firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 19:05:24 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gFg2akRb9OU37qeApevKJXpMYI2MRIvzKetl2PoIz88biNY0Z8MQPQ==
Age: 1465
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4212
Expires: Thu, 08 Sep 2022 20:40:01 GMT
Date: Thu, 08 Sep 2022 19:29:49 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u17PLRGur6lUX4cK2RO7lqoOH2RCsjhQ6Yi7TxSF0SUmEUgYlNhU2Q==
age: 56595
X-Firefox-Spdy: h2
sukienvuongquocrong.com/
104.21.56.249200 OK 5.1 kB IP 104.21.56.249:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3293), with CRLF, LF line terminators
Hash 1f59a7e9efddc4f381a78072dee56140
dc6660138076da48f85939178e1a8305b6963cbc
ad6b5589f13f02d7ae6c505e352a862eb51c3f071327b27b5d299bf73440c37c
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.30
set-cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n3Rtx%2FhNuUN%2FGknTBs4dfg8aofdp7ul%2BiPJ7z3ET1oJf7KIQDdpasx%2FZawYe1KRkMa097isY3Me0Opy2Oo%2BZgMALDODHsIAq%2Fl0XsrfNe4PLZukYE4Zau6FG3DNEBcBCCXfd3E8it4Dh%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747a185c082a0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 19:29:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b63f97bc3dce37e8ee6a0c9fcae468fe
cc70326582c0016d7434d0553486734266e57e71
6b3b365123beead4021532b8f2578b3761bbd47af45ed2a461a0476d53aa637d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 08 Sep 2022 18:38:18 GMT
Cache-Control: max-age=3600
Expires: Thu, 08 Sep 2022 19:29:55 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: jjAOLevM9B41nlpvvV681B040fgY4-HhkFK_KTUvjjdMCiytyDYPwA==
Age: 3092
sukienvuongquocrong.com/node_modules/fullpage.js/dist/fullpage.css
104.21.56.249200 OK 2.4 kB URL HTTP/1.1 sukienvuongquocrong.com/node_modules/fullpage.js/dist/fullpage.css
IP 104.21.56.249:0
File type ASCII text, with CRLF line terminators
Hash 437b4498232d0a0accfd8fe0a98262aa
56546b3ea5b4af99a6921eb9822a3e6c4e1e9b8c
7b9b97bb7e586eb43e7a2fd82eae47130e038773ea49aa60d9914a7c1ce0e2db
GET /node_modules/fullpage.js/dist/fullpage.css HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: text/css
Content-Length: 2442
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Thu, 11 Aug 2022 12:14:50 GMT
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KauXuoxdV5Hfa2AvrJRYNnRUutN%2BAghDqc1p5v6Agt8ClWz75z0sNo7liSoOy7mWhUKebGetwsjCSfuL7Cgu23ryMZCfWt%2By0%2FW%2BRgEy3qG2U2jdPnMWmtqWLuGDBUML00ZzBIqvlhYPEg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747a185f1bea0b69-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/products/lastt.css
104.21.56.249200 OK 2.9 kB URL HTTP/1.1 sukienvuongquocrong.com/products/lastt.css
IP 104.21.56.249:0
File type ASCII text, with CRLF line terminators
Hash 77d2a5c6ea95f2c05ef32e5f547ef884
05711cf4f546858d3da6b83a5ec8e5706531b557
36703fd66395af646fc52128a9297f86595c01e10cc1e1b3ea781ec33dde38b2
GET /products/lastt.css HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: text/css
Content-Length: 2935
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Thu, 25 Aug 2022 02:45:30 GMT
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=njnYxhq0yQdsKd5NKnWFUpXIm54mFb%2FOJrf1Fnt9FUqO2cSEjoglybU8AaXMHtCTzJcCewqlyLjydYIVJfWfhAHiOCZtJ2H9goVYsJoXxGuzpsu5%2B%2BaA0fdWa9ooa5JIfeieFfJ%2BPdoReA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747a185f1cb0b515-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/node_modules/fullpage.js/vendors/easings.min.js
104.21.56.249200 OK 909 B URL HTTP/1.1 sukienvuongquocrong.com/node_modules/fullpage.js/vendors/easings.min.js
IP 104.21.56.249:0
File type ASCII text, with very long lines (3241)
Hash 2ded4b052695de9d47b44c4dba30a0f8
76b07d54a6cd7de3129eb73aefa82ec650eddf82
616516893bf589a6ecef939897eda87d456da97218f8f317db43f37bb7a306c6
Analyzer Verdict Alert fortinet Phishing
GET /node_modules/fullpage.js/vendors/easings.min.js HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: application/javascript
Content-Length: 909
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Tue, 23 Aug 2022 15:49:40 GMT
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQ%2FOKAbRjZitgh1huLkhY1Ezp%2FL1UaHQPEXZHjesXMsEpAdvD1aoo60turM3FSQ7%2Byek5puvMUD71Kdb6aEFHaRzbRcRA3CIwdu%2F2Jz9pW175GkOzWsrOszWXwE7onEAlp4fkY4%2FREvZig%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747a185f39b5b4f7-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db3d2d40f373a7ef445874e65d7f0397
087a4802f28647e830222fafc67bda30dec5fc31
4a7ff3bf120d9795d86e370be5fb2987edd4575e1ce0ab1f2f7a66ddf1e5b0d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db3d2d40f373a7ef445874e65d7f0397
087a4802f28647e830222fafc67bda30dec5fc31
4a7ff3bf120d9795d86e370be5fb2987edd4575e1ce0ab1f2f7a66ddf1e5b0d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 61961ee76ab6c28f6e17eb7a1df4a3ea
ab4e8c9c284a0eed6b2fab77c9df432839158b3a
