| inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php |  45.252.248.26 | 301 Moved Permanently | 707 B |
URL User Request GET HTTP/1.1inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php IP45.252.248.26:80 ASN#63760 AZDIGI Corporation
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash1304294c0823ca486542ba408ed761e3 b2a70fb2d810ca13985882e6981f33998823e83e 3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /.gdd/more/more/modified/acccess/fre.php HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Wed, 17 Apr 2024 14:08:56 GMT
server: LiteSpeed
location: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
|
|
| fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C700%2C300italic&ver=6.2.5 |  142.250.74.106 | 200 OK | 2.3 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C700%2C300italic&ver=6.2.5 IP142.250.74.106:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hashbc98dd9c4c5516e3f80f884f733dcd79 d552acccca9df6e459f3e72ae7bfba71465f3559 608bc3cc0641e6c4adcba1b3d6604d983a077c14130723d8720edebabc288f9c
GET /css?family=Open+Sans%3A300%2C400%2C700%2C300italic&ver=6.2.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 14:08:57 GMT
date: Wed, 17 Apr 2024 14:08:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| inhanoi.net.vn/wp-content/cache/autoptimize/css/autoptimize_1f23eb978db9fa7088d1d3733f039da5.css | 45.252.248.26 | 200 OK | 183 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/cache/autoptimize/css/autoptimize_1f23eb978db9fa7088d1d3733f039da5.css IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeASCII text, with very long lines (48325) Size183 kB (182905 bytes) Hashc2d050e01c373cd67093a83160b48072 e4e265d8a890815c973a0e473a53b4ae4c06d1e6 afb451a08a74d59a1b33239a8d73c7a369264a9b2af1a2a0feb062fe4cd36a2f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/cache/autoptimize/css/autoptimize_1f23eb978db9fa7088d1d3733f039da5.css HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=30672000,public, immutable
expires: Mon, 07 Apr 2025 14:08:57 GMT
content-type: text/css
last-modified: Tue, 02 Apr 2024 17:39:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 182905
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-includes/css/dashicons.min.css | 45.252.248.26 | 200 OK | 35 kB |
URL GET HTTP/3inhanoi.net.vn/wp-includes/css/dashicons.min.css IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeASCII text, with very long lines (58981) Hashd68d6bf519169d86e155bad0bed833f8 27ba9c67d0e775fc4e6dd62011daf4c3902698fc c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dashicons.min.css HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: text/css
last-modified: Wed, 03 Mar 2021 21:16:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 35200
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-includes/js/jquery/jquery.min.js | 45.252.248.26 | 200 OK | 32 kB |
URL GET HTTP/3inhanoi.net.vn/wp-includes/js/jquery/jquery.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash0e850a69bc7fd0acc2e92ce6eee87959 8be6d9e7f7a61ccf0b8eac8a8144d770b608a19c afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Wed, 08 Mar 2023 18:37:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 32020
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-includes/js/jquery/jquery-migrate.min.js | 45.252.248.26 | 200 OK | 4.9 kB |
URL GET HTTP/3inhanoi.net.vn/wp-includes/js/jquery/jquery-migrate.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (13326) Hash5cfa2b481de6e87c2190a0e3538515d8 0fccf3c8ab2c10b4dcc7970e64ce997ab1622f68 9810aee7e6d57d8cceaa96322b88e6df46710194689ae12b284149148cabc2f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Mon, 06 Feb 2023 20:59:15 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4926
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js | 45.252.248.26 | 200 OK | 54 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (32017), with CRLF line terminators Hash2ec3a56df4362d8896c3f381a1cb4bcf 84f26838aafcfbf19b649d8e73375a85c830cf3a 1d35b97cb8449be02c40553556f1031c7a300781586bc3a3447c197aafd6e1ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/revslider/public/assets/js/revolution.tools.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Thu, 16 Jan 2020 02:40:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 54532
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/revslider/public/assets/js/rs6.min.js | 45.252.248.26 | 200 OK | 75 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/revslider/public/assets/js/rs6.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (64272) Hash5feaf27da9e25de3bc8157ac83bb2963 9ce876e79d0e42e98932d76852506d8bb165b3a7 2f2ca1625d190a0b70d8632dfabc0e4a5558266c9f03386da097fe3819af8de7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 17 Jan 2020 09:44:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 75312
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js | 45.252.248.26 | 200 OK | 3.5 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (9139) Hash87c54edf7dad7dfdfde015f6eee45ff1 96ec1a06ea3093c47e1e2fc4444ada7f4456135d ef22199864042b8ceeee3729f3254c140df7217364045737ca3aadf8434fb3da
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 03:20:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3463
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js | 45.252.248.26 | 200 OK | 1.1 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (3037), with no line terminators Hash8bc2109ef48cabf7a26b73d7c3536c5f 0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b 8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 03:20:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1062
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js | 45.252.248.26 | 200 OK | 359 B |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text Hash787fe4f547a6cb7f4ce4934641085910 c2dee88d5bdfef214ce9c56f71a1df51cda0f328 654aaebdea944313257827be97eb196a8218a2cdfc9ba399db23e2cd4c02bd79
