57Z","last_seen":"2026-06-10T11:28:15.761771Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdnjs.cloudflare.com/ajax/libs/limonte-sweetalert2/7.4.1/sweetalert2.min.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:24.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/limonte-sweetalert2/7.4.1/sweetalert2.min.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T13:25:21.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 08 Jul 2025 09:36:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7718\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:1.11.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.2.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert2","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:1.11.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":38875,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (900)","md5":"62810718b1a19379a99286ba476d14fc","sha1":"29fca32ba3edb7c65beb440e02e239d392649d8e","sha256":"ab1a1bf60e0584b9aa786784ba67b251daa84a2bd44b80c8612019e15c8379fb","sha512":"338d95199939cb3919e98d0c0658cb631d0f9b2d5e18645d782edfc473dcd5e6ffc51932991a2527109eefb5fe55854a2aa2c4a4a3c9885f39c15a84ed069917","ssdeep":"384:BNvjztsl2HFHAqQF6F/FnFWmaCMeMt0NFjS5/HBFy:BNXtsl2HFHAqQF6F/FnFBMkNFjyJFy","tlshash":"0a03615649f3102a14636068abfb76197bb4d003e70add047eec5a98df82f95c8a379c","first_seen":"2025-11-30T17:50:22.636027Z","last_seen":"2026-04-14T13:25:53.906155Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1413,"timings":{"blocked":566,"dns":0,"connect":279,"send":0,"wait":278,"receive":0,"ssl":287},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/js/function90059005.js?v=37","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/custom/js/function90059005.js?v=37 HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 01 Sep 2021 09:13:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 627\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\ncache-control: max-age=3600, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d3256a05de468097e30ff03131e637df","sha1":"5b275c8856b3ede71c65b791146ced8df8e618dc","sha256":"455873035f7c42ce21f75e389cd17912c06585e1091fd572e8c53e93f04ffa48","sha512":"2b3780a5b253f098ee82763d40c05ea6388010393c49290553cd820a56a992bbc89ee687a401128966947b8e98f2e61311d6708a016a411356af1fc4454fa5c3","ssdeep":"","tlshash":"93515acdbaf9102241b7316c4f6fa504347261cb6908ec107e8cab944f1d67de5a7b9d","first_seen":"2025-03-17T04:30:35.053593Z","last_seen":"2026-04-14T13:25:53.907998Z","times_seen":4,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/js/homePage07790779.js?modified=122","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/custom/js/homePage07790779.js?modified=122 HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 01 Sep 2021 09:14:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1192\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\ncache-control: max-age=3600, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4112,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"ec5a8fde45b2f1f428fbf4ee44ebe192","sha1":"ac5763faeb4c0cf33fb34294d0fccbd8ff2bc07c","sha256":"4136fdb6d398c533693e8b2dc0b2361bfef27d79f65361f1e6c4b523db796f17","sha512":"95bc29b352d345e063022426d2b1cef5c5e07537fee9017f91f7c803abf45681ae3a7db41fea52e3311aef18e8ed403085733c2fc1449d158a3764eb413ec710","ssdeep":"96:sQ0QFJ5enAjeBRPfnl5oO1nvAsJie9uaZaXe9g2bUjM3aYeMadT2CAAQH:fsnASBFfMO1noa19n9freMadKCAAQH","tlshash":"c6810f56341714ba49bb666fc7db4288ffb800ab80906360bccc455a2f74de565f2fe8","first_seen":"2025-03-17T04:30:35.05948Z","last_seen":"2026-04-14T13:25:53.908917Z","times_seen":4,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/header/HO-TRO.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/header/HO-TRO.