{"report_id":"eaea1855-2bc8-4984-81fd-bfc1fa329b46","version":0,"status":"done","tags":[],"date":"2026-09-29T05:04:01Z","url":{"schema":"http","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"title":"VNPAY - Công ty Cổ phần Giải pháp Thanh toán Việt Nam","dom":{"size":253126,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64424)","md5":"810230ba21babad4dc842b2cd06c13d1","sha1":"86f718a83fee1bc969e951c6a955ff65b847b126","sha256":"013390467dbc57f536d045c065921b17b7b86f62f27d50752fc916273c14ea53","sha512":"0f237364f0695b916696b1b4dfb9c8f4ef8b7d1986e1d6f140bd33233a2475dcca74c8c4981b4cb01215d3e1f33fa30343f4e57bd0cb075f6cedd713fffdfa7a","ssdeep":"1536:JGeFDzYvkWY89xEfzv0iqB59mBx+oRRK+h/1oRRLAPOcBxhlISm0hFVbvh2KQEtz:G9xEfzv0iqnLauAPOcBTlI2hzhTRMNDC","tlshash":"42346412914a7239399b936b7861b18f609bf41bfaf8ce35f3297c116747cb840299d3","dom_hash":"domhashad9783b8950cb5a046b1279ade9a4b7b","first_seen":"2026-09-29T05:04:32.917281Z","last_seen":"2026-09-29T05:04:32.917281Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T05:04:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-27T22:46:09.539328Z","alert_count":0,"request_count":3,"received_data":1566345,"sent_data":1476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stc609765200636.cloud.edgevnpay.vn","ip":{"addr":"103.161.39.66","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-29T00:45:14.937978Z","last_seen":"2026-09-29T00:45:14.937978Z","alert_count":0,"request_count":3,"received_data":983496,"sent_data":1826,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hotrovnpay.com","ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":93,"request_count":31,"received_data":2038854,"sent_data":15393,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]},{"fqdn":"1889324617.cloud.edgevnpay.vn","ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2022-06-11T18:59:16Z","last_seen":"2023-07-07T12:55:22Z","alert_count":0,"request_count":17,"received_data":3210073,"sent_data":9416,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/5996-d05a577fe27fa25a.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a48cf3f25c64942fd43e65b7a4b57151","sha1":"a41aae42d0a38c046578c7f7414e1079775c00e3","sha256":"8a8a77024d40c890fad260e8afa8b390c92936a5c583d6e3678cedc39c7463ad","sha512":"b25ae3885c078a5e10c9a7040d51f7e626c34814ed17f6bcf0e38b3ac76ff17c6ab8237130bd8b0db518cdbfdb4be396fc78c32d2034ccc89de4e9f72b139426","ssdeep":"384:del766KMb065D8IUjGaWL8E72q9zEsZvR83vaiQX+T:dC76ha065D8IUVWL80NE4i/ZQG","tlshash":"02a295a8f0c6b42155cb21e600af043df33bbd59771d8820a57695cc3d7ea89e273a9d","size":23083,"data":"","first_seen":"2026-09-29T00:45:26.812719Z","last_seen":"2026-09-29T05:07:11.966907Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/20847.bb79ff0c238a6796.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb6690e9d253b2ffe2d51dd3981b89dc","sha1":"2e6d448803c866c7aa49601779fbe5a109167ec2","sha256":"2006f92ba8cdbc37b6fb49658db34e5955dd677af004feb02efbf9a6cc7724e3","sha512":"ae9bbca2004174e47884622a0d9a9ce22117fe2b1c047297dd23b767a30c3f24f217b9e2e16494681f0f3c2f406293f264df730bdd907f5c4f79c32f4474dae0","ssdeep":"768:SSZreEXtTlhfczwc4KcbSlGc/ntHrYQom/0B7V+sD8:SYHXtTlh8wc4KcbSlGc/ntHrYQom8B7I","tlshash":"74d23c98768060d401efc2c542ff8d05e2354b94e4aa98e4f274c5ee37f1bcd466ab5b","size":29676,"data":"","first_seen":"2026-09-29T00:45:26.875Z","last_seen":"2026-09-29T05:07:11.938205Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/analytics.tiktok.com/i18n/pixel/events.js?sdkid=CLA79NBC77U9VFIVNJ20\u0026lib=ttq","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b30738a1ad660b88204faac72c8c4c42","sha1":"f4c6cca937da97f7eacfb5b2d41a8dea8eb7633c","sha256":"2bbbb65a1eb6cc22d0b9469446c8c11c56d2f53011b9dfe6a8e96407de9db197","sha512":"8144a28690c462f47955d4bcc13f0ff540efeba7b23627a358ebd72ff6ce13afc09fbb37186488aabd60c84e59b0706f4460e7f6a653291fe102ad0fa9d90084","ssdeep":"192:JIe+vnt3fveYxlYO+A1UxeGLSFQOdf4w6DeF7NYfgC:2l//72fgC","tlshash":"e9f1d1bf5508649fd0e48e43d31a5e02df7d1cbfd100f2c8a75bc648727f52682aaa4a","size":7838,"data":"","first_seen":"2026-09-29T00:45:26.848325Z","last_seen":"2026-09-29T05:07:11.960646Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/41664-200d5d631cd6c206.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba97f0c8b6b6eac3e9d42aa0d49a622","sha1":"5a7c13b37bd519a3952147f148685df09c52fcd9","sha256":"46b48636bdc2ad542595ad85a55c4ba39320e0d5461f0064ee770bea32320c18","sha512":"9d163b19034530d8de93243c88d0483d5e7d5f0dc432c302254c0b6a3173077d9443fafc42a2267d6c6fa386152c735d3616ecd05aa3f023942109dbcf9decb6","ssdeep":"96:qu9GCcOwDkqaOZjacc3FwKHCApzBqFhFYAtNBqCAvBqS0cM4O9GCCVarISPcZNuE:qHlO+kgZjacc3Fe8zBS7YMNBnSBKcM21","tlshash":"85b1b8633092f4a2d2bb8155c43b4419327a2d3e201fb164a7f6cdf957b418da693f2b","size":5197,"data":"","first_seen":"2026-09-29T00:45:26.835446Z","last_seen":"2026-10-10T11:16:43.999146Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/93472.13a54a03af9b7872.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"62e9ee3085738140948d669fc8daf951","sha1":"a45bd88c490003dced99b0db3facc10eee5ed47d","sha256":"4a847f3e627555974cf28666aeff6026d463ca005ec1f1d88193832d2e5fe4b2","sha512":"f1213a5a2f8ece06870af3e51cdae41521d921c96ca587151b2f0c36b5d8202dc537f50c37584ac148639eb92945b5fd286671345d167a6cbcf423cabb95a9bb","ssdeep":"","tlshash":"882102cbf146bc6a661354e000af040ee2662cc489ada864b563b9600d3bc1f64bbfcc","size":1192,"data":"","first_seen":"2026-09-29T00:45:26.890082Z","last_seen":"2026-09-29T05:07:11.957271Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/43316.acc595190fd4d094.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a960c8440a5b0bbfea03837e980058d","sha1":"69b08461e9c55de02aa1bde8208631422963b91b","sha256":"c6d04096971e9d28fa81befbde3a451e2f685e8fb3faa979dfd2745eef3ae801","sha512":"425f6d75b5dfce363746fa217fb40737d34db233e6d17db42fd82e698aa74a39026fd26eed62021cd5284b5241aa1ce469b28830c305ace936d945c5498c3773","ssdeep":"","tlshash":"16f0e1482a41fdb16bde60cf84bfc35a62f414e13846d04694e35c446030f6445e1f1f","size":574,"data":"","first_seen":"2026-09-29T00:45:26.806098Z","last_seen":"2026-09-29T05:07:11.945886Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-57J2NCJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13ea86f81d36560792489ad866f197dc","sha1":"dc933db927900045a8f886b1eaaebc7a87539f1d","sha256":"87ebedc94a97eb85a29149de7a9ad21068fc22c168b2ea26f0819e33f166c3e9","sha512":"631883253b2d0a9d3f5166ebbfb31634d5219deb4a72abd034063396080ba49b4e6e3dd60da803c381342780e2898cb8ec42dab3ce86622b0d06f43aa0d2f86d","ssdeep":"6144:ZEmtSwE+cLzAGISjYLBSZRvGciju12oejbqEG234vfGNOaeE+cUXU:ZWp43SXgju1pxGNQED","tlshash":"8cb429ce73c6746293a2f578903f018ba57b29a2b84cc895f289dce42d3465a5173f7c","size":508046,"data":"","first_seen":"2026-09-29T05:04:33.008306Z","last_seen":"2026-09-29T05:04:33.008306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-10862839494\u0026cx=c\u0026gtm=4e69p1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90ff22e9ec269024ed69c107a62e0354","sha1":"ebffb4bb544539cac19c1f15e78d8c112db085b5","sha256":"adea6a400a224fe7f7219bbfb5a057fab5019d471c519d88b5c44fc8f0867631","sha512":"27a9c79dd2f4d045665ab80b97f048f06444e704e557eec25d707cc0706a2cf49867067eed8b95c2f6b7147700688401456e32aa07b3e8fc3480bbccacb60209","ssdeep":"6144:8EmtSwEkcLzLGISjYLBSZRvGciju12oejbqEG234vfGgIaeQ/IU:8WTX3SXgju1pxGgGQD","tlshash":"13b4f7cd73ca74229396f578903f01cba57b29a2b44cc896b289dce42d3469a5173f7c","size":493835,"data":"","first_seen":"2026-09-29T05:04:33.001329Z","last_seen":"2026-09-29T05:04:33.001329Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/83062-25341129f1a0002f.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c8658d134a6432f4eb42770a1eda181","sha1":"629ab673b51666e96999fe5fb6cd649c94b720f5","sha256":"667cedd8e74dae974d8ae9f35d05c4ef067fe196f621e6f6b02ef5501343fd7b","sha512":"94091ae4526d760cdfacf654119a328144ecf63199e47b2c51c66090ab62725d78b2db466400ec95e976993dc8de875d28e45e89b3bc64fb818129b7fa34f4df","ssdeep":"1536:1LYrJFBl9w2hmsSI4Gr7om85n+o1RzOItTkcdOhdQKBbc0XpwoR//Zc4IPUvSIKh:8FBlWQmsSIr7oco/vtTkGOhdDbTpnSs6","tlshash":"e0331ad8b1c0b02692af022680af451d73369644a79adc40f677e4cd3db8d8e5367fad","size":51633,"data":"","first_seen":"2026-09-29T00:45:26.85997Z","last_seen":"2026-09-29T05:07:11.960027Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/96752-6b0879aca1b76cde.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a57b128d68c823a5176f86a1befdcce6","sha1":"92b88a2c4fc15f53603d70694617888573e4d278","sha256":"d50e49dc8d5ff90ecf72e4fe34bbe6c8c640206fb7a1af5e4f33e0f7417e6d39","sha512":"fe448cdc6701117a415ded7c8c5309a9ae789dd8497f27e41c63cf8c416de12ec8d204da331f100f9add0f20d4b04f5a9cbedb11accce49d08293d13bb18ab26","ssdeep":"192:1KyKiPN9WzpBS3NIyKC1rfBStILL/ZdJJUqXooFmDBihDumanTyMZcV:1KyKiPN9WzpBkKiB/ZdzXo1IV","tlshash":"73f1d78cfad4b45001a750c565ef1d2b62bfce807a198c687334a4ee2377b9c50a3b8d","size":7733,"data":"","first_seen":"2026-09-29T00:45:26.862887Z","last_seen":"2026-09-29T05:07:11.955763Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/68508-f60e008b1432a43d.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae9f644759cf93f06ba6367571b5a661","sha1":"a451e4b1abecab342b3f79f9a5031ca643bca944","sha256":"f3ac19b297f7371299fc35e8fe91b8dc9faa87b58457b34510011ac90355b4e4","sha512":"4fbb094cf4d5b32cf11f69f08bb718c71de59aa5b5ad26b9bfa3d4f8ce26c1d28f134316346a526d869ad43e304b70022b6d662e10d9644451678e67d27f035a","ssdeep":"192:HxK8pXl4J9CIJXKl54p8hzWynX5pMsBmjpWL5E6BZptzppppppAEYi0ppio33UKq:Hkk6CIElcwBmQvZ0SUaL3UaP","tlshash":"da920950b34128fa516bc3cf62f6ec48dd311930d4a98fe8f174a0ae75a015ddab6b17","size":19757,"data":"","first_seen":"2026-09-29T00:45:26.865065Z","last_seen":"2026-09-29T05:07:11.942192Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/8667.4a133dc7e69a514e.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"25eb09bbea208f52a91811d13716d9c1","sha1":"bad88a9673662e7516b3da2e16c16334a35b0deb","sha256":"47a69f1490725efe4b35f0d8e41e8c4a63627aef8b092f0c6f6fe1351b2857ac","sha512":"cd01e0e9d63ae871230d2428f0e15d9dc66edc3f89c219a8c56259206cbfc244e7c1cb5609fe636bd1ef41cb14257bf9bdfe40d78bddf1ab82ce6d3960d3371b","ssdeep":"96:38dUN3FKJQyHJGMtAKgp0MqeqTPcPVWD/p0oLYxLxFiqElnqVGvAvyYI/vvupxkP:AgVKrHVtsp0XYtWjp0xNiJlQtsvexkp9","tlshash":"f8e1c761fa00bcd952eb82ca10bf980df1357909c9799a91f5f0dc1c16f468db922ba6","size":7280,"data":"","first_seen":"2026-09-29T00:45:26.833585Z","last_seen":"2026-09-29T05:07:11.945072Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/75713.2da90170eb515fd5.