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Thu, 09 Dec 2021 03:55:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 359
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/themes/rocketweb/js/modernizr.js | 45.252.248.26 | 200 OK | 4.1 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/themes/rocketweb/js/modernizr.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (9019) Hashe6c353b0df611eade595734940bd3fca f5404dcb1b5a321be207b37dd9402b173bf51f5d df6845ed2adef5eed319985cf3c24801b6f2be38df3293b95688253a182601fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/rocketweb/js/modernizr.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 08 Aug 2014 04:11:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4073
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/themes/rocketweb/js/head.js | 45.252.248.26 | 200 OK | 24 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/themes/rocketweb/js/head.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (32074) Hashaf35b21be66f415d8c20d63d886823d5 6424402e69ab8947066a87bac60257013804076d 379f3b10f6e25dc11302349b545c7461cf84aa688e44da6af4e027b01b0909d4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/rocketweb/js/head.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Tue, 09 Sep 2014 05:26:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 24068
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-includes/js/hoverIntent.min.js | 45.252.248.26 | 200 OK | 711 B |
URL GET HTTP/3inhanoi.net.vn/wp-includes/js/hoverIntent.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (1464) Hash8c0498e2f1f7a684a8d2a3feb934b64b 76099689ccaee466d4608da621c403b368dcae03 ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/hoverIntent.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 08 Apr 2022 20:07:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 711
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-includes/js/underscore.min.js | 45.252.248.26 | 200 OK | 7.6 kB |
URL GET HTTP/3inhanoi.net.vn/wp-includes/js/underscore.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (18798) Hashf88d5720bb454ed5d204cbdb56901f6b f1952292fde4b15936e9aac16b2b9896684db95b 726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/underscore.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Tue, 27 Sep 2022 15:18:25 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7626
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-includes/js/wp-util.min.js | 45.252.248.26 | 200 OK | 723 B |
URL GET HTTP/3inhanoi.net.vn/wp-includes/js/wp-util.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (1391) Hash19d386c9004e54941c1cc61d357efa5d 0a77594006c8d86fdcc0adbc2b9aecaef3869586 3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-util.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 03:52:10 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 723
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js | 45.252.248.26 | 200 OK | 3.7 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (13590), with no line terminators Hasha49a60e0186f705f693279985371da20 3419d4683879d6a48e051e38356602a2f5094511 3b55a00b09e9df011435d1f358401cf7153066bbfeafdc3384e5d8cdaf4e3262
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 03:20:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3657
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/themes/rocketweb/js/etheme.js | 45.252.248.26 | 200 OK | 16 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/themes/rocketweb/js/etheme.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (2061) Hash526827fa7fd2d1c252169a3bde9eb4ff 1b596473fe5c20f751710295c76cc336253dcc93 301b56de55a391016aaa06acd013f6a676fad65e1fe685a10db79f2f7dea8ae2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/rocketweb/js/etheme.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Tue, 30 Mar 2021 17:05:44 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 16063
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php | 45.252.248.26 | 301 Moved Permanently | 23 kB |
URL User Request GET HTTP/1.1inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php IP45.252.248.26:80 ASN#63760 AZDIGI Corporation
File typeHTML document, Unicode text, UTF-8 text, with very long lines (26677) Hash1be0ab1441a7dce68755ae286c87923a 919eb49d70265be3fff32174ccea00740600361d c2fc4178d0ede08cf2a6741bb03b36d0e5a0ddad805c1acc8e115c66826794d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /.gdd/more/more/modified/acccess/fre.php HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
x-powered-by: PHP/7.2.34
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://inhanoi.net.vn/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: 01e_HTTP.404,01e_404,01e_URL.d82234275b5eaf745e33a4b7d9362174,01e_
x-litespeed-cache: miss
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 14:08:55 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| inhanoi.net.vn/wp-content/uploads/2015/05/3123-3.png | 45.252.248.26 | 200 OK | 4.5 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/uploads/2015/05/3123-3.png IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typePNG image data, 69 x 70, 8-bit/color RGB, non-interlaced Hashc26715672112313b29204e66f41d3aa9 bdfe4a84cedef0f00c6de65af089b287c88f28d2 245a24199611b50acf6e51fd4f8d4e4825ae81be8a68961a91a88dce2cc042cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2015/05/3123-3.png HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: image/png
last-modified: Thu, 31 Dec 2020 02:29:20 GMT
accept-ranges: bytes
content-length: 4538
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/themes/rocketweb/js/jquery.smooth-scroll.js | 45.252.248.26 | 200 OK | 2.3 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/themes/rocketweb/js/jquery.smooth-scroll.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text Hash53ee92df9907e032576b96f07c0fb8d2 4f6f92ef77b8ac094de4acaae79106993891aa15 c16b4bfa8dd3aadbd2429c4332752bbd0a33908d348b04ac3a89682eeb0393e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/rocketweb/js/jquery.smooth-scroll.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Sat, 28 Feb 2015 15:57:38 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2320