9e3bec23cc8ea49ab4e3a3a244a428c59e6c48c80359c473155584807ba0de41
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/ubuntu/v20/4iCu6KVjbNBYlgoKej76l0mwFg.woff2
142.250.74.163200 OK 50 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCu6KVjbNBYlgoKej76l0mwFg.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 49736, version 1.0\012- data
Hash 6caf49f829d074642e9ac64b1ab2d3a8
10946868ccc5392cfeec80ac31f6c73cb1567b4a
6c325a13c46d6316e828b781145a86b9ad2cc06ffc7b054c611d27ffb5e1761e
GET /s/ubuntu/v20/4iCu6KVjbNBYlgoKej76l0mwFg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sukienvuongquocrong.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 49736
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 21:22:38 GMT
expires: Thu, 07 Sep 2023 21:22:38 GMT
cache-control: public, max-age=31536000
age: 79632
last-modified: Wed, 27 Apr 2022 16:12:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
142.250.74.163200 OK 35 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 34852, version 1.0\012- data
Hash 0e8eefb4549a2edf26c560cb9845952e
8d0b1718aacad934fd0043c87cbc54aa091396bf
7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sukienvuongquocrong.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:28:55 GMT
expires: Thu, 07 Sep 2023 19:28:55 GMT
cache-control: public, max-age=31536000
age: 86455
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2
142.250.74.163200 OK 47 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 46796, version 1.0\012- data
Hash 328da9d0efdf3626073910bfd379b2ff
e55f0b86555b18495045db12654779186c94f0a5
d9086c8c2ed7c9f988d63847cd89e81318c1e4ade2112969af26e5744a3bc7d7
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sukienvuongquocrong.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:32:03 GMT
expires: Thu, 07 Sep 2023 19:32:03 GMT
cache-control: public, max-age=31536000
age: 86267
last-modified: Wed, 27 Apr 2022 16:31:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
142.250.74.163200 OK 30 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 29752, version 1.0\012- data
Hash ab1fc8621287e4ea9319a3136812cf80
fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3
7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sukienvuongquocrong.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 07:00:19 GMT
expires: Fri, 08 Sep 2023 07:00:19 GMT
cache-control: public, max-age=31536000
age: 44971
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2
142.250.74.163200 OK 38 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 37840, version 1.0\012- data
Hash 6957af42676a9a6104e7a8eee1cee92f
05a81c1de245f5abfda3e26e333753a98a90b77f
e4f50b8bf27fec2b2be5907a06a6579a355aa86542322a2434fac71a22c2ea6e
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjvmyNL4U.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sukienvuongquocrong.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 17:25:19 GMT
expires: Fri, 08 Sep 2023 17:25:19 GMT
cache-control: public, max-age=31536000
age: 7471
last-modified: Wed, 27 Apr 2022 17:05:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/ubuntu/v20/4iCu6KVjbNBYlgoKej70l0k.woff2
142.250.74.163200 OK 37 kB URL HTTP/2 fonts.gstatic.com/s/ubuntu/v20/4iCu6KVjbNBYlgoKej70l0k.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 36564, version 1.0\012- data
Hash 3dc4c11f72b9457d49b56d162fb71a19
284248aec91153ee4e89fa3fc51e62f782c4260b
af186659e415490e7eee1bd3c8d511771dbd3e03ddbebf6b6a5096ac8ba29449
GET /s/ubuntu/v20/4iCu6KVjbNBYlgoKej70l0k.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://sukienvuongquocrong.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 36564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:32:07 GMT
expires: Thu, 07 Sep 2023 19:32:07 GMT
cache-control: public, max-age=31536000
age: 86263
last-modified: Wed, 27 Apr 2022 16:13:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash db3d2d40f373a7ef445874e65d7f0397
087a4802f28647e830222fafc67bda30dec5fc31
4a7ff3bf120d9795d86e370be5fb2987edd4575e1ce0ab1f2f7a66ddf1e5b0d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 042105f89c8d64b470d84e052cd412d1
a26c7e2559b3760ea2765b16a3f8d1be27f5dcf4
fadb8cdd22f4d7773d5c20d576f6400ab25e20e1efe3e3fe50d2ae39ca6f2725
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1403
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 19:29:50 GMT
Last-Modified: Thu, 08 Sep 2022 19:06:27 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
sukienvuongquocrong.com/node_modules/fullpage.js/dist/fullpage.js
104.21.56.249200 OK 52 kB URL HTTP/1.1 sukienvuongquocrong.com/node_modules/fullpage.js/dist/fullpage.js
IP 104.21.56.249:0
Hash 7a3722bca731bb165f60a8afec22f88f
6435fe1b7d7ac108c6686ca9d4f764a180eedbb6
2704cd8be3b54df0a99afe7ac0d624da5b9fe5ee5e72e15231201dff141bdc2b
Analyzer Verdict Alert fortinet Phishing