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0da0e64c38682b18c0ba8ed46c2cad42","sha1":"0381c35dc0aa49b799169fdbac28af40d009283a","sha256":"ddf6b6d0159b38d0027d1eb88159c3fd65fa4551f18d9a40439fe773bdd6e85b","sha512":"86b440be3b57b5353aed5a6cf607c662893fd3104efb5cf4676d489161199ccce9d419e6fe33f20146402fa2d6c9c691473e17996bf55786077857f082199848","ssdeep":"192:LskkeBapJPOc4gbqnemjYA0BkNQynolcovXYYQxkfWp36pv3a78PQfX8zQ:LsLeyJW7nkuQynnYrf63eQV","tlshash":"45522d65b2507c54246702cac2ef192ce03ee716ea3f4c44b3b0e8dd75e2a8d562fb55","size":13759,"data":"","first_seen":"2026-09-29T00:45:26.876644Z","last_seen":"2026-09-29T05:07:11.971173Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/webpack-beb9359d1c164a9c.js?v=30","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1176da1dd705291b98fd0fe43c7e136b","sha1":"e58defd6ee1172261f6862d14685f311b53eef8c","sha256":"ca5ab67aeb36a4d607550b6f7c8273ab6857669579dc08afffc4fe89bec8f4a5","sha512":"16c9d6a2eba7925c68466d214c13f8d171826847cdcdd28a40231081be81a2193ee639664f6b471aa637254b997357f65be9e51f628674530847f447a8c53560","ssdeep":"768:7MrxGpy/S/K1bD5gcg4JJfhPlK6myeJKMu1tNkc5JWOv5JbbbutMxVG19Njq6:wqUF8OHPFJKu1tNk+WOvD3ytOa5L","tlshash":"74235b9db71ce8d93d7109c6bc4624f46519b0123d460cd1a0eee3b60865ebce636fe6","size":47175,"data":"","first_seen":"2026-09-29T00:45:26.866833Z","last_seen":"2026-09-29T05:07:11.973507Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/28906.8eee756de00f1d5d.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"8200e66f6bf0a739cd92459cbbd9f83b","sha1":"a31ac5e32a32b4ed8148a0563a2170ebbcc407f7","sha256":"9333227d1ceabe05b94fb14c69d1d91a35d0065824a534d4daaeceff9bf91aaa","sha512":"8d2d8c7f135bb5adc8b72cc576779771668aaf2e70c9a880f67fa89795f37824c2b9c9dba8e8cc18ec0ec0f442007c0efe3c3ebb1f48dca3887377dd158c3961","ssdeep":"","tlshash":"6d71421fe2e2f5cd96986dfc006f4825720e291b65409e2de1b29814f070f9873a1ebf","size":3808,"data":"","first_seen":"2026-09-29T00:45:26.871577Z","last_seen":"2026-09-29T05:07:11.944428Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc7fb121b0f78fd605c21db7c4518660","sha1":"cea475b637970265f3dda2f1f1eece1f5fb86d12","sha256":"779dc168b54736973533bcd72fdcb081eab6611cd5e94ae4c65fe6eb917c7592","sha512":"8622173f5811a544a3e8e8da4e72fc6b44a0c042dce366dd365cd4e5f9b77db3b9470b40c0a35bdf74d8df4eb80c6ee9947f09df298905bf9c1ade50e785ca04","ssdeep":"","tlshash":"edf0ac9fb592bd3a22e76756385b3c21207702e6a410b086b421457c627440aa706fa7","size":566,"data":"","first_seen":"2026-09-29T00:45:26.898946Z","last_seen":"2026-09-29T05:07:11.979234Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"990877c16992992b70ba52245699aeac","sha1":"98c939ce2bb73b378349e0d20aecc85655df5f7d","sha256":"9ec639ad9ca97f319b1e53cb55a1e432b990cb3deb650c22ce3509ae10edf4ee","sha512":"182a95bebb3b7277f604febab24d7e8ff04527d6fd98bd78de983a0dbc98f2b840e9cfd90de1fb95b1dc3a5b4ee2fdda22f0f8fa52449e7523485e649a04897a","ssdeep":"","tlshash":"82319b1924fb15188127bd69b3affe0c7228602324d4cc09724ce2750f2ad7dd5d8a9f","size":1470,"data":"","first_seen":"2026-09-29T00:45:26.900666Z","last_seen":"2026-09-29T05:07:11.980034Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/pages/_app-a072acccd1a78dcb.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf25e6b1d12df966eed851121edcf380","sha1":"1a6f96d1e5e387fe64a3b74fe37561abb79ae719","sha256":"79b7a0fd6c202addf61dc09a14ed10db82539fb34b197dc80024950b85bd40b3","sha512":"46c8657c912d82671918992c722abfb6e8b770233a7a2152b5eda22e2ab785f48a940032d4726058cf9b2358aa945dc3182b86b4db072a3b17dc183a4cc615bc","ssdeep":"6144:xKJJrZMSsN6sHwWVzIK9WoPnvRkyH+b7H0COdtCpJcXX7wmq2Jb5EH:xEJrZYIunJWOdfJbo","tlshash":"aaa44bc972d1b06243e741f9407f510bf33a6959280d8858f275e8e678f5a8e92b3f39","size":466136,"data":"","first_seen":"2026-09-29T00:45:26.799612Z","last_seen":"2026-09-29T05:07:11.967872Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"200f2a64dcefa8e56b8e5dddc46d6e8e","sha1":"e4ea2aa177cfab21c84cf92803ff2a1ecdab1430","sha256":"7e957156a921f529dc5fcae490bfc3d6ae24917a7680730926fb5692333f1ecd","sha512":"24212399d6c9217a3d04b1081d991aeb935749b7f7f59ef932b02e7dadb2846219905f6fe6079b569ec617c34ddcd15c73f36112249e56d5b38f7b26f89715b2","ssdeep":"","tlshash":"f4e028db74110c7174ed09f533b1a118b143120868091d22cffdc92438285c74c134cc","size":342,"data":"","first_seen":"2025-07-28T03:31:52.94701Z","last_seen":"2026-09-29T05:07:11.983633Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/97956.efb98a5e6099e5f4.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7403e004900dc556af753d107751d223","sha1":"9bf377004d1f1406248772e0f6617e00e258581f","sha256":"47e6d5aa9d28f601e771fe713426b184a829c356abed23276acd691bdbc0127b","sha512":"80a98d671c1091b173e3e2aac2797eb4c0002bd925ded736e8294e84898c9b2052c578fded34c2588a1f484d1928df1c1308735819db05c0a52e6b971b857ee4","ssdeep":"384:UVpmYL8zMCod1UszAHe7djl+pmYCX2noWh3VUKdAaIhaPKGF:U97fUsE+7dB6h3VU01H","tlshash":"c562b60ca6c5ba69e97d4948c16fd81ce31f374c9a46cc30b679ac570dc8a887352bf9","size":15204,"data":"","first_seen":"2026-09-29T00:45:26.879348Z","last_seen":"2026-09-29T05:07:11.949172Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KYWYVLX5B8\u0026cx=c\u0026gtm=4e69p1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cec207ace17f5c22680af6854c999987","sha1":"7afe01eb616acfbf8d3784848678446b12d212f5","sha256":"b3ba58f196dea0c5aa6ee057c7d5cdcc68585119ba5b1140126f687bf2f36747","sha512":"c62f2114ddbc3782b01a9284a2a7cbe75ae42856ed792e54b866b2d0903a271eb24417ab36916c7d200de73cbb9a17b35828e79fb5c3a6f828d12d18c31e8235","ssdeep":"6144:ytkEmtSwEhjTDclzLGISjYLBSZRvGciju12oejbqEG234vxexeaewud/CgU:DWhjTIV3SXgju1pLexAwuQ","tlshash":"b8c408ce73c674229396f578903f01cb697b29a2b45cc89af289dce02d3455a5263f7c","size":562241,"data":"","first_seen":"2026-09-29T05:04:32.935016Z","last_seen":"2026-09-29T05:04:32.935016Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/77602-19f2d10d589f76d8.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"577f03f23ebc1089e746f79de27e93ed","sha1":"f79b04b856ddf9109e26701ddcf4cf54bd93c5dd","sha256":"4d9654846ca3f867b0eeefa98097b329cfb0cae347e81f941e6df6d4247351c1","sha512":"891c86c07efc59a0bc65561e7fa2f3e9aa6a759e49c82ece69258a46b303386bc4c45c7b6947ac7224af118c3c551def64b83caac586bc2d276e3b4d0b0996ea","ssdeep":"768:H7eCbpj5mj9XuEvjSM1BULFVwTdbwWzKco:H7Xbpj5YUEv+MULFVwTxwIo","tlshash":"7fe2f98bf9e5346a9ad6111591ef802fe3fb18083b0dc05871a298dd3a6d41e635dff8","size":33913,"data":"","first_seen":"2026-09-29T00:45:26.82998Z","last_seen":"2026-09-29T05:07:11.974345Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/chat_widget.js?v=30","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ce8aeb70d2f3cfa86c8ebb302d27795","sha1":"59526d5e94d7eabba59dc9f9ce3ed63c1c3cf416","sha256":"fb0a442e724b36dafb0d39cb177771a48aa974af0c4cebcac48b40ad071f0e1d","sha512":"f26e091dec820b5074d928f2ceff530a0aa0cbe587132fb4eae4c779ec66f06941c4ed00fa4d35448c6fd1da7515232275cbec23aa3480f92f1a0250eb032509","ssdeep":"384:43EN1RhOOasM0oWlUsYqF3hnH6Pp0UGqL57zU4UQ6GUYyiWZ:43ENHhOOasM0og6qB5dvqV7L7WZ","tlshash":"25a2932979f3043645ab60aeb7eba2053e3181177001de54be4cd7946f92db898b3bd8","size":22753,"data":"","first_seen":"2026-09-29T00:45:26.854131Z","last_seen":"2026-09-29T05:07:11.940152Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/75363.f07cb37cb63a2a22.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4af16ab889f99c70818a1164d427109","sha1":"cacf75ff33e72ff178b0cafd7314f1abd2180b94","sha256":"6798d4d54975bcaeff5296aee01f80be6fd35822fb946b172740d507c8a8a2d4","sha512":"52c86b9d0c3a4a2ec193782f49f678f43fc283ffd87e9bd958c0910c3f89bbcf9bae304aec388ef2d249b6cdc8877ef50895fecae435de1bfb2ffb00bee72da7","ssdeep":"192:usqCnSWHYL3ZmZzpUCWHoYpRDavPCUFRpoHWVCivLDDfJy9ypkzA3xnTaDwpUx:u8n9Ubb2dHSzAe","tlshash":"631209b1f255b27a4b6a94dd403f1924706b1b1ca444ecd9f2b1c8ba64c53cd44b2fdb","size":9033,"data":"","first_seen":"2026-09-29T00:45:26.857821Z","last_seen":"2026-09-29T05:07:11.958245Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fbf896d3b50381087fb7236626ba2ab","sha1":"43c69f9aef6d2b0296e4a77d6a5d361007e2d22f","sha256":"be8a5a23a79f8861ae6fb2115c6605a8e5f211f2642bd4ce67da0447216e67aa","sha512":"1becdbfab4d047818d0a801c6ca70730dcbb90a2c17261d030fb2d6d260b1ae9e905b701ebba6a62baced83db9e05b882e5755f80acddd8aee2aecefcd7c0837","ssdeep":"","tlshash":"80111c6828e7680cd20e9afe72af878d24b6b4125e80cd908149c0a8a529e880091bbc","size":887,"data":"","first_seen":"2025-07-28T03:31:52.949016Z","last_seen":"2026-09-29T05:07:11.982684Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/framework-75746eeb80cbf23f.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"56aec5cd281da6b6f469526c9ae940fb","sha1":"b4085e66577f3507c870ce52b9342c00387f0e15","sha256":"7288db385c0883c5e8aedb2f2ba6d864315e26698e3dca6ed6675a3890d65163","sha512":"186f55ece205b20d0cedeffa4ccb43bcf7edd6633764de93b302f23e2fcde6fae5f29e1c008a1534501bab7af2b830edf35476349bf57a25ac2a2246e32f15a2","ssdeep":"1536:5ovuNA6wMuNjY+o3MN6qlk1Suqc712//IQ4:iPUA6qm1SGgXj4","tlshash":"e7d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","size":141076,"data":"","first_seen":"2023-05-13T08:06:15Z","last_seen":"2026-10-10T11:16:43.974083Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/kgUKs5J3yEx7-DIEk5ZDW/_buildManifest.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"877eb09303d91cfa7f9a545fe26b28ae","sha1":"561bb9e429dd8d97454ff436e3e1a57f2a1fbbaa","sha256":"84186c140ddc2f8a781a3bb9ad6c8c8230cfc263da85ff64c7e224d150700869","sha512":"595cbea5d475dec0028dfa93061363abd088612ad74c5e7c5e04287eeb149efe3cf57b4a59fe137ffd4061de7f776c5831a20a103b81657d77c037f1cec174e3","ssdeep":"48:0m7+oUVF+CR2rJsWOk9r/mSwNqNJODcBnVmgnsNM6J6h26jouVOAFeXmwzBoZy+t:0miz72NsMbHnogR6413cXziZcdvk7","tlshash":"fea1cc834401f5868ef1cdadb41f17728a82ae33897082cce68dce6e4d5e96a5f5d433","size":4636,"data":"","first_seen":"2026-09-29T00:45:26.801275Z","last_seen":"2026-09-29T05:07:11.953188Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"46e1f890eabe8768e15927b6e0a8452b","sha1":"45eda60b66b43a8e1ab359c2a14af0c5df971d9f","sha256":"cedf60d7b47f889254419c2e741eefb1341dbc0b5c1587fbaa97b24c3a5c9fbb","sha512":"7993eb1663fcc3f28831b9960c8fcc81b7dfa5e2785e75ffa0241ae7c818d846a0046f1cb619ff6062613d7e0653b412e90ad5858c1d0dda26107aea17f92e97","ssdeep":"","tlshash":"2be0ab1a2c1eb4222bf41aa8f377991934d52302368226a5cbc7c8643d70cca68caf4c","size":423,"data":"","first_seen":"2025-07-28T03:31:52.94806Z","last_seen":"2026-09-29T05:07:11.98187Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"328901485ad326562af11e26200ab2b6","sha1":"5008ba36a264f73a0fe1efe90182d89daa052d3a","sha256":"c7276c2785fbd4648b145c711ac43fbb910c3837c11dd8fc86b4a0569551c15e","sha512":"23b989bc651a29e6f26632b81ca3776804e5ebd9cb9d85b8105f8a04261ee3f7234debca6ac5ee0c159768c2b645f6967663145cd00e995475750b732af39c67","ssdeep":"","tlshash":"e070000b808020088888af20202008aa808c8ac3a888a020eeab0000888800028b0c20","size":24,"data":"","first_seen":"2025-07-28T03:31:52.950135Z","last_seen":"2026-09-29T05:07:11.978557Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/main-0f531f1e4dbfa50e.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1c93e6d88e3a0e57930e5327949f45b","sha1":"7120d087a2897b3d5761982a767a403bf2fa2315","sha256":"993cfdfc84cd3c90cae51e4cf65f38b8f989be6bd6fcde917fa5e3160d2a631d","sha512":"5bbe691137647a2b444e4daf2d5f14cb05b2ad6e43a12f68174843e447ae9022e91abf8831fd99a74ad11816fb7e2081fa1c3947af9124e049fd5fa459392540","ssdeep":"768:cz8darV3/UYBllM9wccBkLhg5Bljy98HWXLI4iebb5thKXcknQ7NjV/7EVKtVBze:cYdaraYomz5Bly98HWP7ZKMWQJp5KETC","tlshash":"0ea318b672d1f8a207db4195843b0202f3761d3e641ea845e3ebdcd775a0d8e90a2f76","size":100202,"data":"","first_seen":"2026-09-29T00:45:26.842808Z","last_seen":"2026-09-29T05:07:11.939278Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/25675-cf44d9c64bc0ef11.