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js | 45.252.248.26 | 200 OK | 965 B |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (1668) Hashd0a6d8547c66b0d7b0172466558d1208 ff93916519c7b9483251f609e4d29f38c30a66e3 3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 03:20:31 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 965
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js | 45.252.248.26 | 200 OK | 745 B |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (2139), with no line terminators Hashb72c1cbb1530a011a27bd9800f26765a 27b825c5d8255f33b8427a059d4545ebd65e1746 a256fccecac3b32ab73c91d79a18747519a1a18023be05465c933b03523a82e8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 03:20:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 745
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js | 45.252.248.26 | 200 OK | 1.0 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (2938), with no line terminators Hash0fd625c3991a4015814cffdc88e2fc82 d7c2f53e058210ff3ea773297641008bab71a5f3 2d022db650d194d935faea46a40e5512235b43bc3f8b181e32ce6d3dd745f4e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 01 Jul 2022 03:20:32 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1020
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/themes/rocketweb/js/plugins.js | 45.252.248.26 | 200 OK | 124 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/themes/rocketweb/js/plugins.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32019) Size124 kB (124337 bytes) Hash95375c5e597f9774734114f1d6b9ca93 6c7e8c4887b274968424f44a89d5e92133a3375c 5e8e579e2b2190fb395298feb3e58843b6dc7cd952e7dd3888aa2cbc75d13b57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/rocketweb/js/plugins.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Fri, 24 Oct 2014 09:45:34 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 124337
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://inhanoi.net.vn
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:35:00 GMT
expires: Fri, 11 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 560038
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 | 216.58.207.227 | 200 OK | 17 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 IP216.58.207.227:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 16552, version 1.0 Hash283c40f79deab0300df8b3ffd86dfc7b 2ef09414a573ac59f4b37e81c8b8a881244b345f 35e5eea83f2e5f2bad1213aa4b4aef30a380720e35c1821f19bc894f8e61e406
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://inhanoi.net.vn
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:25:35 GMT
expires: Fri, 11 Apr 2025 17:25:35 GMT
cache-control: public, max-age=31536000
age: 506603
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.227 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP216.58.207.227:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35328, version 1.0 Hash7670dba29aa2a1560c5d711ea6f6b369 6a2a620d2972f139c804c5a8363c91eb1a7595f6 adfa45260a1306cb5fefc1f17c1b5e7b61135534a82bf1b8e3d0540af7e07e3b
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://inhanoi.net.vn
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:26:46 GMT
expires: Wed, 16 Apr 2025 07:26:46 GMT
cache-control: public, max-age=31536000
age: 110532
last-modified: Thu, 14 Dec 2023 02:00:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://inhanoi.net.vn
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:54:31 GMT
expires: Wed, 16 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 130467
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://inhanoi.net.vn
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:35:00 GMT
expires: Fri, 11 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 560038
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| inhanoi.net.vn/wp-content/themes/rocketweb/fonts/fontawesome-webfont.woff?v=4.0.3 | 45.252.248.26 | 200 OK | 44 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/themes/rocketweb/fonts/fontawesome-webfont.woff?v=4.0.3 IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeWeb Open Font Format, TrueType, length 44432, version 1.0 Hash3293616ec0c605c7c2db25829a0a509e 04c3bf56d87a0828935bd6b4aee859995f321693 0fd28fece9ebd606b8b071460ebd3fc2ed7bc7a66ef91c8834f11dfacab4a849
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/rocketweb/fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/wp-content/cache/autoptimize/css/autoptimize_1f23eb978db9fa7088d1d3733f039da5.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:58 GMT
content-type: font/woff
last-modified: Fri, 08 Aug 2014 04:11:44 GMT
accept-ranges: bytes
content-length: 44432
date: Wed, 17 Apr 2024 14:08:58 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/themes/rocketweb/images/medium-cross.png | 45.252.248.26 | 200 OK | 1.1 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/themes/rocketweb/images/medium-cross.png IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typePNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced Hash3d31bf9fbb3a9f5e2cfaec68f4d30f35 f4db3f02e93a77302b8a6b0d0152882bd1a2f18b 7c182e9e23e150b2a9838309b5d52b69d2630ef2465c5f86aea1810bcec07971
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/rocketweb/images/medium-cross.png HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/wp-content/cache/autoptimize/css/autoptimize_1f23eb978db9fa7088d1d3733f039da5.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:58 GMT
content-type: image/png
last-modified: Sat, 16 Aug 2014 09:44:16 GMT
accept-ranges: bytes
content-length: 1138
date: Wed, 17 Apr 2024 14:08:58 GMT
server: LiteSpeed
|
|