GET /node_modules/fullpage.js/dist/fullpage.js HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: application/javascript
Content-Length: 52445
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Tue, 23 Aug 2022 15:49:40 GMT
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OW6iogwcfs9UyNzyLKvN1qAqvN0g4J%2FZhHaMewo%2FSZidZVYjJj6WnwdRJS8b9QtmeMTmLgx2EDHadM%2FvBDB5cs6ZtKiKcAT9m2fgf%2B5AV%2B1TUb7Q86WfapNTRRoyViaAmgRdkLDl2u5ycw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747a185f3ec80afe-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/giaidapthacmac.png
104.21.56.249200 OK 9.5 kB URL HTTP/1.1 sukienvuongquocrong.com/i/giaidapthacmac.png
IP 104.21.56.249:0
File type PNG image data, 480 x 98, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f1e457de498b2c9f99c3b0e6ad5165f
c349c8de406e236b200795f8fa9cc53e97b89146
9387956d2748e0ecc7fe291c0b8e97e8a5e0a76d10051df854527766e84489bd
GET /i/giaidapthacmac.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: image/png
Content-Length: 9520
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Mon, 15 Aug 2022 06:07:32 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Blz7vg4b95O01DJ94WxQj9B37QXyGhLmz%2B2bNeKEmHG7Ab8KBO06MEbneR%2Feok1kznxplHSPH2%2FwejayptYw09kCLsuqW8Z3JF0Qm2VyezGhtRBsaNiK5WwmQ2pQWXeiF%2BLpx0b5QkxBw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18617943b515-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/logo-garena.png
104.21.56.249200 OK 14 kB URL HTTP/1.1 sukienvuongquocrong.com/i/logo-garena.png
IP 104.21.56.249:0
File type PNG image data, 147 x 147, 8-bit/color RGBA, non-interlaced\012- data
Hash 84feefa03cf6a0673381147e7cea1e89
01f01c0af18345d769d3a26d8b72bd99d6d65a0d
2ac40d1f8ea66062ab5db7165ac6877aa2339b214fd6da8a3189880eef19fc34
GET /i/logo-garena.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: image/png
Content-Length: 14528
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Thu, 25 Aug 2022 02:46:37 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FK6Qh398vrROsCb55mSDFpl5EcHmTpVK8p5iCfMfA2iS7yG%2FxuiZ0lAvqrgPbKxZ%2BjfZxHiiA2Ngtx2dB1wb6wzEnXNvQ4UxtgtLbX8Kah2QRNviQGiBCNJDy3mPYZ8dU%2FlF8LA%2F7PamtA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18617e780b49-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/logo-facebook.png
104.21.56.249200 OK 9.2 kB URL HTTP/1.1 sukienvuongquocrong.com/i/logo-facebook.png
IP 104.21.56.249:0
File type PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Hash ab5918e30d520f33b333dfc81b2b9e10
044acf6f8b48012cacd7c469f7088f2729d74132
f695d58250f759cdfc12bb885b358ef503e406f0c0208abe122b41c0e0fce704
GET /i/logo-facebook.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: image/png
Content-Length: 9160
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Thu, 25 Aug 2022 02:46:35 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DyC25Pp%2BdMD%2FVal3JUtqimVza1ES%2B0x3iOk3PxIwiDruRMfSr6GAcKpqXWUUMKIL1uQ0lUqK%2FJ516ZVJgGlyQ%2BP%2BNWd4pck6PGmFNq2opzWxoYry7ts7Z3XIJEcBTIEzHe%2BInwI6PZm85g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18617cd30b55-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
52.27.12.161101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.27.12.161:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dka7cWm7bLh7+BevtKitLQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 6xmFtiB3H94JEZsvr3BGiGMivi4=
ocsps.ssl.com/
34.237.184.165200 OK 1.9 kB IP 34.237.184.165:0
Hash 1ff28eabbcd16a5d4352977be32f0e6b
0c866e09331db3de181db3fdc8e6adf4c2ce9970
92fda5a853104a2ddffc0d76c32beaf67ef43072f994b8b2a79ce3bc3b733d67
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 19:29:50 GMT
Content-Type: application/ocsp-response
Content-Length: 1883
Connection: keep-alive
Expires: Thu, 15 Sep 2022 01:54:52 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "0c866e09331db3de181db3fdc8e6adf4c2ce9970"
Last-Modified: Thu, 08 Sep 2022 01:54:53 GMT
X-Proxy-Cache: HIT
sukienvuongquocrong.com/i/user-icon.png
104.21.56.249200 OK 1.9 kB URL HTTP/1.1 sukienvuongquocrong.com/i/user-icon.png
IP 104.21.56.249:0
File type PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 80aa65dfc8a1b2f88cfd53baaa842682
9a154a03db2e339a05fa4191941c01c62419c6ef
c7a36a1377c0951c7a0afd7f429f05925647bf6458dad1df81dee845acc7dfac
GET /i/user-icon.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 1870
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Sun, 14 Aug 2022 09:16:34 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xs9F79paJbWAgyopPom%2FOfSl9ytng6tQohPwWmYxNaIwB6jVFGh1hCtIJvRrrda%2BuddP61OT%2Fq7bkwmWP28jjZNxKiYoMT0IlHezeCSVTkXOgZIX0G8symsrQ%2FhzZQdGzw2sKSaCotJVFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a1863bc000afe-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/dangkyngay.png
