r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3403
Expires: Sat, 26 Nov 2022 00:38:29 GMT
Date: Fri, 25 Nov 2022 23:41:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 366bca8f21d647216d9f46abd7749d88
0e598391e02ff4f47c3198876b9f014512868702
1a948d47bb1f6ff135d1dd685e65cd625135e45414066055524880ed2a019e5f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1A948D47BB1F6FF135D1DD685E65CD625135E45414066055524880ED2A019E5F"
Last-Modified: Wed, 23 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5013
Expires: Sat, 26 Nov 2022 01:05:19 GMT
Date: Fri, 25 Nov 2022 23:41:46 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
34.120.5.221200 OK 47 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP 34.120.5.221:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash fa13175bd5ba566d36e62476a99db65c
ca97a0930a915dea2eca80f773a1caad36190b63
0c39510a82eedf4ec8ee0013627b1216339a8b53e57e6d70d6d08eafc6db3d40
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: FWakMXi7_-cV3tsupaSANrBF6qdJuw31WKJLEHVLLDzaSc7DpAxSfg==
content-encoding: gzip
via: 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 23:28:36 GMT
content-type: application/json
content-length: 46551
age: 790
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8c63b226725ca6e92e3ef586ac19e603
d21ae42a1927501e5293ff3564f52b49f6b0decc
141ac47acc3800e5d35a82012fa4b044277abad3a95dc24415f66fb72c972ae6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "141AC47ACC3800E5D35A82012FA4B044277ABAD3A95DC24415F66FB72C972AE6"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6677
Expires: Sat, 26 Nov 2022 01:33:03 GMT
Date: Fri, 25 Nov 2022 23:41:46 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6/I7PIjEfhEpoed95q3+B3XvgtQD52Wdxjt+uBvT8nPOB47FkMX0UOVQUuHtGrIu1h3zuJTVUfA=
x-amz-request-id: G78F2ZD185787WKP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 25 Nov 2022 23:40:59 GMT
age: 48
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 23:41:46 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6555
Cache-Control: max-age=131922
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:47 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 12:20:29 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 25 Nov 2022 23:19:10 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1357
alt-svc: clear
X-Firefox-Spdy: h2
www.googleadservices.com/pagead/conversion.js
142.250.74.66200 OK 17 kB URL HTTP/1.1 www.googleadservices.com/pagead/conversion.js
IP 142.250.74.66:0
File type ASCII text, with very long lines (2772)
Hash 66d15569d62036ed6fe2267dfbf9058f
c8c197520baf682bceeb58a33fa8cf27e46fa87d
33845683646c35e8b24272efcc4f08fe61b8e3e529e2b6c9d955cfdfbf6c05e5
GET /pagead/conversion.js HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Fri, 25 Nov 2022 23:41:47 GMT
Expires: Fri, 25 Nov 2022 23:41:47 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 16359567893097152046
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 17401
X-XSS-Protection: 0
chesuoigiang.vn/css/common.css
125.212.221.113200 OK 1.7 kB URL HTTP/1.1 chesuoigiang.vn/css/common.css
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 10cf29b6898d9acda28a5248d5888f4c
1f6c5e237d23292143ec926cc76f69984b87d3da
767e80d081f777b0e345e85f2706c4e85789197ad4c4e698a081db23e39de5bc
GET /css/common.css HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Fri, 26 Aug 2016 01:35:24 GMT
Accept-Ranges: bytes
ETag: "69a9281e3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 1720
download.skype.com/share/skypebuttons/js/skypeCheck.js
23.38.200.142200 OK 21 kB URL HTTP/1.1 download.skype.com/share/skypebuttons/js/skypeCheck.js
IP 23.38.200.142:0
File type ASCII text, with very long lines (16243)
Hash 5132cacba394327180641ceacd2ff941
1cb9c7f60a242c70a2497f3f1142b506e2274d8b
195ef2d533633828585f31fbc97983f55b8457c19a37f88594353f8221959d6f
GET /share/skypebuttons/js/skypeCheck.js HTTP/1.1
Host: download.skype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Content-Length: 21434
Content-Type: application/javascript
Content-MD5: UTLKy6OUMnGAZBzqzS/5QQ==
Last-Modified: Fri, 23 Sep 2016 13:35:37 GMT
ETag: 0x8D3E3B6809EC797
Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 950433c4-401e-013e-3308-c23018000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
Cache-Control: max-age=86400
Date: Fri, 25 Nov 2022 23:41:47 GMT
Connection: keep-alive
chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