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:02:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11752\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"a4b4b751a63b03eaec1a326d7158e206","sha1":"7217c795cd5b67a96d7f1ede663b2fae1e8048c1","sha256":"12a9ee6a95a05921e29d324d70a777a742211feb0fbc727d048a699cf77bd341","sha512":"a5a8176fd9d1371ac6c66e8e08ea4312275a3d12311d0a87dbf252e0996d503aef56bda52399836045a528e30acbcdce0413ba81b13524878da4716198f13b17","ssdeep":"192:WS7XknJeIHSfXjUbfYVg8MZH9foiJGq26qY2GODSWQAfcfymmD7U60:5ontyPjQwVg8UeioXGODFfhND7o","tlshash":"9a325b0f7951ed01ea083ead5ddca01b0ab70fc41e90d149ade9ca034d589adcdad9cb","first_seen":"2025-03-17T04:30:35.022799Z","last_seen":"2026-04-14T13:25:53.90963Z","times_seen":4,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:23.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /code.jquery.com/jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:23 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":790,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.0/animate.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.0/animate.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_lienquan.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_lienquan.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:18:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 332351\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":332351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"a2e1334f3a6ba16c22ab8623f3a52801","sha1":"c045688f99ded8ec78af93fce4eb3400a39ce68d","sha256":"014b7e5663219eb6a8f2c23a130b5f81c301cd04bb7273405ed767dd9f148d55","sha512":"f57484b34ef758d8ea15dfe257ac57d7963b0b7a3b5a6cc549cd3db86cc3a6e051e50df64ffdfa2a9d1717ffa49e134aef0341095a7a5807029dc718db7347fb","ssdeep":"6144:Eu94PEQtZjvV383L+byFIMHjLDdaQnRXR26SOK+7I/+sXsIHJCc56HG:EC4Pc3NVLDwBJOJktcIwcYHG","tlshash":"84642377528532272e341f978fa256cea0b747d2331de4f7d3c5402aaf4a018da135ab","first_seen":"2025-03-17T04:30:35.035535Z","last_seen":"2026-04-14T13:25:53.911152Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":864,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-N4HYHH2PWZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:36:28 GMT","end":"Mon, 15 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"48:3F:33:2E:77:E0:B0:F1:29:0A:29:69:1F:18:A6:0E:5D:6C:A5:AF","sha256":"1A:9D:0D:16:33:AF:6B:83:72:92:E6:E3:0A:62:1B:43:47:AD:04:3D:13:48:89:58:5F:04:58:10:42:EC:A5:F8"}}},"request":{"raw":"GET /gtag/js?id=G-N4HYHH2PWZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nexpires: Tue, 14 Apr 2026 13:25:22 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156678\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471652,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c6869497b0585da5f18b81f88e5a8c71","sha1":"81e4f2e379f72a950211c1381d34aad4e4ce760e","sha256":"ffa2548ed2c36b46e29be78569648b9fdadcb7530ba8e9bdcfb7a6a87950f76d","sha512":"95b6afc80267fd3b4b6e5cfffecacd63d8643fbc5fcc936e025b723bcaa52ab1fef2bf62f062eef5ca72670e498975e272bedbd4b080c3b9fbb9959616168c6a","ssdeep":"6144:rBljee+PEqAOUi5/IGP8RkHAiXf9TgJI8EL/0ObqmRX1:WPEPOUiOI855APDF","tlshash":"98a4f9ceb3d674625396f478903f018ba57b29e2b44cc8aaf189ccd42d7465a4227f7c","first_seen":"2026-04-14T13:25:53.912758Z","last_seen":"2026-04-14T13:25:53.912758Z","times_seen":1,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":83,"dns":1,"connect":21,"send":0,"wait":40,"receive":62,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/plugins/slick/slick-theme.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/plugins/slick/slick-theme.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Sep 2021 09:14:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 653\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2520,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"3ec71515e37ff87df12827935cf53279","sha1":"d43ea21ba329fed19839fcfbbec7cccbe648315d","sha256":"4550d0b64452525308f84019f792c8569bc82ccd55b43e79db2e87e8f519966b","sha512":"7e72c53fd8c7703f7abd1cd4975110ef3b3a123dbe15341419d5a7c1d63621bb35d787a2e2fb184faa6ac039978d4d8f1b1466a1253a68a5188d94ea16f95f5c","ssdeep":"","tlshash":"7951d124a6a1f1ca4067d4117be306553dcbb5136a7309d9fa2e1368c1ce0da3fdd74a","first_seen":"2025-07-08T09:23:12.032121Z","last_seen":"2026-04-14T13:25:53.914137Z","times_seen":3,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdn.jsdelivr.net/npm/sweetalert2%409.17.2/dist/sweetalert2.all.