104.21.56.249200 OK 7.4 kB URL HTTP/1.1 sukienvuongquocrong.com/i/dangkyngay.png
IP 104.21.56.249:0
File type PNG image data, 251 x 98, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c4c9b568d3581eee0a919dc8e43349d
de465da1d4b2777e11a486cf1defa2fa6cf976c8
0b422228924f1715ef22185ced89611bced86eb22f792c12731f14bba6e9df92
GET /i/dangkyngay.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 7394
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Sun, 14 Aug 2022 09:56:38 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LYknCMGCYb4Tfz9kr%2FlULF7n9eDdTY4ZiGqVs8Wu%2BgqpkGhY%2BeA1j1r4QvJ%2BocJ%2F9M5GBgQ1fZKroYsoFMODnSOvzHHDJ4zXUkI%2BKUvC4L3VBs8WZtySIH5ESLaTWvzV1NuFPsNfvr1nKA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a1863dfb80b55-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/video-play.png
104.21.56.249200 OK 30 kB URL HTTP/1.1 sukienvuongquocrong.com/i/video-play.png
IP 104.21.56.249:0
File type PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Hash ea2e1491f62f1959e3b906f6f1b6cb27
34a9bf27f0126ca5bf419ef82605ab5f5c0c523e
e65c08dd02002ae3abc84ba81653dd8dda22fbc533c7b8e00c42b8b78babf8f0
GET /i/video-play.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 29987
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Sun, 14 Aug 2022 10:06:06 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2rhPyzE%2BjMrjy0heEhnIJmCIp56N17Qoyr3%2FClm9kMmAv6ZM7Pm80G%2FFtl01hKMMuLt7ywo9U6hIQk9wU5D4mtMQUe6M0%2B%2BTZAzitMG8ZecPNhbh8ocKfGJ0kzA%2FPsBtGC2k26qyiRVh8w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a1863d9af0b49-OSL
alt-svc: h2=":443"; ma=60
cdn.vn.garenanow.com/web/kg/dtss/images/mo/about-bg.jpg
45.119.240.104200 OK 17 kB URL HTTP/1.1 cdn.vn.garenanow.com/web/kg/dtss/images/mo/about-bg.jpg
IP 45.119.240.104:0
ASN #131418 Vietnam Esports Development Joint Stock Company
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1334, components 3\012- data
Hash 3e5915d9f754e8941de6671b17627392
7fa64ddb4affd8516502b84906639811d5fac7fb
388f7ccc3771def687baeb8b862b1cae53d46486d0590cacede99575dbb79085
GET /web/kg/dtss/images/mo/about-bg.jpg HTTP/1.1
Host: cdn.vn.garenanow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/jpeg
Content-Length: 16946
Connection: keep-alive
Last-Modified: Wed, 09 Mar 2022 03:18:22 GMT
ETag: "62281c7e-4232"
X-Cache-Status: REVALIDATED
X-Handled-By: cdn-master
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
sukienvuongquocrong.com/i/share.png
104.21.56.249200 OK 11 kB URL HTTP/1.1 sukienvuongquocrong.com/i/share.png
IP 104.21.56.249:0
File type PNG image data, 149 x 44, 8-bit/color RGBA, non-interlaced\012- data
Hash c7269883f4db90e84e13968268385157
1dbbc04809ab701fad508d22804ffb48f08d161d
927768a5ed26876a78969b93e6a17c0764ae8dc008a2e23503f82831b66d8f10
GET /i/share.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 11123
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:51 GMT
last-modified: Sun, 14 Aug 2022 09:56:44 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xyYqhZ57wEf9%2FA0pYI4ud%2BIYbl5CQ5pHir2i0rZ79NtS0wmzCD%2BxzwR%2FKYQytXcl84tg2%2FPu4IO%2BAUrkkFhtWe9%2FMXZWCuR0jBimriQuYQixfA8n2KuntdQJj7SVsxAGNpH9FlXFsehKVA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18660ea10afe-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/rankimage-1.png
104.21.56.249200 OK 270 kB URL HTTP/1.1 sukienvuongquocrong.com/i/rankimage-1.png
IP 104.21.56.249:0
File type PNG image data, 532 x 246, 8-bit/color RGBA, non-interlaced\012- data
Size 270 kB (270151 bytes)
Hash 6081448692f0b3d286ce576db22f5d35
fb6bae3f048ae86c2ccf9e5230102720e2353bf3
122456b9bebb7535c76a726014936e541a475018b693c6dcc83a010e9e477321
GET /i/rankimage-1.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 270151
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Mon, 15 Aug 2022 03:00:56 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BBGOH%2Fb5wJq5tV%2FtTALRA8togmf6108%2BPpntjK9Vq8%2Bb6Ew5D29eIOK5lXyYFjej%2FltPIKy%2FQUc68DWTaSfrZxZ4coCsLVszoS74GRe01ATgT9mPdAEU%2F0EhsKlXN5Jlr3kwQhlJIklUCg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18619de1b4f7-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/chinhsachhotro.png
104.21.56.249200 OK 9.6 kB URL HTTP/1.1 sukienvuongquocrong.com/i/chinhsachhotro.png
IP 104.21.56.249:0
File type PNG image data, 481 x 98, 8-bit/color RGBA, non-interlaced\012- data
Hash 72b1cc99c42763607045da5b02fdd79b
d08a7891631d71074f969a9185554860d829a7a3
9e94b60acae0c68be36a9e2bf9526f1dc83b5988e3d6fe4c1337d1f09d6d3d4f
GET /i/chinhsachhotro.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 9601
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:51 GMT
last-modified: Sun, 14 Aug 2022 10:23:06 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9yQdVdWwJux6VqbHMNnx25sZzkmBuBw6EeLdlbdMTJf17HDK2POThQ%2Fn3Io5w%2FtD9b5ea2q%2BqIgw4%2FLYYZHhcEfAvVx0nXqKA%2BoXQKxZdvY9aoCcKGOVyF%2F8VxCCT2fMHT%2BHp5UkXp%2B6YA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18663b920b55-OSL