| www.googletagmanager.com/gtm.js?id=GTM-W25G9H8 | 142.251.209.136 | 200 OK | 70 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-W25G9H8 IP142.251.209.136:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1900) Hashdf08cb701cea78c189c6124a07227cda b648fdcfafc4322abb2e472bc7e46e44cbfe22f7 06c2513dea63a75b9291e1a5fb40cf1b7b6bb8c820d27f4874b0553911cb033e
GET /gtm.js?id=GTM-W25G9H8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 14:08:58 GMT
expires: Wed, 17 Apr 2024 14:08:58 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 69608
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde | 142.250.74.164 | 200 OK | 1.6 kB |
URL GET HTTP/2www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde IP142.250.74.164:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintCC:CC:99:46:65:6C:77:0B:C8:AA:AD:5E:58:B6:2D:19:B2:C7:0B:06 ValidityMon, 04 Mar 2024 07:19:07 GMT - Mon, 27 May 2024 07:19:06 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2693) Hash2100dfb677301cff7538f5884ea50881 7d1a91206ce99c56ea25eb2f8418762c26df8f86 1ac9957699bcc3f5948bf5c5d194df94e3734d56360cecd85fc4caa845eea8af
GET /maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, must-revalidate
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TFNxk8vaoI9ihYJCS80hew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-type: text/html; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 17 Apr 2024 14:08:58 GMT
server: scaffolding on HTTPServer2
content-length: 1557
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| inhanoi.net.vn/wp-content/uploads/2015/05/cropped-LOGO-180x180.jpg | 45.252.248.26 | 200 OK | 5.5 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/uploads/2015/05/cropped-LOGO-180x180.jpg IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 180x180, components 3 Hash9ce2ee7680ad0f234704882999b6c234 09aa88af9fe6af1525d6c4eda204ca137f7019d0 f26cf970c38f1a282f7a647c4b4cd6fd1f7617073c2a42070b6f043cc4cc7410
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2015/05/cropped-LOGO-180x180.jpg HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:58 GMT
content-type: image/jpeg
last-modified: Wed, 01 Jul 2020 14:47:31 GMT
accept-ranges: bytes
content-length: 5464
date: Wed, 17 Apr 2024 14:08:58 GMT
server: LiteSpeed
|
|
| www.googletagmanager.com/gtag/destination?id=AW-996482017&l=dataLayer&cx=c | 142.251.209.136 | 200 OK | 77 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-996482017&l=dataLayer&cx=c IP142.251.209.136:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintBF:40:8C:8B:CB:69:1E:3F:E2:3B:B7:8A:8E:C0:D6:98:5F:81:FA:2D ValidityMon, 04 Mar 2024 06:35:45 GMT - Mon, 27 May 2024 06:35:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2165) Hash8847c385e29c750f6934fdeedc184e3e f5c305e19d600917b991b3bf8ab972cfc5da52d9 18a95920285388692d8e53ac2b2c97c90584767a0824493f0cd422a203980329
GET /gtag/destination?id=AW-996482017&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 14:08:58 GMT
expires: Wed, 17 Apr 2024 14:08:58 GMT
cache-control: private, max-age=900
last-modified: Wed, 17 Apr 2024 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77086
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.gstatic.com/maps-api-v3/embed/js/56/8/intl/de_ALL/init_embed.js | 142.250.74.3 | 200 OK | 62 kB |
URL GET HTTP/2maps.gstatic.com/maps-api-v3/embed/js/56/8/intl/de_ALL/init_embed.js IP142.250.74.3:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeJavaScript source, ASCII text, with very long lines (3255) Hash854b468678c6674ea303f78e4122d340 aa4c50090ee616fa9457ea911cf2c07aa7f0e06a c97c26c63ac8b5c8b70dd975293788906d133fdec9032501ef4d600de3a8b748
GET /maps-api-v3/embed/js/56/8/intl/de_ALL/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 61809
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 13 Apr 2024 06:44:13 GMT
expires: Sun, 13 Apr 2025 06:44:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:51 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 372286
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=de®ion=de&callback=onApiLoad | 142.250.74.106 | 200 OK | 68 kB |
URL GET HTTP/3maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=de®ion=de&callback=onApiLoad IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (10147) Hashdbc83f54e40e59434b46640afb368a58 7970f2582ffcd004b14b5cfbcaa706097f431470 76a2c1e9351fcf1fa0caa3a6a441c6088f3c7a6e1202b5230babecf8c45ae0a3
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=de®ion=de&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=1800
timing-allow-origin: *
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 17 Apr 2024 14:08:59 GMT
server: scaffolding on HTTPServer2
content-length: 67720
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true | 142.250.74.106 | 200 OK | 23 B |
URL GET HTTP/3maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hash8a80554c91d9fca8acb82f023de02f11 5f36b2ea290645ee34d943220a14b54ee5ea5be5 ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 17 Apr 2024 14:08:59 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.google.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/common.js | 142.250.74.106 | 200 OK | 58 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/common.js IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (6747) Hashdb6e502496636cd88c8862031bcde4aa 7bc59d864380853c1e29ba9b159b7888bf7d628e f4dfb2cbff131a6dac49118f067bca4dc0675ec7cc9101005749544dbd34a2c5
GET /maps-api-v3/api/js/56/8/intl/de_ALL/common.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57481
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 17:30:57 GMT
expires: Thu, 10 Apr 2025 17:30:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:59 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 592682
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/util.js | 142.250.74.106 | 200 OK | 57 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/util.js IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (562) Hashc58e8d9cb917b7acccc75fad0001b7cb 0cc8e2339c4511610a3a296a1d61d6e4d0521a82 7a718ccd110e994cd2516fa3b17fef2aaac997ea2d95c11cdb11a4933d8ccaaf