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdn.jsdelivr.net/npm/sweetalert2%409.17.2/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/css/home4c334c33.css?v=32","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/custom/css/home4c334c33.css?v=32 HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Sep 2021 09:15:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 713\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3514,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bee8740245790d7ff6d813c85ada4f87","sha1":"5772e4d34047e82a126c8df528f8ae8c7f5fde19","sha256":"aaced0793d31d06e64ccced8fdb6fffa589511452e4631f811132ed445e4a399","sha512":"1fdf3eaff1fdae996d4c90f6ebf3c82cdcc1891a6a90e27e8f7c6afd924a957fda323a3661e49fb9b70305359a3b4044b20bc139204c6a227cfe51bbd15b1e16","ssdeep":"","tlshash":"15716b9f1de3000568273469af9a3652321b702f674eee913d8ca248df856e79d7478c","first_seen":"2025-07-08T09:23:12.025264Z","last_seen":"2026-04-14T13:25:53.915834Z","times_seen":3,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/css/all.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:24.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/5.8.2/css/all.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/css/animate.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/custom/css/animate.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Sep 2021 09:15:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4458\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77906,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8eae1a9cfafdc593321d4d59ec4905ea","sha1":"232f5f3f4c3a0a56823e0e933f9c7fec3aa9cbcc","sha256":"e89c81987c5cbc157097eaa6657d6a594abf030cc89bb63f0d2154d8383e9fab","sha512":"d682093cb96420c3c2c9ee1e172a616c86b4e60db47a1fc3790c73ff9300d2ecbe740099e2d5ce0f9e3024019324ece3dec7b6ead865d519c12d8daae9cdccba","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLceS:oNuKuWg9unuLuJu9KIZQMcLceS","tlshash":"28732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-08-04T04:23:16.1796Z","times_seen":2766,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_pubg.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_pubg.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 90254\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 230, 8-bit/color RGB, non-interlaced","md5":"114694d34eea9ec8ea91a6b96298fdef","sha1":"213d63f4d3cfa6d6aa0d2bc33c92a8c7bbe961d5","sha256":"a180ab222475a4f78f1d25ef5905dfc0ba7126cf76480e0d1efe8062884383a9","sha512":"85c092c7afd268eadefcdd468380a6e598785d42780618e4b34ec844535dd15112323ca95eda3ca5f8fffd7fbe3ea683d8911c8d14d8947bb39db3abf1de1dcb","ssdeep":"1536:NFU0EV+F34XxKn2+scSRln7g+nQRKSDi2L3Vbe1adlhJdL8Xaul7qI:bU0EV+F/zsBgEQjhT5iLl2I","tlshash":"bd9302102bb5b934c11067150b4286b5eda7f2e0b381056bff5b8d4feb910bf3da2651","first_seen":"2025-03-17T04:30:35.020689Z","last_seen":"2026-04-14T13:25:53.919061Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_tocchien.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_tocchien.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 295069\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":295069,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"95aac905e571bce8238188dffa4971a8","sha1":"ab762326d5baaa5d3428c3fbf85d04235162a0b6","sha256":"a38b4ac1f38119968e8d449a898ad713eaac343d70740d80b73111e4d6918c50","sha512":"39d69d687eedaf697cb90f791ff98d229c3680f676e9709cd9298206c850e1a409da6d10a155f5c73b7c93f4eafa64434aad8cf8308be8f846b3238b120b246e","ssdeep":"6144:AhzPBJsehwKvciHBpjO/DVUz8nkby3cS+cDwiJEyp0pzA:AhDAehBKxUzqrDwiJzF","tlshash":"935423007f08ecaa9169790f8167c4ff9a9d01f76d8cc8911ef4e84965c747ca651fac","first_seen":"2024-12-15T18:56:31.306196Z","last_seen":"2026-04-14T13:25:53.92047Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1091,"receive":873,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/header/HUONG-DAN.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/header/HUONG-DAN.