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d69a848c7c8e8f0894d80134b8233c3","sha1":"8c36144d57b0eb281aec2a78cfbedb2ccdcfa2a3","sha256":"eeaaee4f50b97d260554cdaa50dc28e5768657b3ba74f3c3864ed56a1cff98eb","sha512":"8a8f393ae21c8ff98eb63003d0661fc4cd47c9a846cb0e7bf0570d0d3b6598a540bab111db841be7a3c98d232e951730066c0741de6998dc167a850c8bebd6c6","ssdeep":"192:hurVrRQRsHzm6gajT9i3KgO+1mby2alEZYGaO2t9liy:0VFgChbyj","tlshash":"9ff13a7636c9fcae234b909652af850ca9625c3ab729f90493f5d854e264d40e120f7b","size":7628,"data":"","first_seen":"2026-09-29T00:45:26.817057Z","last_seen":"2026-09-29T05:07:11.965975Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/26231-38981cd9bf911057.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1ca71f0d2a2c6fa3311ebaadaae8632","sha1":"fd4e758d444ce51189ba867a799fb6123d4f48ee","sha256":"03a92f1413685ed0aeb51fac45e538dcd94d25c1ccd47aed11aaf8b07f3ef697","sha512":"4f7e66c40cebfcaab54f71883977733384b89ac3262007f5cc7acbbe5930a66f95bc48d54294b7ec9327c97ae648ce146d8f6e14cd4ae9c9ad37d04668a1c613","ssdeep":"384:C+LynYikdW03A+O9JAlZ74589eOGRfBIjStSoV:gAA+QJ+4589eOGRfGW","tlshash":"af82d764e110a91907e2904f887e3464f1a50f0c80aa6c4e67b7c8ff79e274d6eb9777","size":18611,"data":"","first_seen":"2026-09-29T00:45:26.852512Z","last_seen":"2026-09-29T05:07:11.971695Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/91033-cf80eab149cd5a82.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"842c8f56ec83f8f87183fc73128b0f2a","sha1":"2840ace1a9da4f3ba1142606b4a08240144c6d22","sha256":"db8474b4489dacdfcd01eef02f6b746704b76f5a88c2faeb7892f2bbdc08b698","sha512":"4833585b384b8bd9439c857f2007961e78691a4463890b98bc14d566725c10fd7e46880d1dd070faf78c1acfc8da4d13748002ee9676477ddc374dc4acc77e39","ssdeep":"96:VgSRVk6Wg8lhCvrviin+n/PRkDhTt9qwqSBtxCMNMRVJIBSAMD9tRtraxZRBxEjc:GSRVmryDYPRkxtRJxNMRVJICRkG9iXW8","tlshash":"24f145c8f651747603439667c12f120eb33e9869a50a807cb278d4f76875a8d136ff7a","size":7605,"data":"","first_seen":"2023-11-18T05:43:42Z","last_seen":"2026-09-29T05:07:11.951288Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/64179-8dfa573a941b4455.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fe33c1e4adac9ade69b53bfe9d5683a","sha1":"d7c417387b45679b2cd2c422049736f9925db95c","sha256":"b966b50e9c6e72e18e3d69fa766ef40c97a8be87c565b87fca2716aaba03b088","sha512":"6ac16219a443ad058ba8fbae484a894467c3260a1d788a950dc2165501d72474d6a9629cadbd75a7fb2e8fbb34e561b7a6c55fc4ccfd14ba5a2ccedd3729c55c","ssdeep":"768:8Dkp2qsqPBi3+Xrv2YpUYQNC+4/uz+/wrenZkmkyN+rYy:8DlqsqPBi3+7v2EQNCL/uz+/wrengT","tlshash":"94d2842bd990ac3315ae2e8454fa1304b39d778b96a0cd1a7a5e503f17c7ee5f092738","size":30807,"data":"","first_seen":"2026-09-29T00:45:26.846342Z","last_seen":"2026-09-29T05:07:11.972221Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/pages/index-44d451db43157b09.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2aec67a28568941f3f25ce12be52cee8","sha1":"476dc158dc4e384c9bc391b9fb3fe71d1d84ce9f","sha256":"0b1bae76c0f30c0a713b20282c9e16eadde1dd09c2fdbff5839cadc5afb791f9","sha512":"ccca57a1de0eb82817c0d803de79f386b8165bdf22db6ae5b0a0c93d4b1ef9828c452a59c73ea436ccb8976342580723610af0f16f1174b3c2a28b5e59a78832","ssdeep":"384:ar3EQU8oKfuU0x1bfegaP6tQCxwV8nw/bcElUtWsJ7otSh/LyCz61K5OwrGyx3Kb:ar3EQUB3x1jqZO7otm/us61K5OshOt","tlshash":"0fd2310dd194beacb83a48c97e6fd10cb22f2f48ce4949a4f9bca81119595c83617fdd","size":29989,"data":"","first_seen":"2026-09-29T00:45:26.888214Z","last_seen":"2026-09-29T05:07:11.952307Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/kgUKs5J3yEx7-DIEk5ZDW/_ssgManifest.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-10-11T13:38:53.158931Z","times_seen":274450,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"14ef6281eb442f6821f5b118b5db20ae","sha1":"a842cda03c5b34e58fffe5f58ab035689dee1c0d","sha256":"570688d2e54d9daca44ee9f12d4aa8a21993ede536c7bbb127cb1b7bd1cb13a6","sha512":"eea66ae10cd86e2d6be26e4ac1105cdb24b10d0525e53dea2ed8524167294bbdd4d658e825b7e8766607ec6a30ba86cf227b0a866802de9e99c2a32b7c29bead","ssdeep":"","tlshash":"9df0234c3c52b01337f93a34c323ce7f33a1170135c35524ca45cc342850486084ad4d","size":444,"data":"","first_seen":"2025-07-28T03:31:52.945034Z","last_seen":"2026-09-29T05:07:11.980934Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hotrovnpay.com/favicon.svg","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:20.869Z","timestamp":1790658200869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nCookie: PHPSESSID=fdebo78bmjja5353ef7k31uqc4; language=vi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 09 Jul 2026 07:09:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4f4943-75f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1887,"size_decoded":1160,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13c945b6025add6104784d30af89f41a","sha1":"ed5e6d72d156ed6394cc8ee5adf8a84ccb2ad988","sha256":"5c388ca3ccb8912fd832e914b9dc83dc53b046b477edf8b7b42643ab389ed13b","sha512":"004d602f61b9c1cd7e23f18b93c40ebdfcf811afad78b7840f15f054a07d6e89860286771f542c179fdc976fc4c365deefe60c2fd25f67173d75385256846157","ssdeep":"","tlshash":"cd41cf270306969ef61c4764e514208672b0e4dfe0b0d2e4bb973c0be8540e6bd4d3bc","first_seen":"2025-07-28T03:31:52.871878Z","last_seen":"2026-09-29T05:07:11.961584Z","times_seen":4,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/css/9fc7a2e59369813c.css","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.026Z","timestamp":1790658197026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/css/9fc7a2e59369813c.css HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Jul 2026 08:27:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4f5b8e-58f5\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22773,"size_decoded":4181,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (22763), with no line terminators","md5":"f524f261605c064633948d969630a078","sha1":"af0eb580744e2e301d01a65109c1294d2bd66d51","sha256":"ec7770fb280a17b6c453685cab84143a4ccba56e90f67de63054b62a012caf6d","sha512":"a15d1aa9db839c0e669c09d341a5cb4e71877469b1a8964af5235a8fcabd0d6d00c16673d335b3fe1a35fe1756be58fe03ea67397040bc99515b475855832646","ssdeep":"384:lH4Go2SxtdnJN66yMRItRqVF1Nf47OwOAO0OaO8OUXKsVCDu1j2zegf4z7UIuw6p:guqV39","tlshash":"95a253e0db4ab31ee02a011dd5d1eb28385b3603fbb64e76fb20d52ec1ce16497d42a5","first_seen":"2026-09-29T00:45:26.828103Z","last_seen":"2026-09-29T05:07:11.948249Z","times_seen":3,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/97956.efb98a5e6099e5f4.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.041Z","timestamp":1790658197041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/97956.efb98a5e6099e5f4.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1023-3b64\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15204,"size_decoded":5166,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15143), with no line terminators","md5":"7403e004900dc556af753d107751d223","sha1":"9bf377004d1f1406248772e0f6617e00e258581f","sha256":"47e6d5aa9d28f601e771fe713426b184a829c356abed23276acd691bdbc0127b","sha512":"80a98d671c1091b173e3e2aac2797eb4c0002bd925ded736e8294e84898c9b2052c578fded34c2588a1f484d1928df1c1308735819db05c0a52e6b971b857ee4","ssdeep":"384:UVpmYL8zMCod1UszAHe7djl+pmYCX2noWh3VUKdAaIhaPKGF:U97fUsE+7dB6h3VU01H","tlshash":"c562b60ca6c5ba69e97d4948c16fd81ce31f374c9a46cc30b679ac570dc8a887352bf9","first_seen":"2026-09-29T00:45:26.879348Z","last_seen":"2026-09-29T05:07:11.949172Z","times_seen":3,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/webpack-beb9359d1c164a9c.js?v=30","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.043Z","timestamp":1790658197043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/webpack-beb9359d1c164a9c.js?v=30 HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 09:12:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1583-b847\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47175,"size_decoded":25950,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47175), with no line terminators","md5":"1176da1dd705291b98fd0fe43c7e136b","sha1":"e58defd6ee1172261f6862d14685f311b53eef8c","sha256":"ca5ab67aeb36a4d607550b6f7c8273ab6857669579dc08afffc4fe89bec8f4a5","sha512":"16c9d6a2eba7925c68466d214c13f8d171826847cdcdd28a40231081be81a2193ee639664f6b471aa637254b997357f65be9e51f628674530847f447a8c53560","ssdeep":"768:7MrxGpy/S/K1bD5gcg4JJfhPlK6myeJKMu1tNkc5JWOv5JbbbutMxVG19Njq6:wqUF8OHPFJKu1tNk+WOvD3ytOa5L","tlshash":"74235b9db71ce8d93d7109c6bc4624f46519b0123d460cd1a0eee3b60865ebce636fe6","first_seen":"2026-09-29T00:45:26.866833Z","last_seen":"2026-09-29T05:07:11.973507Z","times_seen":3,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/framework-75746eeb80cbf23f.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.044Z","timestamp":1790658197044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/framework-75746eeb80cbf23f.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1023-22714\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":141076,"size_decoded":46163,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65199)","md5":"56aec5cd281da6b6f469526c9ae940fb","sha1":"b4085e66577f3507c870ce52b9342c00387f0e15","sha256":"7288db385c0883c5e8aedb2f2ba6d864315e26698e3dca6ed6675a3890d65163","sha512":"186f55ece205b20d0cedeffa4ccb43bcf7edd6633764de93b302f23e2fcde6fae5f29e1c008a1534501bab7af2b830edf35476349bf57a25ac2a2246e32f15a2","ssdeep":"1536:5ovuNA6wMuNjY+o3MN6qlk1Suqc712//IQ4:iPUA6qm1SGgXj4","tlshash":"e7d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","first_seen":"2023-05-13T08:06:15Z","last_seen":"2026-10-10T11:16:43.974083Z","times_seen":183,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/assets/images/logo-icon/logo-primary.svg","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.861Z","timestamp":1790658197861,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /assets/images/logo-icon/logo-primary.svg HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 27007\r\nLast-Modified: Tue, 22 Sep 2026 07:49:03 GMT\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27007,"size_decoded":27248,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1adc4c11577f8cae933e5359157ebd5","sha1":"e8f4313940e7a7b3b5ca088211bac50031b32e5f","sha256":"247e6eab7de66db4be44f73644dd87d61590bbd7fabd87c608ce54a69c434a7e","sha512":"b8d9979d78ef8ab27623b545aa4446c706edab2bab3feb0901395da04c2262e51c1b147cc9e788cfa54eed575a38660a4f2f29923eaa5a1f2d218bdac271dd11","ssdeep":"384:iE5btxU/9G+Smq6l+o/Omx/C6FYOSTkXPMX7VvmUJkpH:iE9t0G+SWU8/C0NSTkXP27/JkpH","tlshash":"34c2ed7b1208c7be48a2c784dba9a49933969582f5f9b1ecdfd35a465c06cf7e070c12","first_seen":"2025-07-28T03:31:52.925049Z","last_seen":"2026-09-29T05:07:11.974949Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1544,"timings":{"blocked":-1,"dns":219,"connect":310,"send":0,"wait":313,"receive":372,"ssl":330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/chat_style.css?v=30","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:18.195Z","timestamp":1790658198195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /chat_style.css?v=30 HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Jul 2026 07:17:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a58857a-283d\"\r\nexpires: Tue, 29 Sep 2026 17:03:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10301,"size_decoded":2770,"mime_type":"text/css","magic":"ASCII text","md5":"8b92ec075b4fd122ffb5eebfd7fb40b6","sha1":"c184ec294988b1d0664d87f9ca21a62cc78bb832","sha256":"895831d59e0856045cf7c0fad2724a98cb6f3b67ed92590adb67a3ec9ff6355b","sha512":"c973186a1aea7a88212e2839554b03e1bc90036454b9f4821c68ffd75ab2a3985b4b3f022edd8103defad51e53dc3d6f61f5941aaf0ccd394544a30acb4792a4","ssdeep":"192:bk9/s1IgrzaBqIacO0cfD/vaTwzFnKEyiL7KRYEMJKx9SwRraaB7yp+WwGOOW9fD:bzfhN7FndaPNt","tlshash":"3f2202a3fa630886780b841cbfa6d79a6a3c90439105da793fe9727c4f871dc5461f9c","first_seen":"2026-09-29T00:45:26.820697Z","last_seen":"2026-09-29T05:07:11.950054Z","times_seen":3,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/chat_widget.js?v=30","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.063Z","timestamp":1790658197063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /chat_widget.js?v=30 HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 26 Aug 2026 14:56:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a8efeaa-58f4\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22772,"size_decoded":6540,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (309)","md5":"7ce8aeb70d2f3cfa86c8ebb302d27795","sha1":"59526d5e94d7eabba59dc9f9ce3ed63c1c3cf416","sha256":"fb0a442e724b36dafb0d39cb177771a48aa974af0c4cebcac48b40ad071f0e1d","sha512":"f26e091dec820b5074d928f2ceff530a0aa0cbe587132fb4eae4c779ec66f06941c4ed00fa4d35448c6fd1da7515232275cbec23aa3480f92f1a0250eb032509","ssdeep":"384:43EN1RhOOasM0oWlUsYqF3hnH6Pp0UGqL57zU4UQ6GUYyiWZ:43ENHhOOasM0og6qB5dvqV7L7WZ","tlshash":"25a2932979f3043645ab60aeb7eba2053e3181177001de54be4cd7946f92db898b3bd8","first_seen":"2026-09-29T00:45:26.854131Z","last_seen":"2026-09-29T05:07:11.940152Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1030,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/chat_api.php?action=check_session","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:18.200Z","timestamp":1790658198200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /chat_api.php?action=check_session HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hotrovnpay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nset-cookie: PHPSESSID=fdebo78bmjja5353ef7k31uqc4; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"fdebo78bmjja5353ef7k31uqc4","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=fdebo78bmjja5353ef7k31uqc4; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":20,"size_decoded":545,"mime_type":"application/json","magic":"JSON text data","md5":"c41908cf5d4e4cf47fb3592fb34e2330","sha1":"e6472b781e2d2b95eb922efd128186c684b79281","sha256":"4ad0c8e7efa2e1f62bbae4f2052bb2a198df2e93f6e0d98e7763b846bde6466e","sha512":"6b777d24cc16c656ae1f75ea183d2f2e00653b25e5093dca85fd317537a558a90840f3cee0f36280963ae51058c5a227c9141a6a9057f2700237cf9a24b14c1a","ssdeep":"","tlshash":"ee70002c8000882b088020083a000202008a083030002808c200008020830008020000","first_seen":"2026-07-05T00:58:57.122803Z","last_seen":"2026-10-02T23:01:04.179309Z","times_seen":8,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/8667.4a133dc7e69a514e.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.707Z","timestamp":1790658199707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/chunks/8667.4a133dc7e69a514e.js?v=30 HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:19 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 7280\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7280,"size_decoded":7544,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4858)","md5":"25eb09bbea208f52a91811d13716d9c1","sha1":"bad88a9673662e7516b3da2e16c16334a35b0deb","sha256":"47a69f1490725efe4b35f0d8e41e8c4a63627aef8b092f0c6f6fe1351b2857ac","sha512":"cd01e0e9d63ae871230d2428f0e15d9dc66edc3f89c219a8c56259206cbfc244e7c1cb5609fe636bd1ef41cb14257bf9bdfe40d78bddf1ab82ce6d3960d3371b","ssdeep":"96:38dUN3FKJQyHJGMtAKgp0MqeqTPcPVWD/p0oLYxLxFiqElnqVGvAvyYI/vvupxkP:AgVKrHVtsp0XYtWjp0xNiJlQtsvexkp9","tlshash":"f8e1c761fa00bcd952eb82ca10bf980df1357909c9799a91f5f0dc1c16f468db922ba6","first_seen":"2026-09-29T00:45:26.833585Z","last_seen":"2026-09-29T05:07:11.945072Z","times_seen":3,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KYWYVLX5B8\u0026cx=c\u0026gtm=4e69p1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:23.339Z","timestamp":1790658203339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-KYWYVLX5B8\u0026cx=c\u0026gtm=4e69p1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 05:03:23 GMT\r\nexpires: Tue, 29 Sep 2026 05:03:23 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 185376\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":562241,"size_decoded":185960,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6033)","md5":"cec207ace17f5c22680af6854c999987","sha1":"7afe01eb616acfbf8d3784848678446b12d212f5","sha256":"b3ba58f196dea0c5aa6ee057c7d5cdcc68585119ba5b1140126f687bf2f36747","sha512":"c62f2114ddbc3782b01a9284a2a7cbe75ae42856ed792e54b866b2d0903a271eb24417ab36916c7d200de73cbb9a17b35828e79fb5c3a6f828d12d18c31e8235","ssdeep":"6144:ytkEmtSwEhjTDclzLGISjYLBSZRvGciju12oejbqEG234vxexeaewud/CgU:DWhjTIV3SXgju1pLexAwuQ","tlshash":"b8c408ce73c674229396f578903f01cb697b29a2b45cc89af289dce02d3455a5263f7c","first_seen":"2026-09-29T05:04:32.935016Z","last_seen":"2026-09-29T05:04:32.935016Z","times_seen":1,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T05:03:15.773Z","timestamp":1790658195773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 30 Jul 2026 09:12:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1583-15c4b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":89163,"size_decoded":12166,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57995)","md5":"a54f364810f010b6d92555bc163dc01a","sha1":"c3e11ee4faec60416cfb7aa8e5dcc8ff0f06047d","sha256":"6b07fd1e258ed89006ed589d240b6d9aba1880afaf2c6777c2f2772c6f00cf69","sha512":"e633b2d048067e3e464c4ef250bc42d89265d88370aaf4a476b94cd684b7f3867ffad9c8d1bb57e20a28e710184a2f0dce411580ddac62fdf4fb68abdffb4782","ssdeep":"1536:7DTMlIvm8fRdOxktp9D/d9SQIM2muS6yaWEQ8QPktp9D/d9IQIM2muSKyaWEQ8Qk:4lIfsfzI","tlshash":"eb934fa3c541bb5f538729c8b92af20dcb87110edfc5e70aa32de4523b859da0425bf4","first_seen":"2026-09-29T00:45:26.797877Z","last_seen":"2026-09-29T05:07:11.972784Z","times_seen":3,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":42,"connect":262,"send":0,"wait":262,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stc609765200636.cloud.edgevnpay.vn/website-vnpay-public/1920/2026/3/0e9g4dcug3k1773398670617.png","fqdn":"stc609765200636.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.66","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.864Z","timestamp":1790658197864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /website-vnpay-public/1920/2026/3/0e9g4dcug3k1773398670617.png HTTP/1.1\r\nHost: stc609765200636.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: image/png\r\nContent-Length: 739521\r\nX-Cache-Flow: IMD\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":739521,"size_decoded":739713,"mime_type":"image/png","magic":"PNG image data, 1920 x 700, 8-bit/color RGBA, non-interlaced","md5":"97a6dc28ee2d56cda9663556c3fc7df4","sha1":"463d2ed0b5ab9a99b6f2e954512b18dbd2b02464","sha256":"90fbe94edb074054481adc1f3cdd319e720f832d9031c2b50a972a75f800de2b","sha512":"7fe6ab3cd5fdf018e7e7bfdb6c48c413c539946078339b5d06ebdf40cc57397d01c34e9e44e09e050153ff86182c29755576167f5d4886f051eba512a42e2ece","ssdeep":"12288:ubq6nLGaewuwjqWCF51Xf5rG4wgYRx2PMp/dQ7+N7XflfYL06+I1SC75qfb/:u26ny6jqFzf58EMBdQ7s60tb8qD/","tlshash":"eff4232ef1437db5ca8fa61cb15b4a80738f3d0eb1f62da4a483c1f48951154b1e96af","first_seen":"2026-09-29T00:45:26.839207Z","last_seen":"2026-09-29T05:07:11.947414Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3172,"timings":{"blocked":-1,"dns":249,"connect":331,"send":0,"wait":334,"receive":1918,"ssl":339},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/91033-cf80eab149cd5a82.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.055Z","timestamp":1790658197055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/91033-cf80eab149cd5a82.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1023-1db5\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7605,"size_decoded":2819,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7605), with no line terminators","md5":"842c8f56ec83f8f87183fc73128b0f2a","sha1":"2840ace1a9da4f3ba1142606b4a08240144c6d22","sha256":"db8474b4489dacdfcd01eef02f6b746704b76f5a88c2faeb7892f2bbdc08b698","sha512":"4833585b384b8bd9439c857f2007961e78691a4463890b98bc14d566725c10fd7e46880d1dd070faf78c1acfc8da4d13748002ee9676477ddc374dc4acc77e39","ssdeep":"96:VgSRVk6Wg8lhCvrviin+n/PRkDhTt9qwqSBtxCMNMRVJIBSAMD9tRtraxZRBxEjc:GSRVmryDYPRkxtRJxNMRVJICRkG9iXW8","tlshash":"24f145c8f651747603439667c12f120eb33e9869a50a807cb278d4f76875a8d136ff7a","first_seen":"2023-11-18T05:43:42Z","last_seen":"2026-09-29T05:07:11.951288Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/68508-f60e008b1432a43d.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.037Z","timestamp":1790658197037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/68508-f60e008b1432a43d.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1025-4d2d\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19757,"size_decoded":6243,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8192)","md5":"ae9f644759cf93f06ba6367571b5a661","sha1":"a451e4b1abecab342b3f79f9a5031ca643bca944","sha256":"f3ac19b297f7371299fc35e8fe91b8dc9faa87b58457b34510011ac90355b4e4","sha512":"4fbb094cf4d5b32cf11f69f08bb718c71de59aa5b5ad26b9bfa3d4f8ce26c1d28f134316346a526d869ad43e304b70022b6d662e10d9644451678e67d27f035a","ssdeep":"192:HxK8pXl4J9CIJXKl54p8hzWynX5pMsBmjpWL5E6BZptzppppppAEYi0ppio33UKq:Hkk6CIElcwBmQvZ0SUaL3UaP","tlshash":"da920950b34128fa516bc3cf62f6ec48dd311930d4a98fe8f174a0ae75a015ddab6b17","first_seen":"2026-09-29T00:45:26.865065Z","last_seen":"2026-09-29T05:07:11.942192Z","times_seen":3,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/analytics.tiktok.com/i18n/pixel/events.js?sdkid=CLA79NBC77U9VFIVNJ20\u0026lib=ttq","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.065Z","timestamp":1790658197065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /analytics.tiktok.com/i18n/pixel/events.js?sdkid=CLA79NBC77U9VFIVNJ20\u0026lib=ttq HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 05:56:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a587289-1e9e\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7838,"size_decoded":2219,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6414)","md5":"b30738a1ad660b88204faac72c8c4c42","sha1":"f4c6cca937da97f7eacfb5b2d41a8dea8eb7633c","sha256":"2bbbb65a1eb6cc22d0b9469446c8c11c56d2f53011b9dfe6a8e96407de9db197","sha512":"8144a28690c462f47955d4bcc13f0ff540efeba7b23627a358ebd72ff6ce13afc09fbb37186488aabd60c84e59b0706f4460e7f6a653291fe102ad0fa9d90084","ssdeep":"192:JIe+vnt3fveYxlYO+A1UxeGLSFQOdf4w6DeF7NYfgC:2l//72fgC","tlshash":"e9f1d1bf5508649fd0e48e43d31a5e02df7d1cbfd100f2c8a75bc648727f52682aaa4a","first_seen":"2026-09-29T00:45:26.848325Z","last_seen":"2026-09-29T05:07:11.960646Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1028,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/media/Inter-VariableFont.7385e8d9.ttf","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:21.015Z","timestamp":1790658201015,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/media/Inter-VariableFont.7385e8d9.ttf HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hotrovnpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1889324617.cloud.edgevnpay.vn/_next/static/css/71b291661f5632f0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:20 GMT\r\nContent-Type: font/ttf\r\nContent-Length: 804612\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804612,"size_decoded":804849,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"GDEF\", 50 names, Microsoft, language 0x409","md5":"32204736a4290ec41200abe91e5190d1","sha1":"26752c31bd3be24b0608ee27ac8c9a9a27245268","sha256":"cf3cb43b0366e2dc6df60e1132b1c9a4c15777f0cd8e5a53e0c15124003e9ed4","sha512":"fc6ee5429ce64f9144f27be67cdd572d8a2f543ab92ee292e757bbce55a35b0058f3006fc680a45ce8cbac8e39748338d9a8562e3a21e8afa2f9b88b87ff228f","ssdeep":"12288:SXpgXHcNAygxZJ6/gVROEODDI9BWDOL5I8F5wrMXjSL2tr23t5HC2yOU8:S5gXcNAygxZJ64V4DDYZWmY5MOU8","tlshash":"5d058d37f796a91dd12e0b74c3f3cf6267357861af27530baa1639639e433e42608285","first_seen":"2023-10-14T00:46:20Z","last_seen":"2026-10-11T01:44:37.377949Z","times_seen":1102,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":0,"dns":0,"connect":330,"send":0,"wait":334,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/css/f1432e1f8a6721c5.css","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.025Z","timestamp":1790658197025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/css/f1432e1f8a6721c5.css HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Jul 2026 08:27:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4f5b8f-c4038\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802872,"size_decoded":54966,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65416), with no line terminators","md5":"9105212f56617d0107074d3ad70e35d7","sha1":"2d059bae32c717caa6195810ba7f96f4ee16d854","sha256":"7fd28fee498919f43d6a1c7ed2fd6e4c5ab07d7af18f7664e8a547fbaae2cc0e","sha512":"fd17cee420889e4b06ddff416b3908d2287172c2823f35f2634b10aecb0a0212bc57fb4c3e4fea2f37b98c12c6a81f3d9c5ff4f4e7fb2dfad642bd52bb0f82f9","ssdeep":"768:lEy1X5FSMSR4sivNKuLWuGg79qgUoUfNqPonhLrxNsLffO0kGiVBEKw5wiwRwT1M:rXnMR4DqgINHA0BGXEIW+Vy7GZ6rpqVu","tlshash":"8c05e446578624b3de165f25709c51e8af9f3df273128af98a2b2818cf8d9c3225770d","first_seen":"2026-09-29T00:45:26.850693Z","last_seen":"2026-09-29T05:07:11.936788Z","times_seen":3,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/5996-d05a577fe27fa25a.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.033Z","timestamp":1790658197033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/5996-d05a577fe27fa25a.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1024-5a2b\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23083,"size_decoded":8964,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23083), with no line terminators","md5":"a48cf3f25c64942fd43e65b7a4b57151","sha1":"a41aae42d0a38c046578c7f7414e1079775c00e3","sha256":"8a8a77024d40c890fad260e8afa8b390c92936a5c583d6e3678cedc39c7463ad","sha512":"b25ae3885c078a5e10c9a7040d51f7e626c34814ed17f6bcf0e38b3ac76ff17c6ab8237130bd8b0db518cdbfdb4be396fc78c32d2034ccc89de4e9f72b139426","ssdeep":"384:del766KMb065D8IUjGaWL8E72q9zEsZvR83vaiQX+T:dC76ha065D8IUVWL80NE4i/ZQG","tlshash":"02a295a8f0c6b42155cb21e600af043df33bbd59771d8820a57695cc3d7ea89e273a9d","first_seen":"2026-09-29T00:45:26.812719Z","last_seen":"2026-09-29T05:07:11.966907Z","times_seen":3,"resource_available":true,"data":null}},"time_used":537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stc609765200636.cloud.edgevnpay.vn/website-vnpay-public/1920/2025/8/0al1bkp5uriq1755100171964.jpg","fqdn":"stc609765200636.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.66","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.866Z","timestamp":1790658197866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /website-vnpay-public/1920/2025/8/0al1bkp5uriq1755100171964.jpg HTTP/1.1\r\nHost: stc609765200636.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:22 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 113657\r\nX-Cache-Flow: IMD\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113657,"size_decoded":113850,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1920x700, components 3","md5":"0376d901a7c8be7d608f269694478f96","sha1":"c68d758fe838c836ed6eff578aba9b27886b62f0","sha256":"a89a8d3ce00ebd535a89dd76c8e8b8593a1b020c9538e9e8aa193c53e5c7187b","sha512":"f7ac4e53d834927a5b4b1c355517bfbcb19bd8074e203a114d8fa0f561191354b8c5ffca8a2303f4c7e2823314e1b520e7fcaabc9054b03e19e5fc4615875a93","ssdeep":"3072:diz+vqE1+UBDJVaBFOHGGKvk8NB9kIPhTEfL:88qE8YDJVC8G3k8NB9kIPhML","tlshash":"09b312c597939880cbadbe7ec4566a1c65724e11e084f070e0a47cfefdc4de64680a77","first_seen":"2026-09-29T00:45:26.804107Z","last_seen":"2026-09-29T05:07:11.975862Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6161,"timings":{"blocked":-1,"dns":247,"connect":1347,"send":0,"wait":4012,"receive":982,"ssl":340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/css/9d673faa8bcd64cb.css","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.706Z","timestamp":1790658199706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/css/9d673faa8bcd64cb.css HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:19 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nContent-Length: 733\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":733,"size_decoded":982,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (733), with no line terminators","md5":"b2ba72f54bacdfda915581763d1bcab2","sha1":"83c047716dfd7ce45090fb15d18c8ccca2a87766","sha256":"d108c5ba904c2e8ba797dd68010858a541884fb85cd3a516f9a9605d1e32f07a","sha512":"e72d5d7e9cb7d8307f7862038f74713f1cc342d0d3a39b6abd6e8812440c830e6a796c04dbdc6bb06200161a7a00c7c11c9df41b7c854a66e85e967a51a22f26","ssdeep":"","tlshash":"8e012f52ba525f39b7b7dd632428b758f008d480d9aaad6ef850637e81ca62313f1309","first_seen":"2025-07-28T03:31:52.90034Z","last_seen":"2026-09-29T05:07:11.959158Z","times_seen":4,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/96752-6b0879aca1b76cde.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.032Z","timestamp":1790658197032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/96752-6b0879aca1b76cde.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1023-1e35\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7733,"size_decoded":3248,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5368)","md5":"a57b128d68c823a5176f86a1befdcce6","sha1":"92b88a2c4fc15f53603d70694617888573e4d278","sha256":"d50e49dc8d5ff90ecf72e4fe34bbe6c8c640206fb7a1af5e4f33e0f7417e6d39","sha512":"fe448cdc6701117a415ded7c8c5309a9ae789dd8497f27e41c63cf8c416de12ec8d204da331f100f9add0f20d4b04f5a9cbedb11accce49d08293d13bb18ab26","ssdeep":"192:1KyKiPN9WzpBS3NIyKC1rfBStILL/ZdJJUqXooFmDBihDumanTyMZcV:1KyKiPN9WzpBkKiB/ZdzXo1IV","tlshash":"73f1d78cfad4b45001a750c565ef1d2b62bfce807a198c687334a4ee2377b9c50a3b8d","first_seen":"2026-09-29T00:45:26.862887Z","last_seen":"2026-09-29T05:07:11.955763Z","times_seen":3,"resource_available":true,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/20847.bb79ff0c238a6796.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.040Z","timestamp":1790658197040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/20847.bb79ff0c238a6796.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1024-73ec\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29676,"size_decoded":9942,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12846)","md5":"eb6690e9d253b2ffe2d51dd3981b89dc","sha1":"2e6d448803c866c7aa49601779fbe5a109167ec2","sha256":"2006f92ba8cdbc37b6fb49658db34e5955dd677af004feb02efbf9a6cc7724e3","sha512":"ae9bbca2004174e47884622a0d9a9ce22117fe2b1c047297dd23b767a30c3f24f217b9e2e16494681f0f3c2f406293f264df730bdd907f5c4f79c32f4474dae0","ssdeep":"768:SSZreEXtTlhfczwc4KcbSlGc/ntHrYQom/0B7V+sD8:SYHXtTlh8wc4KcbSlGc/ntHrYQom8B7I","tlshash":"74d23c98768060d401efc2c542ff8d05e2354b94e4aa98e4f274c5ee37f1bcd466ab5b","first_seen":"2026-09-29T00:45:26.875Z","last_seen":"2026-09-29T05:07:11.938205Z","times_seen":3,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/api/v2/options?q=popup-download","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:20.993Z","timestamp":1790658200993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /api/v2/options?q=popup-download HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nCookie: PHPSESSID=fdebo78bmjja5353ef7k31uqc4; language=vi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:21 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T13:42:40.692275Z","times_seen":567168,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/83062-25341129f1a0002f.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.030Z","timestamp":1790658197030,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/83062-25341129f1a0002f.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1026-c9b1\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51633,"size_decoded":17901,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51633), with no line terminators","md5":"2c8658d134a6432f4eb42770a1eda181","sha1":"629ab673b51666e96999fe5fb6cd649c94b720f5","sha256":"667cedd8e74dae974d8ae9f35d05c4ef067fe196f621e6f6b02ef5501343fd7b","sha512":"94091ae4526d760cdfacf654119a328144ecf63199e47b2c51c66090ab62725d78b2db466400ec95e976993dc8de875d28e45e89b3bc64fb818129b7fa34f4df","ssdeep":"1536:1LYrJFBl9w2hmsSI4Gr7om85n+o1RzOItTkcdOhdQKBbc0XpwoR//Zc4IPUvSIKh:8FBlWQmsSIr7oco/vtTkGOhdDbTpnSs6","tlshash":"e0331ad8b1c0b02692af022680af451d73369644a79adc40f677e4cd3db8d8e5367fad","first_seen":"2026-09-29T00:45:26.85997Z","last_seen":"2026-09-29T05:07:11.960027Z","times_seen":3,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/main-0f531f1e4dbfa50e.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.046Z","timestamp":1790658197046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/main-0f531f1e4dbfa50e.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1024-1876a\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100202,"size_decoded":31020,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1c93e6d88e3a0e57930e5327949f45b","sha1":"7120d087a2897b3d5761982a767a403bf2fa2315","sha256":"993cfdfc84cd3c90cae51e4cf65f38b8f989be6bd6fcde917fa5e3160d2a631d","sha512":"5bbe691137647a2b444e4daf2d5f14cb05b2ad6e43a12f68174843e447ae9022e91abf8831fd99a74ad11816fb7e2081fa1c3947af9124e049fd5fa459392540","ssdeep":"768:cz8darV3/UYBllM9wccBkLhg5Bljy98HWXLI4iebb5thKXcknQ7NjV/7EVKtVBze:cYdaraYomz5Bly98HWP7ZKMWQJp5KETC","tlshash":"0ea318b672d1f8a207db4195843b0202f3761d3e641ea845e3ebdcd775a0d8e90a2f76","first_seen":"2026-09-29T00:45:26.842808Z","last_seen":"2026-09-29T05:07:11.939278Z","times_seen":3,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/28906.8eee756de00f1d5d.