GET /maps-api-v3/api/js/56/8/intl/de_ALL/util.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 57086
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 17:30:57 GMT
expires: Thu, 10 Apr 2025 17:30:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:59 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 592682
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/map.js | 142.250.74.106 | 200 OK | 24 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/map.js IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (2532) Hash205835be3e2095413e23eec112061a00 166fd8bbf1c713f6bb19d17f4fa63be9cec1c5ae 98844afecb66d25357910604ce2bb8c7789c28ca114e03bb9c67a2040e885b82
GET /maps-api-v3/api/js/56/8/intl/de_ALL/map.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 24129
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 17:30:57 GMT
expires: Thu, 10 Apr 2025 17:30:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:59 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 592682
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/overlay.js | 142.250.74.106 | 200 OK | 1.3 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/overlay.js IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (1205) Hashe6e80bdce424a4e1058e6d44cd4a856d 6501045303f01c7e01126ebf96c462fd14c26b1d 8d1b3320098835a8d454e7c21651f4302ddc00f5c1b15c6e2615fcfdd41e7b6c
GET /maps-api-v3/api/js/56/8/intl/de_ALL/overlay.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 1289
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 17:30:57 GMT
expires: Thu, 10 Apr 2025 17:30:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:59 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 592682
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/search_impl.js | 142.250.74.106 | 200 OK | 1.3 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/search_impl.js IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (1499) Hash99f104c22ed7b13cddf079260a629a26 431d1e4f91fc63c47432d33fc6dd447f6037ad05 ee01dc6df7e8629721acf2520c8f73e44dc86fdf765c98f966165421ec424391
GET /maps-api-v3/api/js/56/8/intl/de_ALL/search_impl.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 1265
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 17:30:57 GMT
expires: Thu, 10 Apr 2025 17:30:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:59 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 592682
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/onion.js | 142.250.74.106 | 200 OK | 9.2 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/onion.js IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJavaScript source, ASCII text, with very long lines (2924) Hashd0ca033ff4017e07f487819c7c364063 bd268e9f9e4ab87b399d4b905494d91743eeadd7 05c08160b10d76c16265d9fa000615c0d8fef3e25ed19ddeedef14031c9734a5
GET /maps-api-v3/api/js/56/8/intl/de_ALL/onion.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 9199
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 17:30:57 GMT
expires: Thu, 10 Apr 2025 17:30:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:59 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 592682
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| inhanoi.net.vn/wp-content/uploads/2015/05/cropped-LOGO-192x192.jpg | 45.252.248.26 | 200 OK | 5.7 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/uploads/2015/05/cropped-LOGO-192x192.jpg IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 192x192, components 3 Hash8654c1c846536bd281fa7ec2cc323780 7fa4898af23335bf4e780ce82006e73d7cce33f3 bb3beb85fc1163ac4412d6ddd39075011f48ba6379e5ad02184f8818433fd8f0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2015/05/cropped-LOGO-192x192.jpg HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:59 GMT
content-type: image/jpeg
last-modified: Wed, 01 Jul 2020 14:47:31 GMT
accept-ranges: bytes
content-length: 5682
date: Wed, 17 Apr 2024 14:08:59 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/wp-content/uploads/2015/05/cropped-LOGO-32x32.jpg | 45.252.248.26 | 200 OK | 1.1 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/uploads/2015/05/cropped-LOGO-32x32.jpg IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 32x32, components 3 Hash010cc77389e6cc5d4b31e5efc37562b3 3bd98f81930d5d30143121135e061fc7eee96c4c 56942b46f141c7f6e3ac57019ebbc1a80d92734c4dcf5821abefbef1eeb493ff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2015/05/cropped-LOGO-32x32.jpg HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:59 GMT
content-type: image/jpeg
last-modified: Wed, 01 Jul 2020 14:47:31 GMT
accept-ranges: bytes
content-length: 1062
date: Wed, 17 Apr 2024 14:08:59 GMT
server: LiteSpeed
|
|
| inhanoi.net.vn/?wc-ajax=get_refreshed_fragments | 45.252.248.26 | 200 OK | 288 B |
URL POST HTTP/3inhanoi.net.vn/?wc-ajax=get_refreshed_fragments IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
Hashc4316656ad414900620fc81c165e1e84 816f1788c5e69433c02ff0ecf14b96080e6df6fe 67e5f34c116c0b321f20c8ac1c40eb4398096b268d2ff06bae19d02a2d3d7853
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://inhanoi.net.vn
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-powered-by: PHP/7.2.34
x-pingback: https://inhanoi.net.vn/xmlrpc.php
access-control-allow-origin: https://inhanoi.net.vn
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
x-litespeed-tag: 01e_HTTP.200,01e_HTTP.200
content-type: application/json; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-litespeed-cache-control: no-cache
content-length: 288
date: Wed, 17 Apr 2024 14:08:59 GMT
server: LiteSpeed
|
|
| maps.gstatic.com/mapfiles/openhand_8_8.cur | 142.250.74.3 | 200 OK | 326 B |