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 01 Sep 2021 09:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4156\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"35fb6997ebac654763ef379e2a488911","sha1":"6469ba71a27afa15d7d72fac821179d490b4e04d","sha256":"446a37a79d889f80d6492101196143b91690257827530b8ded6126d59f31440e","sha512":"50f1ab2fb544a4669bce6cb2c9c49164d4e3de401630473520f298ab9adf8d5345853da71aeb3f631de167ca4b860badf446178c31224225c005365e8b940949","ssdeep":"96:WSpYuWlknNY69EpEHnoHQNG0JD9X/uKmLpwKGpfsUEaNEW6F/DU:WSSDknlAEHowvH3sU/+F/g","tlshash":"2181c70abd16fe119a0876492afd714bc2f37fd8ed51d0885dee8a53089049dce6ddc2","first_seen":"2025-03-17T04:30:35.018004Z","last_seen":"2026-04-14T13:25:53.921526Z","times_seen":4,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo-roblox.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo-roblox.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68386\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"fbe2e830f2ceba2cffdc0765f0dbd526","sha1":"6fc940df9641fb930d40eaeae36bf68666fcf835","sha256":"b6132caff316122402a70bdbb3551afe68da9a07b799d52b1a49ba14dda4f516","sha512":"29d0d8a5f30c7f12957d10d9453507c6517904dc4663a30a6039c3c5a1511cc1ce3b3c6942d7f85fede8f7a9d0153214d56df25944c0de4f8ca29d08099e1efb","ssdeep":"1536:/FuQG/TXfXEbqoS+4WxDoSdvvnQWioU1SJ8gabaR:dKXPEbex+/34jYJ3AaR","tlshash":"6c6302d989507c109498737528a3b19e8aff73cab30fd8926ff9f95b09a0464c57c6c2","first_seen":"2025-03-17T04:30:35.026184Z","last_seen":"2026-04-14T13:25:53.925325Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":568,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_play2.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_play2.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 64533\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"7766eed99b0545489318d0852ca126a7","sha1":"ccf32aaa9b87c7780cf8c46550fad0ada08e42d8","sha256":"301dc2035868781f16ab4e347cdda1ed6d7cd5743879fb1bc3cb50750708d9b2","sha512":"692bbdeb4b905dd643c66540938c0f4ee2ed7901ad376359118d7c9b939deea9608f3e0ffb93f4abebed0137b7daed0f29232b319905dd10287d5722541ad8e3","ssdeep":"1536:L7n1nEQhgtfplz5ff1XoEgUdCwYUxdF4lTB9Na2R66WY9wWsLHow39:nnz+F7BNNwvN7UBow39","tlshash":"2f53f11898b602149fe0f6a895f8f52fc3a3839103d5b6950cfdedb47c501a6da6b0db","first_seen":"2025-03-17T04:30:35.030521Z","last_seen":"2026-04-14T13:25:53.928036Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":569,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/game/logo_zingspeed.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/game/logo_zingspeed.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:19:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94369\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 230 x 230, 8-bit/color RGB, non-interlaced","md5":"42d931409cb703a5c77903d13302f754","sha1":"a1eeca22a9ba9f882d0eccddc072b0ad0585003c","sha256":"0d5851d8bf5b65f6c6a932c8f4aad0ac5d2f46b0c05beb23df53f9a483f1b6f3","sha512":"a33764cec73e5adb173d040d2fec30f12e8c71c95588e2286601838eb6603d6c71b2ff29a5c9f2b193612de5992755b5217dad67677e1714711c1c142452c44e","ssdeep":"1536:N739rLGpi1J6CDuWk4xj42+NnSBvJA8KhaOMrBcpq71bXufzcxCIzrY6B9H2:Vd1ACiWk4psWvTb5BK6bX9J/Y89H2","tlshash":"f893027c728907bf22819554897f58585d9f468049a0f9f53fff8fe809408869ed3b8e","first_seen":"2025-03-17T04:30:35.052082Z","last_seen":"2026-04-14T13:25:53.930286Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1088,"receive":574,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/plugins/hoverAnimation/hover.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/plugins/hoverAnimation/hover.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Sep 2021 09:14:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6445\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100812,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (598), with CRLF line terminators","md5":"3620a33c65acd1422495dd6267187969","sha1":"9229741ff8cf66953ab2e437c191c5cc36b1db26","sha256":"13d93088489aba83baa9addbecf2ab9248f41c8d88eb2e140464534b6799282d","sha512":"95ca2a987cc64613a27314802ff274c09c5c1cc780efda744e372d7bed59d6f193779165f713f87368cff8886497a03ecd6d4804602267e91f8b470bd8415801","ssdeep":"1536:VVzV4AqfbfAEp80OvLc8hj1CZPM3pCwuTmJGhV0V2:SfbfAEd","tlshash":"6fa37ae69582279551238a05c7cd5fa9cb3dc593a6620cdeb3153d0bc702b9e338bb27","first_seen":"2025-03-17T04:30:35.040613Z","last_seen":"2026-04-14T13:25:53.932528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/bootstrap/js/bootstrap.