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.703Z","timestamp":1790658199703,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/chunks/28906.8eee756de00f1d5d.js?v=30 HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:19 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 3808\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3808,"size_decoded":4072,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3808), with no line terminators","md5":"8200e66f6bf0a739cd92459cbbd9f83b","sha1":"a31ac5e32a32b4ed8148a0563a2170ebbcc407f7","sha256":"9333227d1ceabe05b94fb14c69d1d91a35d0065824a534d4daaeceff9bf91aaa","sha512":"8d2d8c7f135bb5adc8b72cc576779771668aaf2e70c9a880f67fa89795f37824c2b9c9dba8e8cc18ec0ec0f442007c0efe3c3ebb1f48dca3887377dd158c3961","ssdeep":"","tlshash":"6d71421fe2e2f5cd96986dfc006f4825720e291b65409e2de1b29814f070f9873a1ebf","first_seen":"2026-09-29T00:45:26.871577Z","last_seen":"2026-09-29T05:07:11.944428Z","times_seen":3,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/25675-cf44d9c64bc0ef11.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.051Z","timestamp":1790658197051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/25675-cf44d9c64bc0ef11.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1024-1dcc\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7628,"size_decoded":3743,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7628), with no line terminators","md5":"2d69a848c7c8e8f0894d80134b8233c3","sha1":"8c36144d57b0eb281aec2a78cfbedb2ccdcfa2a3","sha256":"eeaaee4f50b97d260554cdaa50dc28e5768657b3ba74f3c3864ed56a1cff98eb","sha512":"8a8f393ae21c8ff98eb63003d0661fc4cd47c9a846cb0e7bf0570d0d3b6598a540bab111db841be7a3c98d232e951730066c0741de6998dc167a850c8bebd6c6","ssdeep":"192:hurVrRQRsHzm6gajT9i3KgO+1mby2alEZYGaO2t9liy:0VFgChbyj","tlshash":"9ff13a7636c9fcae234b909652af850ca9625c3ab729f90493f5d854e264d40e120f7b","first_seen":"2026-09-29T00:45:26.817057Z","last_seen":"2026-09-29T05:07:11.965975Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/kgUKs5J3yEx7-DIEk5ZDW/_buildManifest.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.061Z","timestamp":1790658197061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/kgUKs5J3yEx7-DIEk5ZDW/_buildManifest.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 07:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4f4946-121c\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4636,"size_decoded":1860,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (4636), with no line terminators","md5":"877eb09303d91cfa7f9a545fe26b28ae","sha1":"561bb9e429dd8d97454ff436e3e1a57f2a1fbbaa","sha256":"84186c140ddc2f8a781a3bb9ad6c8c8230cfc263da85ff64c7e224d150700869","sha512":"595cbea5d475dec0028dfa93061363abd088612ad74c5e7c5e04287eeb149efe3cf57b4a59fe137ffd4061de7f776c5831a20a103b81657d77c037f1cec174e3","ssdeep":"48:0m7+oUVF+CR2rJsWOk9r/mSwNqNJODcBnVmgnsNM6J6h26jouVOAFeXmwzBoZy+t:0miz72NsMbHnogR6413cXziZcdvk7","tlshash":"fea1cc834401f5868ef1cdadb41f17728a82ae33897082cce68dce6e4d5e96a5f5d433","first_seen":"2026-09-29T00:45:26.801275Z","last_seen":"2026-09-29T05:07:11.953188Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1032,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/93472.13a54a03af9b7872.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.630Z","timestamp":1790658199630,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/chunks/93472.13a54a03af9b7872.js?v=30 HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 1192\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1192,"size_decoded":1456,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1192), with no line terminators","md5":"62e9ee3085738140948d669fc8daf951","sha1":"a45bd88c490003dced99b0db3facc10eee5ed47d","sha256":"4a847f3e627555974cf28666aeff6026d463ca005ec1f1d88193832d2e5fe4b2","sha512":"f1213a5a2f8ece06870af3e51cdae41521d921c96ca587151b2f0c36b5d8202dc537f50c37584ac148639eb92945b5fd286671345d167a6cbcf423cabb95a9bb","ssdeep":"","tlshash":"882102cbf146bc6a661354e000af040ee2662cc489ada864b563b9600d3bc1f64bbfcc","first_seen":"2026-09-29T00:45:26.890082Z","last_seen":"2026-09-29T05:07:11.957271Z","times_seen":3,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/api/v2/tiktok-events/track","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.748Z","timestamp":1790658199748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"POST /api/v2/tiktok-events/track HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 140\r\nOrigin: https://hotrovnpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nCookie: PHPSESSID=fdebo78bmjja5353ef7k31uqc4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"{\"event\":\"ViewContent\",\"event_time\":\"2026-09-29T05:03:19.734Z\",\"event_id\":\"1790658199734\",\"page\":\"https://vnpay.vn/\",\"user\":{\"ttclid\":null}}"}},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:19 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":279,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-11T13:42:40.692275Z","times_seen":567168,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/apple-touch-icon.png","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:20.867Z","timestamp":1790658200867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nCookie: PHPSESSID=fdebo78bmjja5353ef7k31uqc4; language=vi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:20 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 07:09:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4f4943-3ff6\"\r\nexpires: Thu, 29 Oct 2026 05:03:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16374,"size_decoded":16744,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"9e9947cfcf99d6dbf69f544e2b2550a9","sha1":"e7590a8f7ea87247d138303418289a9652a31855","sha256":"a7be0ea2734c47ca50f13d52e84290fdea5c8483f681ebb4b14df7b48fcb4a62","sha512":"a3c36b762a08260c62083b0863d69fc0e48fec9f568691d24b2568bb400325673d0e31f7b973a091da9ea9b654ab312dbb8b2ac4a936c0c4667f4b40114293eb","ssdeep":"384:D9/zFQANWm/ub4X0Y8HEtFvcEg24hoPhlGO9QX1lvT+eyMx:D97tWmaixS2QGGOqX1l7+DI","tlshash":"e072d0f04cdd290626812835f7b26a47b19f039879109cbc582841e96b5ceacef46665","first_seen":"2025-07-28T03:31:52.916711Z","last_seen":"2026-09-29T05:07:11.969636Z","times_seen":4,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/kgUKs5J3yEx7-DIEk5ZDW/_ssgManifest.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.062Z","timestamp":1790658197062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/kgUKs5J3yEx7-DIEk5ZDW/_ssgManifest.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 77\r\nlast-modified: Thu, 09 Jul 2026 07:09:58 GMT\r\netag: \"6a4f4946-4d\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":426,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-10-11T13:38:53.158931Z","times_seen":274450,"resource_available":true,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stc609765200636.cloud.edgevnpay.vn/website-vnpay-public/1920/2026/3/025i2b1ua2s61773219205065.jpg","fqdn":"stc609765200636.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.66","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.865Z","timestamp":1790658197865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /website-vnpay-public/1920/2026/3/025i2b1ua2s61773219205065.jpg HTTP/1.1\r\nHost: stc609765200636.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 129740\r\nX-Cache-Flow: IMD\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":129740,"size_decoded":129933,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1920x700, components 3","md5":"bdf4aff633194a2ef5c7582e7ef7eba2","sha1":"cdb547a2bd9c1ac098ab8dcb3e28fedeb1a824fd","sha256":"de20275b69f1afa107f49ef0d7c49ff322b2219299a15976caa55b11ece76501","sha512":"ef2447a2c32ecd03fbb3ff4fc9091b43c329282672f7f7c78d4fcc52233b8e1a7e61db75a666e82bf393adec2a0728a609b6fc81ac29ce0a91307e35a8128790","ssdeep":"3072:xwD1vj6UrUzs5UkjmMje8YQOm2XtnMAb99jU8Elj/+17CuYKC4Go:M6VzXkjfYBmEMQxPpCuLR","tlshash":"9cc312da4f871f87e2236a0168cba5f8f5894ce821fea1f0c4f44e9ccb75da015661a5","first_seen":"2026-09-29T00:45:26.824048Z","last_seen":"2026-09-29T05:07:11.943592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2299,"timings":{"blocked":-1,"dns":248,"connect":333,"send":0,"wait":334,"receive":1047,"ssl":337},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/64179-8dfa573a941b4455.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.058Z","timestamp":1790658197058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/64179-8dfa573a941b4455.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1025-78b1\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30897,"size_decoded":6977,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29605), with no line terminators","md5":"1fe33c1e4adac9ade69b53bfe9d5683a","sha1":"d7c417387b45679b2cd2c422049736f9925db95c","sha256":"b966b50e9c6e72e18e3d69fa766ef40c97a8be87c565b87fca2716aaba03b088","sha512":"6ac16219a443ad058ba8fbae484a894467c3260a1d788a950dc2165501d72474d6a9629cadbd75a7fb2e8fbb34e561b7a6c55fc4ccfd14ba5a2ccedd3729c55c","ssdeep":"768:8Dkp2qsqPBi3+Xrv2YpUYQNC+4/uz+/wrenZkmkyN+rYy:8DlqsqPBi3+7v2EQNCL/uz+/wrengT","tlshash":"94d2842bd990ac3315ae2e8454fa1304b39d778b96a0cd1a7a5e503f17c7ee5f092738","first_seen":"2026-09-29T00:45:26.846342Z","last_seen":"2026-09-29T05:07:11.972221Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/media/play_button.41303790.webp","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.847Z","timestamp":1790658197847,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/media/play_button.41303790.webp HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: image/webp\r\nContent-Length: 250\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":250,"size_decoded":486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32e1f8b8671958b2b4765c95eeceec04","sha1":"ed474a1261c207c45e5e48d02ab7101a33ec035d","sha256":"6696dff5f81b88aae0719932ea82ba6bc7909dbc3665cd6c072ab541a69216be","sha512":"cc472373bdff253beaa6d98466dd6bafdb3c6b9d5b37fa7961f1fd12dc745e2d71d77984cca2bb6b00c37431f0e9bde6228e669807590be3e2d9811e5514fbbe","ssdeep":"","tlshash":"4dd0954ad4f0d5110c034ebf55775c9f2a053f16911694799159cf9b1db30c14634975","first_seen":"2025-07-28T03:31:52.904014Z","last_seen":"2026-09-29T05:07:11.946929Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":-1,"dns":233,"connect":345,"send":0,"wait":350,"receive":0,"ssl":358},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/media/Inter-VariableFont.7385e8d9.ttf","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.854Z","timestamp":1790658197854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/media/Inter-VariableFont.7385e8d9.ttf HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hotrovnpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: font/ttf\r\nContent-Length: 804612\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804612,"size_decoded":804849,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"GDEF\", 50 names, Microsoft, language 0x409","md5":"32204736a4290ec41200abe91e5190d1","sha1":"26752c31bd3be24b0608ee27ac8c9a9a27245268","sha256":"cf3cb43b0366e2dc6df60e1132b1c9a4c15777f0cd8e5a53e0c15124003e9ed4","sha512":"fc6ee5429ce64f9144f27be67cdd572d8a2f543ab92ee292e757bbce55a35b0058f3006fc680a45ce8cbac8e39748338d9a8562e3a21e8afa2f9b88b87ff228f","ssdeep":"12288:SXpgXHcNAygxZJ6/gVROEODDI9BWDOL5I8F5wrMXjSL2tr23t5HC2yOU8:S5gXcNAygxZJ64V4DDYZWmY5MOU8","tlshash":"5d058d37f796a91dd12e0b74c3f3cf6267357861af27530baa1639639e433e42608285","first_seen":"2023-10-14T00:46:20Z","last_seen":"2026-10-11T01:44:37.377949Z","times_seen":1102,"resource_available":false,"data":null}},"time_used":3176,"timings":{"blocked":-1,"dns":226,"connect":332,"send":0,"wait":337,"receive":1937,"ssl":343},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/43316.acc595190fd4d094.