alt-svc: h2=":443"; ma=60
cdn.vn.garenanow.com/web/kg/dtss/images/pc/menu-dactive.png
45.119.240.104200 OK 5.1 kB URL HTTP/1.1 cdn.vn.garenanow.com/web/kg/dtss/images/pc/menu-dactive.png
IP 45.119.240.104:0
ASN #131418 Vietnam Esports Development Joint Stock Company
File type PNG image data, 78 x 68, 8-bit/color RGBA, non-interlaced\012- data
Hash 795f465ec44ea699daa5b1ef1513f149
e58c2ecd5fd16350e5bc48964aeedfc7332fd4ae
3941b66cbf521829bd5dfa18883c75a166181b9ee9881bd81778c0433fa7ee51
GET /web/kg/dtss/images/pc/menu-dactive.png HTTP/1.1
Host: cdn.vn.garenanow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 5067
Connection: keep-alive
Last-Modified: Wed, 09 Mar 2022 03:18:30 GMT
ETag: "62281c86-13cb"
X-Cache-Status: REVALIDATED
X-Handled-By: cdn-master
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
cdn.vn.garenanow.com/web/kg/dtss/images/pc/menu-dicon.png
45.119.240.104200 OK 4.2 kB URL HTTP/1.1 cdn.vn.garenanow.com/web/kg/dtss/images/pc/menu-dicon.png
IP 45.119.240.104:0
ASN #131418 Vietnam Esports Development Joint Stock Company
File type PNG image data, 76 x 66, 8-bit/color RGBA, non-interlaced\012- data
Hash 40fa2f72d9dcd42af2b76a2b94571b69
6c11e9b1c1f17d8b9489be0e0f81415964df5b8e
08d6e28aec9ce81f05373c2075b6a14c617f9ba42911be9cdb41e92dcceca984
GET /web/kg/dtss/images/pc/menu-dicon.png HTTP/1.1
Host: cdn.vn.garenanow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 4211
Connection: keep-alive
Last-Modified: Wed, 09 Mar 2022 03:18:30 GMT
ETag: "62281c86-1073"
X-Cache-Status: REVALIDATED
X-Handled-By: cdn-master
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
sukienvuongquocrong.com/i/1.png
104.21.56.249200 OK 359 kB URL HTTP/1.1 sukienvuongquocrong.com/i/1.png
IP 104.21.56.249:0
File type PNG image data, 1320 x 493, 8-bit/color RGBA, non-interlaced\012- data
Size 359 kB (359116 bytes)
Hash 63d72fae6cf0d62568793fc5826452c9
7c5d993ee4a3ce8ea6521d919fc5aa8a28f3a442
003512313c0865d12bce722c216ddb3b980f0c84d95aeb103d10bdc4342319f4
GET /i/1.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 359116
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Sun, 14 Aug 2022 08:57:20 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g4rQuyNnRUdqDurtaNcImm3yZKwrXLOF%2BNX1SQB%2FD5vC5XXdluTecQc0ncfxRHeRGQ8PMIUASWILLAJuq3RFwhMaE3Ank6x0uwxlX4dRrv12YHNz6O18CRhVzXcHcPZzYu0EPLB%2FGbKzkQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a1863d9aa0b69-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/2.png
104.21.56.249200 OK 383 kB URL HTTP/1.1 sukienvuongquocrong.com/i/2.png
IP 104.21.56.249:0
File type PNG image data, 1320 x 493, 8-bit/color RGBA, non-interlaced\012- data
Size 383 kB (383188 bytes)
Hash 8cff0fa2c2c621be9b9bafbb567ab2b8
ddaa3cc991e0424c41960c7b33e0bf3f59658951
3899ccd35895df36f825396d1e290493d11148ab5dff836a9d050df7467d5489
GET /i/2.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 383188
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:50 GMT
last-modified: Sun, 14 Aug 2022 08:57:24 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2FHWJADO5lwlR9%2FmaknnFyXrbOhhDTSflEGKihaocSK9lwmoU8qGqBN2GADMZJWpRVvULCELH%2F5AzmCpzZUFrckosI%2B9%2F4al%2FnxYM4Hv4Ya9Ak8n7fuqR3D6ariP37ZJ6p1t2%2FfuKxTlrA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a1863dca2b515-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3770
Expires: Thu, 08 Sep 2022 20:32:41 GMT
Date: Thu, 08 Sep 2022 19:29:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3770
Expires: Thu, 08 Sep 2022 20:32:41 GMT
Date: Thu, 08 Sep 2022 19:29:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3770
Expires: Thu, 08 Sep 2022 20:32:41 GMT
Date: Thu, 08 Sep 2022 19:29:51 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3770
Expires: Thu, 08 Sep 2022 20:32:41 GMT
Date: Thu, 08 Sep 2022 19:29:51 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca5b5d4ac26d97b5729a30ecdc688bc
3e633bc6c4ab9adfe84899e5209d73bef1d097eb
2c8275d1819d933f86df9685b76aea030842ba5a341c59ea88ffd2da99a5a3d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7885
x-amzn-requestid: 305dc6b7-eb3d-40ad-af89-8b60be935637
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThE3DIAMFRtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-7c0b58644e26de7f27c5b388;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ry2D03udnweYHan_7KhC9IDhT01g9_73G40Fa10BdIX21tgK0Cgjiw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:48:35 GMT
etag: "3e633bc6c4ab9adfe84899e5209d73bef1d097eb"
content-type: image/jpeg
age: 78076
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a07d553b6441514870ed7e9e989a29a7
98c145b9326d1e6036fa9089d87a25232dd45b0b
373a586b596016baeb8de98022207c25af24c099c06077edbdfd837cffc31a0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7492