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 01 Sep 2021 09:13:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9451\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\ncache-control: max-age=3600, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36874,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003), with CRLF line terminators","md5":"fb0e635db142b1b9fce20fe2370ec6cc","sha1":"c5c481ca5a263031d938f6c12abd2fe5fb4b6a83","sha256":"5a4a5359110a773bd154da94c48ffd6a6233a29dfd5a9314555f5ae6c3e47459","sha512":"ddcff973930485feaef0476731caf0d210e4e9be47c6271fe5a9175a885f27509558b1ef1be42e791e0398d7d109bad33c3a912b11653c3290825bc0c7871411","ssdeep":"768:9UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXfl/8Gf3ZTbQ:m/76whqKGvl33ZXQ","tlshash":"9af29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:15:27Z","last_seen":"2026-08-04T19:30:03.762243Z","times_seen":2249,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/code.jquery.com/jquery-migrate-1.2.1.min.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /code.jquery.com/jquery-migrate-1.2.1.min.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/custom/css/style8d498d49.css?v=3128","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/custom/css/style8d498d49.css?v=3128 HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Sep 2021 09:14:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3570\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d78d06b07bb8346054c5068fb9223ca0","sha1":"427a462be5b7ed9f55bf72ff0ecc45c3373bd073","sha256":"87f97529196eb4205a89f7cf7add3021d263ebb5f9f3d45115233dacc631c7d5","sha512":"9685601830d39682a27ac0db8f0946277481211828baf35b33e52cba2d6f9966563bf70620ddd6e0fd48160063cbe383392ff19e37edef4067b32fe7f60b8b61","ssdeep":"384:gFwGNQvUjFgqF5d8e/6KF3fdD8OHN0CWl:gFwGN2UjFgqF5dliKF3NvN0Cc","tlshash":"3f721f43aaf31446b00758996baf77b57b7c9003920edd797f8c72a4cfc65a181a2b4c","first_seen":"2025-03-17T04:30:35.042637Z","last_seen":"2026-04-14T13:25:53.935263Z","times_seen":4,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/plugins/slick/slick.js","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/plugins/slick/slick.js HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 01 Sep 2021 09:13:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10392\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\ncache-control: max-age=3600, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50818,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (28029), with CRLF line terminators","md5":"d2cc822267081e60bc3fd1c4f151486e","sha1":"b432aa8910b77fed23a03bb46bd6112eb825e7ab","sha256":"a89d7f490396d41e2467a7a91df4507ed27050ba5813f5e2709f014fba1877c5","sha512":"766ac6c05bdabe09d2ae2c6233a92c1e5ffc9ce3fb9d82929eb0cc3a59da37817e8b377c88822c2e703394c5301ce046f6977d1b3d218250bd5a0a67424905ab","ssdeep":"768:mFdsdVCKcdMLhFn2DpFGecAsGEflCptaPNM:ofcAsGsi","tlshash":"7133930aa210173684e725f52047c64db3ffe77a9a01c1d8a8d687ca25da405dfcfbe9","first_seen":"2023-11-28T13:21:51Z","last_seen":"2026-07-19T05:36:39.252934Z","times_seen":17,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/header/LOGO-NAPLAU.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/header/LOGO-NAPLAU.