URL GET HTTP/3maps.gstatic.com/mapfiles/openhand_8_8.cur IP142.250.74.3:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeMS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8 Hashfeff9159f56cb2069041d660b484eb07 0d0a08cf25a258511957f357b89d3908f3c5e6e3 7342f390b12f636d14e25f698fc5e38cf6240994dc0c07fefbbb4e78ec4d03c7
GET /mapfiles/openhand_8_8.cur HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/bmp
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 326
date: Wed, 17 Apr 2024 14:08:59 GMT
expires: Wed, 17 Apr 2024 14:08:59 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| inhanoi.net.vn/wp-admin/admin-ajax.php | 45.252.248.26 | 400 Bad Request | 5 B |
URL POST HTTP/3inhanoi.net.vn/wp-admin/admin-ajax.php IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typevery short file (no magic) Hashcfcd208495d565ef66e7dff9f98764da b6589fc6ab0dc82cf12099d1c2d40ab994e8410c 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /wp-admin/admin-ajax.php HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 29
Origin: https://inhanoi.net.vn
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
x-powered-by: PHP/7.2.34
access-control-allow-origin: https://inhanoi.net.vn
access-control-allow-credentials: true
content-type: text/html; charset=UTF-8
x-robots-tag: noindex
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-litespeed-tag: 01e_HTTP.400
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-litespeed-cache-control: no-cache
content-length: 5
content-encoding: br
vary: Accept-Encoding
date: Wed, 17 Apr 2024 14:08:59 GMT
server: LiteSpeed
|
|
| maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i6659897&2i3693484&2e1&3u15&4m2&1u360&2u215&5m5&1e0&5sde&6sde&10b1&12b1&client=google-maps-embed&token=63220 | 142.250.74.106 | 200 OK | 33 kB |
URL GET HTTP/3maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i6659897&2i3693484&2e1&3u15&4m2&1u360&2u215&5m5&1e0&5sde&6sde&10b1&12b1&client=google-maps-embed&token=63220 IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typePNG image data, 360 x 215, 8-bit colormap, non-interlaced Hash9548450cf9c7819de0b357d37d470ab1 e5b6e9fc99b99b31122628367fe63ec599ccb4d0 dd26f59e8bed560a7cbcce215a5ebcc40b62f919408f6b84a2f215e7d61c8376
GET /maps/api/js/StaticMapService.GetMapImage?1m2&1i6659897&2i3693484&2e1&3u15&4m2&1u360&2u215&5m5&1e0&5sde&6sde&10b1&12b1&client=google-maps-embed&token=63220 HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
date: Wed, 17 Apr 2024 14:08:59 GMT
expires: Thu, 18 Apr 2024 14:08:59 GMT
cache-control: public, max-age=86400
server: scaffolding on HTTPServer2
content-length: 32705
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=136
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo | 142.250.74.106 | 200 OK | 0 B |
URL OPTIONS HTTP/3maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-goog-maps-api-salt,x-goog-maps-api-signature,x-goog-maps-channel-id,x-goog-maps-client-id,x-user-agent
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.google.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-goog-maps-api-salt,x-goog-maps-api-signature,x-goog-maps-channel-id,x-goog-maps-client-id,x-user-agent
access-control-max-age: 3600
date: Wed, 17 Apr 2024 14:08:59 GMT
content-type: text/html
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo | 142.250.74.106 | 200 OK | 2.7 kB |
URL OPTIONS HTTP/3maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashb45c92f0ab699498fa403812d92e3fed 0f3623da3c97d8ab322454ccade2a39845f76cb5 158024688b1cc3cfdd789652587139eb26d2217aa09d7dc04230e2b81c25919d
POST /$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key:
Content-Type: application/json+protobuf
X-Goog-Maps-Channel-Id:
X-Goog-Maps-Client-Id: google-maps-embed
X-Goog-Maps-API-Salt: kVw8iS9soq
X-Goog-Maps-API-Signature: 4026
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 168
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Wed, 17 Apr 2024 14:08:59 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 2698
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.google.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26015!3i14428!4i256!2m3!1e0!2sm!3i689434229!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63190 | 142.250.74.164 | 200 OK | 27 kB |
URL GET HTTP/3www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26015!3i14428!4i256!2m3!1e0!2sm!3i689434229!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63190 IP142.250.74.164:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typePNG image data, 256 x 256, 8-bit colormap, non-interlaced Hash8caa547800e114f90fa590a6c890f75d 9fcfaf0ee15675545b9baa6817aa517d1eeb7864 fd13a8e5d2d26518727642d5954dff472ca385e06c937661f69db1a6043c9fed
GET /maps/vt?pb=!1m5!1m4!1i15!2i26015!3i14428!4i256!2m3!1e0!2sm!3i689434229!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=63190 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
date: Wed, 17 Apr 2024 14:08:59 GMT
expires: Wed, 17 Apr 2024 14:23:59 GMT
cache-control: public, max-age=900
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
etag: 0d3fe5fba07cd00ca
content-security-policy: script-src 'none'; object-src 'none'; base-uri 'none'
x-content-type-options: nosniff
x-server-version-bin: CgoIBBD07vOwBhgB
server: scaffolding on HTTPServer2
content-length: 27297
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=69
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26016!3i14428!4i256!2m3!1e0!2sm!3i689434253!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=46165 | 142.250.74.164 | 200 OK | 29 kB |
URL GET HTTP/3www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26016!3i14428!4i256!2m3!1e0!2sm!3i689434253!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=46165 IP142.250.74.164:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typePNG image data, 256 x 256, 8-bit colormap, non-interlaced Hash2e1149dfc313d6fa27f5b5db315e9d1d 213d234f79cf21988606e58a1e67c6c30fd7f2fd eb4fc7a6347d37e4de377f32a211ac4b73528b5633927256c9995a54f87a731e