x-amzn-requestid: 2c5e9ff3-c7a4-4a8f-96bf-74f0ca5d9137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9dOHguIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f87-70dbe6532b1a241e6dbe729e;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 6mfdlMHJozdykr4faiijvUuJPXVrJGU_n0MxJgCrZ-uWWdejGYfiAQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:33:06 GMT
age: 75405
etag: "98c145b9326d1e6036fa9089d87a25232dd45b0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 09267c271a56ba4c2d4197543f264fac
67ae4acd88571da51b81fa7ed963b7f2a71845b4
906163f9e1bb8908ae7fcfbf4debc2a42fd14a3f90c8814536025a57ee851dbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8162
x-amzn-requestid: decb1d93-bcc9-4a71-a054-c537ad7d1add
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YJvndF1fIAMFv7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a2c95-27cef2465fd0e6c849da81af;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 17:55:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: C_J0m9xfkCb5qsoO934KB2Ldk1-yMaMXkgiv9gWus7JqjN3M_HCpdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 17:56:29 GMT
age: 5602
etag: "67ae4acd88571da51b81fa7ed963b7f2a71845b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cd778a615e9a4ca3a25119790398434
d6daca74fc85d39274b3c7536f34528bef93ae97
e6b5a7a525e314e09c30985b22da7c34806df09cbe98ad52b00dcbf93a0dc054
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7251
x-amzn-requestid: 26b2021a-4440-47ce-8dba-d971cae60cc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9bmHcmoAMF3Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f7d-5471edce7de2374c3b8af888;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: d3MrDEyDFDylQKyfxONQ12_7IBvRAg8o0rSZ64WNRGNvDHqQyDmqJA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:16:27 GMT
age: 76404
etag: "d6daca74fc85d39274b3c7536f34528bef93ae97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f922505178de0cea92eedcfda85a9f67
50f1459de01174e594e03e7df4dfaa8eb1798672
981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 05:34:36 GMT
age: 50115
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f73ee4e91b38eaa36cadd4c437785f8
6ceea057f5ae50b9cef505da0a358e3d3b7d6a38
778d28e14b28c154843403470136d0efdcdd5e93e4b5aab784c12d4344e7af6f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11365
x-amzn-requestid: d50039cd-381c-4221-997e-9231d40ecfbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9V0EHEoAMFeag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f58-11cab61904bd14462cd13d0d;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: z7RyNwWgq5r9B2WMa5ibpo3d8DXFSFCCrEHpMvc0Q5SqE2x1ovaV-g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:41:33 GMT
age: 74898
etag: "6ceea057f5ae50b9cef505da0a358e3d3b7d6a38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sukienvuongquocrong.com/i/star-orange.png
104.21.56.249200 OK 1.1 kB URL HTTP/1.1 sukienvuongquocrong.com/i/star-orange.png
IP 104.21.56.249:0
File type PNG image data, 15 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash c2be79c0180e237f3f70a00e1e3fb240
dd05434963079081c5f15d4658f54c993fed9125
aab82f483691e9ee062a175b2eca7e6918ce65dab0edd75c20eff6161925ec48
GET /i/star-orange.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 1142
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:52 GMT
last-modified: Sun, 14 Aug 2022 10:23:30 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QaRbV6G5Lp0nCGc0Ve1srVeQEpsrs0Cg4QLc4NGp1uqYlxfwQutCN5%2BOJq0LbX7Ohh9J3coePvvBTn5ZtNxWCPzLtCJCBYHinj0yXW8uVi7SDD%2BeyX6xy9WsiFxwKcq4joiR6sRlOWhn2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a186ab875b515-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/tinhanh.png
104.21.56.249200 OK 818 kB URL HTTP/1.1 sukienvuongquocrong.com/i/tinhanh.png
IP 104.21.56.249:0
File type PNG image data, 1000 x 792, 8-bit/color RGBA, non-interlaced\012- data
Size 818 kB (817865 bytes)
Hash d106e903d5a3919b074d5f9857c1c921
e9de761e0c836e502efe24fc40f1679ee943d8bb
f53e3544e2fd68dc1a600db7785c58790805452b74998ac9ea131e961354e690
GET /i/tinhanh.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:51 GMT
Content-Type: image/png
Content-Length: 817865
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:51 GMT
last-modified: Mon, 15 Aug 2022 02:58:52 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PerYmyR5zG4%2BrpABAUBz8PVouhWctTfUQghnEFltRr79zWuVrYtLUZ33jfB0wh6to0ATJMne0Wnk6%2BMNb350B2r3jVHH6n2k%2FsO%2BsMdMyQ%2Bm4Okq2B6q0%2Bv0xirQxU%2FzvaKy6W2jQJNcUw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18676efc0b49-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/micon6.png
104.21.56.249200 OK 2.0 kB URL HTTP/1.1 sukienvuongquocrong.com/i/micon6.png
IP 104.21.56.249:0
File type PNG image data, 32 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 27bd70035745b9c9cb408ecb6722e85e