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 02:56:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78825\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1044 x 288, 8-bit/color RGBA, non-interlaced","md5":"268194fc36fc7b90d0a67f2c07df7bce","sha1":"4965fe7835513affe9f2d0dc01aa9a6fa88707ab","sha256":"7e0128b9404f516fec1bf5d688fcb3265e37bddeb4d6d49e90777e616855f0e7","sha512":"839d2be187cc8c8289ede31b88b13b317c10541ecf23397d0a520fec429f7f2763b1db693f4016db02ebb9e4861b28c62db2e52438f81592ff01dadd2d590064","ssdeep":"1536:mIrLNq/iffI9ZUVtCHjBj7qVJwqJNaOoqcbwN4ujbSptkagQogC:p1q6ffKUVtCq8qeqiKKkv7","tlshash":"6b73f15cece8593036c90d5e18f59893c796b2d252622129dbc8bd923d6c0edc3a17bf","first_seen":"2024-12-15T18:56:31.303359Z","last_seen":"2026-04-14T13:25:53.939112Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":564,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/master-images/banner/banner_1.png","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /master-images/banner/banner_1.png HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2629000, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 24 Jun 2023 03:09:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 918252\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":918252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 640, 8-bit/color RGB, non-interlaced","md5":"77039afa4bd2fd4ac7ef23e6813e3897","sha1":"47bc57aeeff1830f2413b51ae55eb1e9cf504052","sha256":"4b475757ee11ce33fd48c4dc3e9c4daad4b85da5a678cd9d7742f0a436d23f33","sha512":"883f7a57597e85cfa4986a2b756706d6d53abf78a0c6682228f55a66366b7927143af433faeb6d6779df6a218cd6fa4bc013e4aefb5267ef598a7799465bdc79","ssdeep":"12288:7RyU3w2OBsva8L+7P6nxQa2XGeyawgMqNNRE/rxKtjvZzYAOxuc3pYicm/MKcv7W:/3IlAI6eytANs/liRs3z3mSEJijUS","tlshash":"6d1523eda15f862234334d7bfeb0c5f48fafa1519bd1812b5c961040a8bee6c2c595f8","first_seen":"2025-03-17T04:30:35.019737Z","last_seen":"2026-04-14T13:25:53.940381Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":1410,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.0/animate.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:25.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.0/animate.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nCookie: _ga_N4HYHH2PWZ=GS2.1.s1776173123$o1$g0$t1776173123$j60$l0$h0; _ga=GA1.1.1052178374.1776173123\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Apr 2026 13:25:25 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-04T22:24:43.523658Z","times_seen":145764,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"naplau.com/vietnam/bootstrap/css/bootstrap.min.css","fqdn":"naplau.com","domain":"naplau.com","tld":"com"},"ip":{"addr":"103.75.185.14","port":443,"asn":135905,"as":"VIETNAM POSTS AND TELECOMMUNICATIONS GROUP","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://naplau.com/","date":"2026-04-14T13:25:22.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.naplau.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 23:23:39 GMT","end":"Tue, 30 Jun 2026 23:23:38 GMT"},"fingerprint":{"sha1":"12:BA:B1:CB:B5:78:A1:66:FC:2F:81:A0:A4:24:94:77:08:C2:37:E0","sha256":"9D:08:DF:DC:75:6E:BE:15:39:20:C7:7C:B8:07:87:2A:7B:8D:A8:BD:22:7D:6F:8B:6B:2D:71:D1:B8:28:F3:2D"}}},"request":{"raw":"GET /vietnam/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: naplau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://naplau.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600, public\r\nexpires: Tue, 21 Apr 2026 13:25:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 01 Sep 2021 09:14:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18252\r\ndate: Tue, 14 Apr 2026 13:25:22 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121283,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"7ab0d686182b924e9f46d526afd8bdc8","sha1":"d2feab7f573ecb4f21ac9cc3b0cf098a30b4fdb7","sha256":"ce02dd4a7d1cc5beca0030508f62130ffd77c1b488b94b831cf26bd1841c86e0","sha512":"d6e740fabaed1a85512476dd961a9e49277d1c9407a3014f2731e7b3200e38e41254f08169d0608a4344217589990341fb2cc8b07a37454db3e6eb84f4566ddc","ssdeep":"768:RyyGxw/jc/QWlJxtQBIuiHlqemzI4X8OAduFKAv2ctg2B5JJP7ecQVvH1Fx:kw/o1CIuiHlqemN8lDANDPbU","tlshash":"b4c3d7a0f21031ea7333c55a75d0ed872219a153e6664eb7f22f25d88f845cb16b3f1a","first_seen":"2025-03-17T04:30:35.034791Z","last_seen":"2026-04-14T13:25:53.942313Z","times_seen":4,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"naplau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}