GET /maps/vt?pb=!1m5!1m4!1i15!2i26016!3i14428!4i256!2m3!1e0!2sm!3i689434253!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=46165 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
date: Wed, 17 Apr 2024 14:08:59 GMT
expires: Wed, 17 Apr 2024 14:23:59 GMT
cache-control: public, max-age=900
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
etag: 020068c34347bc429
content-security-policy: script-src 'none'; object-src 'none'; base-uri 'none'
x-content-type-options: nosniff
x-server-version-bin: CgoIBBD07vOwBhgB
server: scaffolding on HTTPServer2
content-length: 28891
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=85
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26015!3i14427!4i256!2m3!1e0!2sm!3i689434217!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=7557 | 142.250.74.164 | 200 OK | 30 kB |
URL GET HTTP/3www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26015!3i14427!4i256!2m3!1e0!2sm!3i689434217!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=7557 IP142.250.74.164:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typePNG image data, 256 x 256, 8-bit colormap, non-interlaced Hashfe3950b8d1e05c907177378480434a88 e298d5fc76c784fddde2eab840f962ee8ba4b643 ed88d004f611f2d271fbdd9cceb2342f8f3c806839deee655c890a077938ad1f
GET /maps/vt?pb=!1m5!1m4!1i15!2i26015!3i14427!4i256!2m3!1e0!2sm!3i689434217!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=7557 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
date: Wed, 17 Apr 2024 14:08:59 GMT
expires: Wed, 17 Apr 2024 14:23:59 GMT
cache-control: public, max-age=900
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
etag: 04146a4f7d10799f9
content-security-policy: script-src 'none'; object-src 'none'; base-uri 'none'
x-content-type-options: nosniff
x-server-version-bin: CgoIBBD07vOwBhgB
server: scaffolding on HTTPServer2
content-length: 30044
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=99
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26016!3i14427!4i256!2m3!1e0!2sm!3i689434229!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=629 | 142.250.74.164 | 200 OK | 28 kB |
URL GET HTTP/3www.google.com/maps/vt?pb=!1m5!1m4!1i15!2i26016!3i14427!4i256!2m3!1e0!2sm!3i689434229!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=629 IP142.250.74.164:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
File typePNG image data, 256 x 256, 8-bit colormap, non-interlaced Hashb9e109b28346bf685ae5f52c781da694 1a4aa163c77231b8f13aaa4f59130f0f7b5bd1ab 8c53721b5e2f72e2fafb0b4fe256df95cb80d590bd922bc1c62dcf2e5f6fb755
GET /maps/vt?pb=!1m5!1m4!1i15!2i26016!3i14427!4i256!2m3!1e0!2sm!3i689434229!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=629 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
date: Wed, 17 Apr 2024 14:08:59 GMT
expires: Wed, 17 Apr 2024 14:23:59 GMT
cache-control: public, max-age=900
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
etag: 0875165970fbc406a
content-security-policy: script-src 'none'; object-src 'none'; base-uri 'none'
x-content-type-options: nosniff
x-server-version-bin: CgoIBBD07vOwBhgB
server: scaffolding on HTTPServer2
content-length: 27826
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=119
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/maps/vt?pb=!1m4!1m3!1i15!2i26015!3i14427!1m4!1m3!1i15!2i26015!3i14428!1m4!1m3!1i15!2i26016!3i14427!1m4!1m3!1i15!2i26016!3i14428!2m3!1e0!2sm!3i689434253!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=91191 | 142.250.74.164 | 200 OK | 2.7 kB |
URL GET HTTP/3www.google.com/maps/vt?pb=!1m4!1m3!1i15!2i26015!3i14427!1m4!1m3!1i15!2i26015!3i14428!1m4!1m3!1i15!2i26016!3i14427!1m4!1m3!1i15!2i26016!3i14428!2m3!1e0!2sm!3i689434253!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=91191 IP142.250.74.164:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint02:6C:2F:38:A0:8A:95:AC:E8:2B:67:AA:69:A4:34:6E:15:99:F5:1D ValidityMon, 04 Mar 2024 06:35:50 GMT - Mon, 27 May 2024 06:35:49 GMT
Hashfb24d811f59defe2bf104a74e8ea9caf fca3031b75dee0235a27acc24945523329cf4bee 226219ce05e5e1d714164c970de4d0501a7c2c7d1abc80466a777c3508f9ebe6
GET /maps/vt?pb=!1m4!1m3!1i15!2i26015!3i14427!1m4!1m3!1i15!2i26015!3i14428!1m4!1m3!1i15!2i26016!3i14427!1m4!1m3!1i15!2i26016!3i14428!2m3!1e0!2sm!3i689434253!2m3!1e2!2sspotlit!5i1!3m12!2sde!3sDE!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y3545929968902375351!2y320561748810076437!2s%2Fg%2F11f54n3cz3!4m2!1x210015340!2x1058195150!15sgcid%3Acommercial_printer!2b0!3b0!6b0!8b0&client=google-maps-embed&token=91191 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json
date: Wed, 17 Apr 2024 14:08:59 GMT
expires: Wed, 17 Apr 2024 14:08:59 GMT
cache-control: private, max-age=900
cross-origin-resource-policy: cross-origin
etag: 0e835a6bd4017ca68
content-security-policy: script-src 'none'; object-src 'none'; base-uri 'none'
x-content-type-options: nosniff
x-server-version-bin: CgoIBBD07vOwBhgB
content-encoding: gzip
server: scaffolding on HTTPServer2
content-length: 2733
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=117
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/controls.js | 142.250.74.106 | 200 OK | 25 kB |
URL GET HTTP/3maps.googleapis.com/maps-api-v3/api/js/56/8/intl/de_ALL/controls.js IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (1989) Hash334b56ba4169d3b340c5621bdd65471c 40c49b31403f1b6686ea3526044fc092575964c8 5e44e27149efce3d02903c8b09c7849c9815a10ecf6b9702781e7ca8ec1965fb
GET /maps-api-v3/api/js/56/8/intl/de_ALL/controls.js HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 25311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 Apr 2024 17:31:00 GMT
expires: Thu, 10 Apr 2025 17:31:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 08 Apr 2024 17:51:59 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 592680
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 16:27:38 GMT
expires: Wed, 16 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
age: 78082
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 13:20:56 GMT