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.710Z","timestamp":1790658199710,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/chunks/43316.acc595190fd4d094.js?v=30 HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:19 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 574\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":574,"size_decoded":837,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (574), with no line terminators","md5":"1a960c8440a5b0bbfea03837e980058d","sha1":"69b08461e9c55de02aa1bde8208631422963b91b","sha256":"c6d04096971e9d28fa81befbde3a451e2f685e8fb3faa979dfd2745eef3ae801","sha512":"425f6d75b5dfce363746fa217fb40737d34db233e6d17db42fd82e698aa74a39026fd26eed62021cd5284b5241aa1ce469b28830c305ace936d945c5498c3773","ssdeep":"","tlshash":"16f0e1482a41fdb16bde60cf84bfc35a62f414e13846d04694e35c446030f6445e1f1f","first_seen":"2026-09-29T00:45:26.806098Z","last_seen":"2026-09-29T05:07:11.945886Z","times_seen":3,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/41664-200d5d631cd6c206.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.050Z","timestamp":1790658197050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/41664-200d5d631cd6c206.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1025-144d\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5197,"size_decoded":2424,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5197), with no line terminators","md5":"0ba97f0c8b6b6eac3e9d42aa0d49a622","sha1":"5a7c13b37bd519a3952147f148685df09c52fcd9","sha256":"46b48636bdc2ad542595ad85a55c4ba39320e0d5461f0064ee770bea32320c18","sha512":"9d163b19034530d8de93243c88d0483d5e7d5f0dc432c302254c0b6a3173077d9443fafc42a2267d6c6fa386152c735d3616ecd05aa3f023942109dbcf9decb6","ssdeep":"96:qu9GCcOwDkqaOZjacc3FwKHCApzBqFhFYAtNBqCAvBqS0cM4O9GCCVarISPcZNuE:qHlO+kgZjacc3Fe8zBS7YMNBnSBKcM21","tlshash":"85b1b8633092f4a2d2bb8155c43b4419327a2d3e201fb164a7f6cdf957b418da693f2b","first_seen":"2026-09-29T00:45:26.835446Z","last_seen":"2026-10-10T11:16:43.999146Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/26231-38981cd9bf911057.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.053Z","timestamp":1790658197053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/26231-38981cd9bf911057.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1025-48b3\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18611,"size_decoded":5839,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18611), with no line terminators","md5":"b1ca71f0d2a2c6fa3311ebaadaae8632","sha1":"fd4e758d444ce51189ba867a799fb6123d4f48ee","sha256":"03a92f1413685ed0aeb51fac45e538dcd94d25c1ccd47aed11aaf8b07f3ef697","sha512":"4f7e66c40cebfcaab54f71883977733384b89ac3262007f5cc7acbbe5930a66f95bc48d54294b7ec9327c97ae648ce146d8f6e14cd4ae9c9ad37d04668a1c613","ssdeep":"384:C+LynYikdW03A+O9JAlZ74589eOGRfBIjStSoV:gAA+QJ+4589eOGRfGW","tlshash":"af82d764e110a91907e2904f887e3464f1a50f0c80aa6c4e67b7c8ff79e274d6eb9777","first_seen":"2026-09-29T00:45:26.852512Z","last_seen":"2026-09-29T05:07:11.971695Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/media/banner-4-min.956cdb48.png","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.848Z","timestamp":1790658197848,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/media/banner-4-min.956cdb48.png HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:19 GMT\r\nContent-Type: image/png\r\nContent-Length: 517123\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":517123,"size_decoded":517361,"mime_type":"image/png","magic":"PNG image data, 1743 x 635, 8-bit colormap, non-interlaced","md5":"9d5954fb33015d7dbbdd7153f9848606","sha1":"27c1716b0ac86a08bcb6fd9132201fd0dfd96a99","sha256":"3815d0b26b92fed44c9def307f69d35484a4d183227d3f9859a8007729565e0f","sha512":"64b2871d803589f06e67034edc30ee352c295f3758d19335411f781ef5b0a5b56b1e45d0cec4c5ca4ab0a96b4bad700aca74660147474ab244e603fe5d5c87d5","ssdeep":"12288:6+pb3Crvyogsb6UZggMgLVOC0f1SlVS8Tbrm0:6+Fyrgu68tnVOCCcls8Hp","tlshash":"67b423f727fa080deeb390b966bd60ad8c2b654bf355321b803f2641defc4521da5a44","first_seen":"2025-07-28T03:31:52.905258Z","last_seen":"2026-09-29T05:07:11.964616Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4449,"timings":{"blocked":-1,"dns":232,"connect":353,"send":0,"wait":1684,"receive":1816,"ssl":364},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/css/71b291661f5632f0.css","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.700Z","timestamp":1790658199700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/css/71b291661f5632f0.css HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:19 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nContent-Length: 4790\r\nLast-Modified: Tue, 22 Sep 2026 10:42:06 GMT\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4790,"size_decoded":5040,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4790), with no line terminators","md5":"01a2344b58223d4c8aab628301233b12","sha1":"32e6ce797c073345624d22d03fbaf9219d7ec2dd","sha256":"861dc13634d1a7b74dca03867aba7634e1109c7de40897facb40b24f3ecc4c0c","sha512":"baf45e0b4935c216b07be4b40f5de5229a6f16cdefe358eb8f2ce9dc476135bf3dd5e898d0b9d1cfe1bc11e4921188c872a2e41210116f0530b66d274693e8b4","ssdeep":"96:NLhmaZSFV7zK0F020B7KmAozJukyCB21U:NLhmaZSFV7zK0F020B7B+tU","tlshash":"1da1941bc557c109e057c84d7ace673a931a8803d6ab5f0ab23a585ddcf617303b8b0b","first_seen":"2026-09-29T00:45:26.88458Z","last_seen":"2026-09-29T05:07:11.955253Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1245,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/75713.2da90170eb515fd5.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.039Z","timestamp":1790658197039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/75713.2da90170eb515fd5.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1025-35bf\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13759,"size_decoded":5517,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13759), with no line terminators","md5":"0da0e64c38682b18c0ba8ed46c2cad42","sha1":"0381c35dc0aa49b799169fdbac28af40d009283a","sha256":"ddf6b6d0159b38d0027d1eb88159c3fd65fa4551f18d9a40439fe773bdd6e85b","sha512":"86b440be3b57b5353aed5a6cf607c662893fd3104efb5cf4676d489161199ccce9d419e6fe33f20146402fa2d6c9c691473e17996bf55786077857f082199848","ssdeep":"192:LskkeBapJPOc4gbqnemjYA0BkNQynolcovXYYQxkfWp36pv3a78PQfX8zQ:LsLeyJW7nkuQynnYrf63eQV","tlshash":"45522d65b2507c54246702cac2ef192ce03ee716ea3f4c44b3b0e8dd75e2a8d562fb55","first_seen":"2026-09-29T00:45:26.876644Z","last_seen":"2026-09-29T05:07:11.971173Z","times_seen":3,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/77602-19f2d10d589f76d8.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.056Z","timestamp":1790658197056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/77602-19f2d10d589f76d8.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Jul 2026 08:49:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a6b1025-8479\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33913,"size_decoded":10225,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33913), with no line terminators","md5":"577f03f23ebc1089e746f79de27e93ed","sha1":"f79b04b856ddf9109e26701ddcf4cf54bd93c5dd","sha256":"4d9654846ca3f867b0eeefa98097b329cfb0cae347e81f941e6df6d4247351c1","sha512":"891c86c07efc59a0bc65561e7fa2f3e9aa6a759e49c82ece69258a46b303386bc4c45c7b6947ac7224af118c3c551def64b83caac586bc2d276e3b4d0b0996ea","ssdeep":"768:H7eCbpj5mj9XuEvjSM1BULFVwTdbwWzKco:H7Xbpj5YUEv+MULFVwTxwIo","tlshash":"7fe2f98bf9e5346a9ad6111591ef802fe3fb18083b0dc05871a298dd3a6d41e635dff8","first_seen":"2026-09-29T00:45:26.82998Z","last_seen":"2026-09-29T05:07:11.974345Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/pages/index-44d451db43157b09.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.059Z","timestamp":1790658197059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/pages/index-44d451db43157b09.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 07:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4f4946-7525\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29989,"size_decoded":8147,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29930), with no line terminators","md5":"2aec67a28568941f3f25ce12be52cee8","sha1":"476dc158dc4e384c9bc391b9fb3fe71d1d84ce9f","sha256":"0b1bae76c0f30c0a713b20282c9e16eadde1dd09c2fdbff5839cadc5afb791f9","sha512":"ccca57a1de0eb82817c0d803de79f386b8165bdf22db6ae5b0a0c93d4b1ef9828c452a59c73ea436ccb8976342580723610af0f16f1174b3c2a28b5e59a78832","ssdeep":"384:ar3EQU8oKfuU0x1bfegaP6tQCxwV8nw/bcElUtWsJ7otSh/LyCz61K5OwrGyx3Kb:ar3EQUB3x1jqZO7otm/us61K5OshOt","tlshash":"0fd2310dd194beacb83a48c97e6fd10cb22f2f48ce4949a4f9bca81119595c83617fdd","first_seen":"2026-09-29T00:45:26.888214Z","last_seen":"2026-09-29T05:07:11.952307Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1034,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/css/9fc7a2e59369813c.css","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:18.192Z","timestamp":1790658198192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/css/9fc7a2e59369813c.css HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nContent-Length: 22821\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 10:42:06 GMT\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22821,"size_decoded":23072,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (22811), with no line terminators","md5":"b71f4a14271ace2248b23db97b6fd59c","sha1":"6aacdbfcd97857590985bc315940fcbb08dee94e","sha256":"bbf4773b4d0850be9e08c079770f16faae068c3b30cce6563616db057dc79dc7","sha512":"a5f0fd91be248d230d3622ec895ebd22c5b957290036acad78d5874ce9b57aeae9cad785514c1275231abdb60f133de32509b8f54db29c17f21a924d40d091e8","ssdeep":"384:3H4Go2SxtdnJN66yMRItRqVF1Nf47OwOAO0OaO8OUXKsVCDu1j2zegf4z7UIuw6p:CuqV39","tlshash":"1fa253e0db4ab31ee02a011dd5d1eb28385b3603fbb64e76fb20d52ec1ce16497d42a5","first_seen":"2026-09-29T00:45:26.826036Z","last_seen":"2026-09-29T05:07:11.954095Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1406,"timings":{"blocked":-1,"dns":0,"connect":341,"send":0,"wait":345,"receive":370,"ssl":350},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-10862839494\u0026cx=c\u0026gtm=4e69p1h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:23.543Z","timestamp":1790658203543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/destination?id=AW-10862839494\u0026cx=c\u0026gtm=4e69p1h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 