9f5bbb569e36347236e84254e6ef9b0e13806442
8fd79331fc44915741d123774eda5035cb578721c25aad91f0c7495999694441
GET /i/micon6.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 2026
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:52 GMT
last-modified: Mon, 15 Aug 2022 02:48:58 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PlymSA4hHgsBsm5kwZ0%2FNMt3CYog4TT7sQRtubADMCRSHtX4YPZ88NDaF8J4n5TkqgQfym0MqXItpJairBcWLVh%2BLaMNLcTWD7E%2BQosEAwabPCv6AK5%2BxhXk2fNGokmzGd%2BOxUKtpcPX6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a186d0bacb515-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/kimcuong.png
104.21.56.249200 OK 1.2 MB URL HTTP/1.1 sukienvuongquocrong.com/i/kimcuong.png
IP 104.21.56.249:0
File type PNG image data, 1000 x 1060, 8-bit/color RGBA, non-interlaced\012- data
Size 1.2 MB (1244134 bytes)
Hash 09bf96b646f2acd00ca9c818948a371a
7a7f3278d81dd7aa6587e6d0329dc4e4ffc6cba6
35079b56601120a572227851a1ee61533869f13bc0064374702c958bb3df8d21
GET /i/kimcuong.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 1244134
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:51 GMT
last-modified: Mon, 15 Aug 2022 02:59:16 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9sM%2B%2B4%2FvJcVWFpoUf77BasHNnzxbuFc7JlX20L47%2Fti2slWEoslS3AY1SIaqoJoEG8V2Y9Th0Zy2d1%2BydtBV9AGp6O%2BhmUvWcbI6OLq2zWyYHR73s0XczTkZwNFq72vlng4FOETqDevq4w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a186859380afe-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/vang.png
104.21.56.249200 OK 928 kB URL HTTP/1.1 sukienvuongquocrong.com/i/vang.png
IP 104.21.56.249:0
File type PNG image data, 1000 x 988, 8-bit/color RGBA, non-interlaced\012- data
Size 928 kB (927784 bytes)
Hash 2f19f0c7693a944725b7060fa13168d0
231fdcd813b9eace238d2b7fb5ecdbac373812d6
8e5e438d964bea979651f0df1df95704914e115dab37eec3434fc8f121d4184a
GET /i/vang.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 927784
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:51 GMT
last-modified: Mon, 15 Aug 2022 02:59:06 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BgSGwfWytUTs0qdQ%2B2xn%2FQzc%2FQDMLi1zVL8cw2oaWVn%2FEjhzqqg1IdZhYfeUpO%2BFBfF8hREkdK24pgGmKc2uw2KNvrltiqJsPoz8EsUsFVBa9FmQPiLtyorxoC7EwleJp6uv5ch8zYWT4w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18689f370b55-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/micon3.png
104.21.56.249200 OK 2.0 kB URL HTTP/1.1 sukienvuongquocrong.com/i/micon3.png
IP 104.21.56.249:0
File type PNG image data, 32 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash ec5dee0e0b68f5d2b99b55bdaa50fd24
49752127b3358f13272f602a2350f17a1ddde645
58b5fafa1a519723055eb8fd7783a16c72ef7cf90cbd768486b84f91ceb3b1aa
GET /i/micon3.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 2009
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:52 GMT
last-modified: Mon, 15 Aug 2022 02:43:10 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BAasRZRwQPlCVxabzH9MLmOY4I3B93kfU4K24CUX%2B2DhphMnUmd3SVuUIiXmCBJd%2FQRUQK%2FBnKhr3xZR29J253vOTsRLtM7z5O8EIHsMPamejaN7D%2BAlqoOj9g9tXOQZ5S9Wvi42Q0FRGw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a186f4aaa0b49-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/micon2.png
104.21.56.249200 OK 2.0 kB URL HTTP/1.1 sukienvuongquocrong.com/i/micon2.png
IP 104.21.56.249:0
File type PNG image data, 32 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 67510826d814087cef1013460a402fcb
bab4d65b1c10f23ee5b77efd387fe1023d782f98
a3500b1af5b07edb699388bfab386825d67c8b9460dcecf1d30467ca7518f231
GET /i/micon2.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 2049
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:52 GMT
last-modified: Mon, 15 Aug 2022 02:43:18 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GF0rfQh4rqvFMYDweBZ5CIDny%2FZhdqmqP48f2Eky9z%2Fpamw5%2FrmAJjVhSJHe5Nq1AFoYkOlojZjSNKU3MP0W%2BLgcvk28b1Sa0M%2BKauyh6%2BBN8vAz%2FsjBR1LC2cebdDBLaFLEl0bqA4UfqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a186f5efdb515-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/bachkim.png
104.21.56.249200 OK 943 kB URL HTTP/1.1 sukienvuongquocrong.com/i/bachkim.png
IP 104.21.56.249:0
File type PNG image data, 1000 x 892, 8-bit/color RGBA, non-interlaced\012- data
Size 943 kB (942718 bytes)
Hash 59fba3f1fe8db40c0766b3ce260ef5fd
b14b8aee71ea1352046c79c931dbc46d82a19479
5001c73abf695bebf671f35a9eaa4355cf6e9b546e68917cdadd4b7e61fbc598
GET /i/bachkim.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 942718
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:51 GMT
last-modified: Mon, 15 Aug 2022 02:58:58 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ixknW4cOJIWlXT6JGuWBAO%2F9lceAaFkdPyB14sp2zM8iOqHeJ0sbU85Zurkq5b9iQ1P5mIznGMJq%2FVnEez4rEbeukYSbigQ9gdwkZcoIKwDAxmlrS9C7ahyp04fp6r0b5v6TONBYLt0cOg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a18689958b4f7-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/bac.png