expires: Fri, 11 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 521284
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo | 142.250.74.106 | 200 OK | 0 B |
URL OPTIONS HTTP/3maps.googleapis.com/$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.maps.mapsjs.v1.MapsJsInternalService/GetViewportInfo HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-goog-maps-api-salt,x-goog-maps-api-signature,x-goog-maps-channel-id,x-goog-maps-client-id,x-user-agent
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: https://www.google.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-goog-maps-api-salt,x-goog-maps-api-signature,x-goog-maps-channel-id,x-goog-maps-client-id,x-user-agent
access-control-max-age: 3600
date: Wed, 17 Apr 2024 14:09:00 GMT
content-type: text/html
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=de | 142.250.74.106 | 200 OK | 3.6 kB |
URL GET HTTP/3fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=de IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeUnicode text, UTF-8 text, with very long lines (6528) Hash89e83141781178f2e68d21d203fe5e0e 65bb75beee0794e8dfc511ceb58827b318def2e3 bd107b05f1812ada7b65b9fed21781e6cfbd2157bfd177e17d1801c3356c1f80
GET /css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=de HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 14:09:00 GMT
date: Wed, 17 Apr 2024 14:09:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| khms0.googleapis.com/kh?v=976&hl=de&x=3252&y=1803&z=12 | 142.250.74.106 | 200 OK | 16 kB |
URL GET HTTP/3khms0.googleapis.com/kh?v=976&hl=de&x=3252&y=1803&z=12 IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3 Hashbefc22c62f5bb4e6e6709e7c476f60de 54b51db17b7198a2c4540929829d54c8a130ebca 7648aed68bc49f8b64ff4b9cd87826fd89b04bb9a8d5f6bcde7958a96a6f170a
GET /kh?v=976&hl=de&x=3252&y=1803&z=12 HTTP/1.1
Host: khms0.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=31536000
date: Wed, 17 Apr 2024 14:09:00 GMT
expires: Thu, 17 Apr 2025 14:09:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
last-modified: Fri, 1 Jan 2010 01:00:00 GMT
access-control-allow-origin: *
content-type: image/jpeg
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 16180
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| khms1.googleapis.com/kh?v=976&hl=de&x=3251&y=1803&z=12 | 142.250.74.106 | 200 OK | 17 kB |
URL GET HTTP/3khms1.googleapis.com/kh?v=976&hl=de&x=3251&y=1803&z=12 IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3 Hash7dcbe66db250551a92328a33ad6e3821 fcbadab64896187fab3ca89f6a11144cfa8fe33b c2f458f0dc820eefcc6b491506b279b0ddb5d9460dd9298c9c3b6b6640e0cc4e
GET /kh?v=976&hl=de&x=3251&y=1803&z=12 HTTP/1.1
Host: khms1.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 17 Apr 2024 14:09:00 GMT
cache-control: public, max-age=31536000
expires: Thu, 17 Apr 2025 14:09:00 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
x-content-type-options: nosniff
last-modified: Fri, 1 Jan 2010 01:00:00 GMT
content-type: image/jpeg
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 16853
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Roboto%3A400%2C500%2C700%2C300&subset=latin%2Ccyrillic-ext&ver=6.2.5 | 142.250.74.106 | 200 OK | 8.7 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto%3A400%2C500%2C700%2C300&subset=latin%2Ccyrillic-ext&ver=6.2.5 IP142.250.74.106:443
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (8956), with no line terminators Hash91804c0df51e58b0bf469561e1ac2732 cc5a9023e310b49ef8f8ae32bb89ea774fe116ec 8a8aed46bfb9cdec8e34e76343b7e66796cf09926aef42efdfe5fa8a1fdda8aa
GET /css?family=Roboto%3A400%2C500%2C700%2C300&subset=latin%2Ccyrillic-ext&ver=6.2.5 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 14:08:57 GMT
date: Wed, 17 Apr 2024 14:08:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=de | 142.250.74.106 | 200 OK | 302 B |
URL GET HTTP/3fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=de IP142.250.74.106:443
Requested byhttps://www.google.com/maps/embed?hl=vi&pb=!1m14!1m8!1m3!1d3724.7780066643772!2d105.81732628810879!3d21.001534000000003!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3135ac8502d687b7%3A0x472dd364e671115!2sC%C3%B4ng%20ty%20TNHH%20In%20Thi%C3%AAn%20Long!5e0!3m2!1sde!2sde!4v1592038249543!5m2!1sde!2sde CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (311), with no line terminators Hash3feba0cca50c938a7680a6bcbbaa04ef bc03932dc63589e121b3c81b1fa8c5b5ac97433d 545e579413436435581c2669ccea7ebb1720c5133543fc9061da8ece87287bc7
GET /css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=de HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 17 Apr 2024 14:09:00 GMT
date: Wed, 17 Apr 2024 14:09:00 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| inhanoi.net.vn/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js | 45.252.248.26 | 200 OK | 20 kB |
URL GET HTTP/3inhanoi.net.vn/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js IP45.252.248.26:443 ASN#63760 AZDIGI Corporation
Requested byhttps://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php CertificateIssuerLet's Encrypt Subjectmail.inhanoi.net.vn Fingerprint87:C5:5A:4C:5A:D2:90:3B:4D:28:D5:02:1C:42:30:36:37:A4:D6:83 ValidityWed, 13 Mar 2024 18:09:42 GMT - Tue, 11 Jun 2024 18:09:41 GMT
File typeJavaScript source, ASCII text, with very long lines (19905) Hash596d6e5d8400fd1e913f9adc21071f93 fee2d7a4ac08d5a522c2298a5ad3ed30ac9e62ec 159faf7827be43b4c85a35fc941924a9de59a169d42d600b49161f60debf9dff
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js HTTP/1.1
Host: inhanoi.net.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inhanoi.net.vn/.gdd/more/more/modified/acccess/fre.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Wed, 24 Apr 2024 14:08:57 GMT
content-type: application/javascript
last-modified: Thu, 09 Dec 2021 03:55:00 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5815
date: Wed, 17 Apr 2024 14:08:57 GMT
server: LiteSpeed
|
|
0.0.0.0