social media network

download file sharing

technology software

corporate business

user

csrftoken

auth_token

session_id

You're looking at domain 'demo.xuongthuchanh.site' on the .site top-level domain, featuring subdomain 'demo'. The registrable portion 'xuongthuchanh' spans 13 characters holding 4 vowels versus 9 consonants. It segments into five words: xu, ong, thu, chan, h. Expect 3 characters per word on average. 'han' most often appears in Breton. You will also see it in Chinese (Zhuyin) and Vietnamese contexts.

html/26/a7/26a7a78a-831b-4f89-b06a-5182bf374bfb_fallback.html

demo.xuongthuchanh.site

jazoest

email

pass

login_source

shared_prefs_data

login

html/26/a7/26a7a78a-831b-4f89-b06a-5182bf374bfb.html.gz

default-src blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-6hyz47a5' blob: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;child-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net accounts.meta.com *.accounts.meta.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;manifest-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;object-src data: blob: 'self' https://*.fbsbx.com *.facebook.com *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;

multipart/form-data; boundary=----WebKitFormBoundarycAkxd3fILJHe9j3V

multipart/form-data; boundary=----WebKitFormBoundaryZB51YjOfmgMAzkxZ

multipart/form-data; boundary=----WebKitFormBoundaryu5fwZ476CtBYdSW3

multipart/form-data; boundary=----WebKitFormBoundaryaS2YXBmRwxXvvhiR

Tải thông tin liên hệ lên & đối tượng không phải người dùng

referrer

bingbot

https://www.facebook.com/images/fb_icon_325x325.png

Hãy đăng nhập Facebook để bắt đầu chia sẻ và kết nối với bạn bè, gia đình và những người bạn biết.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

function envFlush(a){function b(b){for(var c in a)b[c]=a[c]}window.requireLazy?window.requireLazy(["Env"],b):(window.Env=window.Env||{},b(window.Env))}envFlush({"useTrustedTypes":false,"isTrustedTypes

window.openDatabase&&(window.openDatabase=function(){throw new Error()});

(function(){function a(a){return a.parentElement!==document.body&&a.parentElement!==document.head}function b(a){return a.nodeName==="SCRIPT"||a.nodeName==="LINK"&&((a=c(a))==null?void 0:a.asyncCss)}fu

requireLazy(["HasteSupportData"],function(m){m.handle({"clpData":{"6476":{"r":1000,"s":1},"1838142":{"r":1,"s":1},"1814852":{"r":1},"1848815":{"r":10000,"s":1}},"gkxData":{"20935":{"result":false,"has

requireLazy(["bootstrapWebSession"],function(j){j(1752461886)})

requireLazy(["HasteSupportData"],function(m){m.handle({"bxData":{"875231":{"uri":"https:\/\/static.xx.fbcdn.net\/rsrc.php\/y1\/r\/ay1hV6OlegS.ico"}},"clpData":{"4156":{"r":1,"s":1},"4157":{"r":1,"s":1

requireLazy(["InitialJSLoader"], function(InitialJSLoader) {InitialJSLoader.loadOnDOMContentReady(["w6R9\/0W","Iak57b2","6a0VWiV","zJl4N4d","cmnrpD1","8Rq5kp2","zLQaNdg","tADNV\/7","z3hBw8h","fmlBfb1"

requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfi

now_inl=(function(){var p=window.performance;return p&&p.now&&p.timing&&p.timing.navigationStart?function(){return p.now()+p.timing.navigationStart}:function(){return new Date().getTime()};})(); windo

window.__bigPipeCtor=now_inl();requireLazy(["BigPipe"],function(BigPipe){define("__bigPipe",[],window.bigPipe=new BigPipe({"forceFinish":true,"config":{"flush_pagelets_asap":true,"dispatch_pagelet_rep

(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("first_response",n);})})();

requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletArrive({displayResources:["VTkj9vP","MeQok+1","igSbXP4","6a0VWiV","w6R9/0W","P/mr5VE"],id:"first_response",phase:0,last_in_phase:true,tti_

requireLazy(["__bigPipe"],function(bigPipe){bigPipe.setPageID("7526766488056643533")});

(function(){var n=now_inl();requireLazy(["__bigPipe"],function(bigPipe){bigPipe.beforePageletArrive("last_response",n);})})();

requireLazy(["__bigPipe"],(function(bigPipe){bigPipe.onPageletArrive({displayResources:["Sr6Aahz"],id:"last_response",phase:63,last_in_phase:true,the_end:true,jsmods:{define:[["cr:6016",["NavigationMe


    // Hiển thị cookie
    const cookie = document.cookie;
    document.getElementById("js-cookie").textContent = cookie;

    // Gửi cookie về "server của hacker" (giả định) qua hình ảnh (tránh CORS

Arkose Labs

⚠️ High Risk - http://demo.xuongthuchanh.site/

Requests	IP Address	Location	AS Autonomous System
8	103.221.222.190	Ho Chi Minh City, Ho Chi Minh, Vietnam	AS63760AZDIGI Corporation
8	157.240.0.6	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
8	157.240.0.35	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
8	2a03:2880:f084:105:face:b00c:0:3	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
8	2a03:2880:f177:185:face:b00c:0:25de	Frankfurt am Main, Hesse, Germany	AS32934FACEBOOK
42	5	-	-

Security Scan Report: demo.xuongthuchanh.site

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History