05:03:23 GMT\r\nexpires: Tue, 29 Sep 2026 05:03:23 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 166794\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493835,"size_decoded":167783,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"90ff22e9ec269024ed69c107a62e0354","sha1":"ebffb4bb544539cac19c1f15e78d8c112db085b5","sha256":"adea6a400a224fe7f7219bbfb5a057fab5019d471c519d88b5c44fc8f0867631","sha512":"27a9c79dd2f4d045665ab80b97f048f06444e704e557eec25d707cc0706a2cf49867067eed8b95c2f6b7147700688401456e32aa07b3e8fc3480bbccacb60209","ssdeep":"6144:8EmtSwEkcLzLGISjYLBSZRvGciju12oejbqEG234vfGgIaeQ/IU:8WTX3SXgju1pxGgGQD","tlshash":"13b4f7cd73ca74229396f578903f01cba57b29a2b44cc896b289dce42d3469a5173f7c","first_seen":"2026-09-29T05:04:33.001329Z","last_seen":"2026-09-29T05:04:33.001329Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hotrovnpay.com/1889324617.cloud.edgevnpay.vn/_next/static/chunks/pages/_app-a072acccd1a78dcb.js","fqdn":"hotrovnpay.com","domain":"hotrovnpay.com","tld":"com"},"ip":{"addr":"15.235.140.81","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.048Z","timestamp":1790658197048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hotrovnpay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 06:31:32 GMT","end":"Sat, 12 Dec 2026 06:31:31 GMT"},"fingerprint":{"sha1":"47:7B:03:9E:A4:6C:5B:38:58:6D:CD:C2:BB:BA:0E:1D:E8:1B:3D:54","sha256":"B9:F6:5C:45:76:17:32:A2:1C:A5:C8:F1:F5:9A:74:85:BC:3C:0B:3A:CC:2B:DC:3B:92:43:44:BA:39:A4:58:C3"}}},"request":{"raw":"GET /1889324617.cloud.edgevnpay.vn/_next/static/chunks/pages/_app-a072acccd1a78dcb.js HTTP/1.1\r\nHost: hotrovnpay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 29 Sep 2026 05:03:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 07:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4f4946-71cd8\"\r\nexpires: Tue, 29 Sep 2026 17:03:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":466136,"size_decoded":149860,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bf25e6b1d12df966eed851121edcf380","sha1":"1a6f96d1e5e387fe64a3b74fe37561abb79ae719","sha256":"79b7a0fd6c202addf61dc09a14ed10db82539fb34b197dc80024950b85bd40b3","sha512":"46c8657c912d82671918992c722abfb6e8b770233a7a2152b5eda22e2ab785f48a940032d4726058cf9b2358aa945dc3182b86b4db072a3b17dc183a4cc615bc","ssdeep":"6144:xKJJrZMSsN6sHwWVzIK9WoPnvRkyH+b7H0COdtCpJcXX7wmq2Jb5EH:xEJrZYIunJWOdfJbo","tlshash":"aaa44bc972d1b06243e741f9407f510bf33a6959280d8858f275e8e678f5a8e92b3f39","first_seen":"2026-09-29T00:45:26.799612Z","last_seen":"2026-09-29T05:07:11.967872Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1045,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"hotrovnpay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/media/Inter-VariableFont.7385e8d9.ttf","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.729Z","timestamp":1790658199729,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/media/Inter-VariableFont.7385e8d9.ttf HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hotrovnpay.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1889324617.cloud.edgevnpay.vn/_next/static/css/9fc7a2e59369813c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:22 GMT\r\nContent-Type: font/ttf\r\nContent-Length: 804612\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":804612,"size_decoded":804849,"mime_type":"font/ttf","magic":"TrueType Font data, 19 tables, 1st \"GDEF\", 50 names, Microsoft, language 0x409","md5":"32204736a4290ec41200abe91e5190d1","sha1":"26752c31bd3be24b0608ee27ac8c9a9a27245268","sha256":"cf3cb43b0366e2dc6df60e1132b1c9a4c15777f0cd8e5a53e0c15124003e9ed4","sha512":"fc6ee5429ce64f9144f27be67cdd572d8a2f543ab92ee292e757bbce55a35b0058f3006fc680a45ce8cbac8e39748338d9a8562e3a21e8afa2f9b88b87ff228f","ssdeep":"12288:SXpgXHcNAygxZJ6/gVROEODDI9BWDOL5I8F5wrMXjSL2tr23t5HC2yOU8:S5gXcNAygxZJ64V4DDYZWmY5MOU8","tlshash":"5d058d37f796a91dd12e0b74c3f3cf6267357861af27530baa1639639e433e42608285","first_seen":"2023-10-14T00:46:20Z","last_seen":"2026-10-11T01:44:37.377949Z","times_seen":1102,"resource_available":false,"data":null}},"time_used":5385,"timings":{"blocked":1252,"dns":0,"connect":0,"send":0,"wait":2197,"receive":1936,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/assets/images/home/banner-02-min.png","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:21.095Z","timestamp":1790658201095,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /assets/images/home/banner-02-min.png HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 196438\r\nLast-Modified: Tue, 22 Sep 2026 07:49:03 GMT\r\nAccept-Ranges: bytes\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":196438,"size_decoded":196676,"mime_type":"image/png","magic":"PNG image data, 1080 x 876, 8-bit/color RGBA, non-interlaced","md5":"38f1aae20cd580d5b546f414bf5e5020","sha1":"406908685fb82670eb7994c5acd8727547a66e78","sha256":"da11371aed22a932b405307bb803769be1fd3e66d5b6b2bcd2e9b6894e429709","sha512":"4d1fea123c80ef3d56ae7e1712f90ec3f596c58aa7e151e5bb13e34b791235ddb45347459ac93e3d22a0eeef465fdb2947c2b43a2cba58d525edda89e1ac3d88","ssdeep":"3072:tNCqNd4YqCb7CvDEjpB9vx8puO8tEr9Q3XMtjp76wAoL62Rr2MunVi+KfsA4i81o:tVNdrdb7CvDE1Lvx8pkg9Q3XMFZDL62z","tlshash":"1f1423c1e0427343e629bcfe17ea0fddaab151152d1c288869cfa50704b4ee5fad5257","first_seen":"2026-09-29T00:45:26.886528Z","last_seen":"2026-09-29T05:07:11.962375Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":866,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-57J2NCJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:23.054Z","timestamp":1790658203054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtm.js?id=GTM-57J2NCJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 05:03:23 GMT\r\nexpires: Tue, 29 Sep 2026 05:03:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 29 Sep 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 168846\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508046,"size_decoded":169496,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12344)","md5":"13ea86f81d36560792489ad866f197dc","sha1":"dc933db927900045a8f886b1eaaebc7a87539f1d","sha256":"87ebedc94a97eb85a29149de7a9ad21068fc22c168b2ea26f0819e33f166c3e9","sha512":"631883253b2d0a9d3f5166ebbfb31634d5219deb4a72abd034063396080ba49b4e6e3dd60da803c381342780e2898cb8ec42dab3ce86622b0d06f43aa0d2f86d","ssdeep":"6144:ZEmtSwE+cLzAGISjYLBSZRvGciju12oejbqEG234vfGNOaeE+cUXU:ZWp43SXgju1pxGNQED","tlshash":"8cb429ce73c6746293a2f578903f018ba57b29a2b84cc895f289dce42d3465a5173f7c","first_seen":"2026-09-29T05:04:33.008306Z","last_seen":"2026-09-29T05:04:33.008306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":1,"connect":14,"send":0,"wait":38,"receive":46,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/assets/images/web-icon/icon-search.svg","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.862Z","timestamp":1790658197862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /assets/images/web-icon/icon-search.svg HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 268\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nLast-Modified: Tue, 22 Sep 2026 07:49:03 GMT\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":268,"size_decoded":507,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf5eab7c37f69f019e591395e8cf9dcf","sha1":"66b509e15de53c953a322cda9744e43be0246978","sha256":"d4557a4705c7aee788ad02530cd9d89acdd7aca191a432bc1d28921a337a5526","sha512":"f1352e3149c70f1e6da032bda747f45795dba5b48b73aaa7f7dc98b7ca4fd653e5d3fad437b45fd1d3da8d5b2a48315007b748aad57eb067b2a8b55b1672f9e3","ssdeep":"","tlshash":"4ad02e2a6298c834f139c528e30670a910fb202a8a492264c4a12536708c9ab383b6ee","first_seen":"2025-07-28T03:31:52.932547Z","last_seen":"2026-09-29T05:07:11.94117Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1414,"timings":{"blocked":-1,"dns":218,"connect":562,"send":0,"wait":312,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/assets/images/nation-flags/vi-icon.svg","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:17.863Z","timestamp":1790658197863,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /assets/images/nation-flags/vi-icon.svg HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:18 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 709\r\nLast-Modified: Tue, 22 Sep 2026 07:49:03 GMT\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709,"size_decoded":948,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"257cf327dec3f4fc7e0ced0376189317","sha1":"22d844c878506df22669ef443d65a310548fad5c","sha256":"ae690d89668a4ed0528353321b00d3fb6d773a3815a17c49996c59d951e4633c","sha512":"09fabf487e6cfff00826c85daa94cc845af415812697cce673b4b46944d90003bee3170581869cc71b49f5744c699ed07a19c502805bb058079f1935e63bef5a","ssdeep":"","tlshash":"19019ce5a12452c64a5f0b892db830a6207835faf2784648f3101abadd429e83ca685f","first_seen":"2025-07-28T03:31:52.933456Z","last_seen":"2026-10-02T15:24:09.845666Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":217,"connect":315,"send":0,"wait":323,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1889324617.cloud.edgevnpay.vn/_next/static/chunks/75363.f07cb37cb63a2a22.js?v=30","fqdn":"1889324617.cloud.edgevnpay.vn","domain":"edgevnpay.vn","tld":"vn"},"ip":{"addr":"103.161.39.7","port":443,"asn":140770,"as":"Digilife Vietnam Digital Services Company Limited","country":"Vietnam","country_code":"VN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hotrovnpay.com/","date":"2026-09-29T05:03:19.704Z","timestamp":1790658199704,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud.edgevnpay.vn","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 17:09:13 GMT","end":"Sat, 26 Dec 2026 17:09:12 GMT"},"fingerprint":{"sha1":"B5:CF:A2:78:0E:88:29:A4:E0:F7:B6:EF:87:79:49:A4:4F:D8:99:DA","sha256":"95:4B:4B:CE:11:65:F2:E7:F5:B8:C5:7F:22:35:4C:09:6B:88:8C:80:78:78:95:CB:A2:F0:B5:C3:A1:CE:2D:4D"}}},"request":{"raw":"GET /_next/static/chunks/75363.f07cb37cb63a2a22.js?v=30 HTTP/1.1\r\nHost: 1889324617.cloud.edgevnpay.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hotrovnpay.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 29 Sep 2026 05:03:19 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 9033\r\nLast-Modified: Tue, 22 Sep 2026 07:49:05 GMT\r\nX-Cache-Flow: STC\r\nX-Cache: HIT\r\nAccept-Ranges: bytes\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9033,"size_decoded":9297,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9033), with no line terminators","md5":"f4af16ab889f99c70818a1164d427109","sha1":"cacf75ff33e72ff178b0cafd7314f1abd2180b94","sha256":"6798d4d54975bcaeff5296aee01f80be6fd35822fb946b172740d507c8a8a2d4","sha512":"52c86b9d0c3a4a2ec193782f49f678f43fc283ffd87e9bd958c0910c3f89bbcf9bae304aec388ef2d249b6cdc8877ef50895fecae435de1bfb2ffb00bee72da7","ssdeep":"192:usqCnSWHYL3ZmZzpUCWHoYpRDavPCUFRpoHWVCivLDDfJy9ypkzA3xnTaDwpUx:u8n9Ubb2dHSzAe","tlshash":"631209b1f255b27a4b6a94dd403f1924706b1b1ca444ecd9f2b1c8ba64c53cd44b2fdb","first_seen":"2026-09-29T00:45:26.857821Z","last_seen":"2026-09-29T05:07:11.958245Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1158,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}