104.21.56.249200 OK 838 kB URL HTTP/1.1 sukienvuongquocrong.com/i/bac.png
IP 104.21.56.249:0
File type PNG image data, 1000 x 1120, 8-bit/color RGBA, non-interlaced\012- data
Size 838 kB (837473 bytes)
Hash 62cdaf31b96be5d9c29005f863f4829e
c26e8cc7d4cfd9b2196ff1bf52289dde5b1f39d4
4c977fca627e387455283a03da9e96cb68f6ce658352b713c5de9795b485f6f2
GET /i/bac.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:52 GMT
Content-Type: image/png
Content-Length: 837473
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:52 GMT
last-modified: Mon, 15 Aug 2022 02:59:10 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0v60MD5WHs8G%2B%2B%2FNtEFWEr2A%2F4rzBRD6%2FCHyiyVSiMwnfrED3aPA59pNIqOIpuzwKyMN37lSi4nKbfRf8XJnOnKDQLUWJ3Wlso%2FIe41NKW4TIfb%2Bp8ZJYSKu%2FrkgeHasA7yUWJvzuNeSDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a186aaaaf0b69-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/micon4.png
104.21.56.249200 OK 2.0 kB URL HTTP/1.1 sukienvuongquocrong.com/i/micon4.png
IP 104.21.56.249:0
File type PNG image data, 33 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash c662853378f42af01d203408079bf202
fe73129af599698cc0dc35cc5770282c1d9ba2b9
b55be96f2f4526452b419e5f2e033a2d71917dc253f02e07f98f77e5896a513b
GET /i/micon4.png HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:53 GMT
Content-Type: image/png
Content-Length: 1982
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:53 GMT
last-modified: Mon, 15 Aug 2022 02:43:26 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jj2KknVTe2wphv1vfiiTMlDXfKo%2F5WINGSxC72Uek%2BUoEOM7Ur71csg0pF%2FeVJsWIuptdBwXf7x%2BBYvC%2FaiSHei8vXJLXV98XVPPtcvKpbuITbZtT56YJxrvvjxr9PDomdwVlslu6qX4ig%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a1871abb50afe-OSL
alt-svc: h2=":443"; ma=60
sukienvuongquocrong.com/i/i1.jpg
104.21.56.249200 OK 240 kB URL HTTP/1.1 sukienvuongquocrong.com/i/i1.jpg
IP 104.21.56.249:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 240 kB (240224 bytes)
Hash d1e780eae0217339537bf2330fa99154
03491d0299172bc82969a34bb89cf5935df15dbc
f02b4ddad1e458a323816ba1b27ea7bd5e909a6780f2e526add717aed7e71ad0
GET /i/i1.jpg HTTP/1.1
Host: sukienvuongquocrong.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Cookie: PHPSESSID=ce1709ef85e77809ddf72676f88cb679
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 19:29:53 GMT
Content-Type: image/jpeg
Content-Length: 240224
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 15 Sep 2022 19:29:53 GMT
last-modified: Sun, 14 Aug 2022 10:05:56 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BaODMo%2FkqKBMBdQdZNGGcQCCNeobZIXzCd7AjJ0rcBdvO%2F5LvHmvYvBroO3I7D5vBCTh9Ix%2B33ZRVYZ%2F%2FJPGhq%2Bt7911Mc4Z5JRR1BYnRYW3mOxadlxLwXeMwrXrUv2XzflzRSSjfHKA4A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747a1871cd2f0b55-OSL
alt-svc: h2=":443"; ma=60
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6df26b-97aa-461c-9f22-c5c9496b5701.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6df26b-97aa-461c-9f22-c5c9496b5701.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24e43bc53a0b047911cff00ad4b72320
f6ef30b5df0e634c3a3f607d751e738e55a276c9
7e1406b2101c912e72f37f0257128574079e618c1af83e360acb3f29b4d44d89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6df26b-97aa-461c-9f22-c5c9496b5701.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8705
x-amzn-requestid: ccc5b695-35b5-49fd-b938-296a88a78ab8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9TgFOiIAMFaXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-12e809c767cdbba61492187c;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: iN3jcMCQ8paYD_O9gQLAswM-ITb0oY8CYmbnMDwpwS-7hPLis5TGSg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 95785220a566cd050f3ad80928463374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:03:47 GMT
age: 77171
etag: "f6ef30b5df0e634c3a3f607d751e738e55a276c9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Comfortaa:wght@300;400;500;600;700&family=DynaPuff:wght@400;500;600;700&family=Edu+NSW+ACT+Foundation:wght@400;500;600;700&family=Pacifico&family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Comfortaa:wght@300;400;500;600;700&family=DynaPuff:wght@400;500;600;700&family=Edu+NSW+ACT+Foundation:wght@400;500;600;700&family=Pacifico&family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
IP 142.250.74.10:0
GET /css2?family=Comfortaa:wght@300;400;500;600;700&family=DynaPuff:wght@400;500;600;700&family=Edu+NSW+ACT+Foundation:wght@400;500;600;700&family=Pacifico&family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sukienvuongquocrong.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Sep 2022 19:29:50 GMT
date: Thu, 08 Sep 2022 19:29:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2