125.212.221.113200 OK 70 kB URL HTTP/1.1 chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11968), with CRLF line terminators
Hash 0afc3a308ff237ee7ee344db5d601a21
6db737e213b2b4c6e345645de7db439f8a9f7c1f
a861d4e0e2ce4ee5edad7d36589b48d73cd8b0c6b5e08524187ba8b30d260a57
Analyzer Verdict Alert fortinet Malware
GET /62/d/sto/may-han-mieng-tui-dap-tay.aspx HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
Set-Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; path=/; HttpOnly; SameSite=Lax
lang=VIE; expires=Mon, 26-Dec-2022 13:41:36 GMT; path=/
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 70141
static.addtoany.com/menu/page.js
104.22.71.197301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/page.js
IP 104.22.71.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 23:41:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 00:41:47 GMT
Location: https://static.addtoany.com/menu/page.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76fe3cb47cdf98f4-ARN
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
chesuoigiang.vn/js/utilities.js
125.212.221.113200 OK 2.7 kB URL HTTP/1.1 chesuoigiang.vn/js/utilities.js
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 3e423bda9b510380a0b0e5b8eda4d9fd
3d743727abbb8c05a213c04b212be7cc1d9b5d78
344725ed83981d87958d4203ffdc956a0809f0cb9d6e3847881f24aef3414f26
Analyzer Verdict Alert fortinet Malware
GET /js/utilities.js HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 26 Aug 2016 01:35:25 GMT
Accept-Ranges: bytes
ETag: "2347481e3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 2711
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e93c05da275c574b377bf486283da6d4
0b37fb7edcd4e9a4b76722efa62eb7e44225d2c6
6cf1c05cd98888725c136437d903d1df8e37a331f4a4e889430887d52c35aa39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4699
Cache-Control: max-age=149842
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:47 GMT
Etag: "6380e6b2-117"
Expires: Sun, 27 Nov 2022 17:19:09 GMT
Last-Modified: Fri, 25 Nov 2022 16:00:50 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
chesuoigiang.vn/ScriptResource.axd?d=3GqxxixrkVNDJ4PtWd4Au1Dh3vPS4sQPUbFai7MVHqOWPMIxeQ2AbEGNtqANbWigggk5wHPPZyHmUXdSqJ3hkf_Dq2ozmJnCXrdCujA5HKT3khy0uJc0SkoCQoLv7OngWXxNlRQ9q6LaFeyhaxZGQs32DkA1&t=ffffffff87636c38
125.212.221.113200 OK 12 kB URL HTTP/1.1 chesuoigiang.vn/ScriptResource.axd?d=3GqxxixrkVNDJ4PtWd4Au1Dh3vPS4sQPUbFai7MVHqOWPMIxeQ2AbEGNtqANbWigggk5wHPPZyHmUXdSqJ3hkf_Dq2ozmJnCXrdCujA5HKT3khy0uJc0SkoCQoLv7OngWXxNlRQ9q6LaFeyhaxZGQs32DkA1&t=ffffffff87636c38
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type Unicode text, UTF-8 (with BOM) text, with very long lines (313), with CRLF line terminators
Hash 10114761f3c8787d3f4049d73f2e4967
9868cf3681bdb1ca18576ee9db8eec01d66ccd3a
24ff88dceb35066e303bb183c403a674b08d46d91e03f0a3cd9cdaa343643646
GET /ScriptResource.axd?d=3GqxxixrkVNDJ4PtWd4Au1Dh3vPS4sQPUbFai7MVHqOWPMIxeQ2AbEGNtqANbWigggk5wHPPZyHmUXdSqJ3hkf_Dq2ozmJnCXrdCujA5HKT3khy0uJc0SkoCQoLv7OngWXxNlRQ9q6LaFeyhaxZGQs32DkA1&t=ffffffff87636c38 HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/javascript
Content-Encoding: gzip
Expires: Sun, 26 Nov 2023 13:41:37 GMT
Last-Modified: Sat, 26 Nov 2022 13:41:37 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 12329
chesuoigiang.vn/ScriptResource.axd?d=WRyh4G9jKD7MTCA0glSzNFOnrWQ5HnIjCiXdDB2sUvxrq6Tk_NMGxFay6pSnGFgTcuo5B5d43Qnf3EI3ITOnpmvdront2Lp0q8IhY4hZG_RaU-h7f7A-klgyHqdt0NTrEM4bYuWExB56RuRR19bg2inOMhzGhsHCrAVHTt22PT-fr0BY0&t=ffffffff87636c38
125.212.221.113200 OK 4.9 kB URL HTTP/1.1 chesuoigiang.vn/ScriptResource.axd?d=WRyh4G9jKD7MTCA0glSzNFOnrWQ5HnIjCiXdDB2sUvxrq6Tk_NMGxFay6pSnGFgTcuo5B5d43Qnf3EI3ITOnpmvdront2Lp0q8IhY4hZG_RaU-h7f7A-klgyHqdt0NTrEM4bYuWExB56RuRR19bg2inOMhzGhsHCrAVHTt22PT-fr0BY0&t=ffffffff87636c38
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type Unicode text, UTF-8 (with BOM) text, with very long lines (9936), with CRLF line terminators
Hash 1608a79b0c1dcd440b2c5431e471da10
14fd56a499d143e151133799ab810c7c9951e896
1a2388d7446f51910bac2ca1d1a7a9687e8773204ef9beed4d80ac2933aac968
GET /ScriptResource.axd?d=WRyh4G9jKD7MTCA0glSzNFOnrWQ5HnIjCiXdDB2sUvxrq6Tk_NMGxFay6pSnGFgTcuo5B5d43Qnf3EI3ITOnpmvdront2Lp0q8IhY4hZG_RaU-h7f7A-klgyHqdt0NTrEM4bYuWExB56RuRR19bg2inOMhzGhsHCrAVHTt22PT-fr0BY0&t=ffffffff87636c38 HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/javascript
Content-Encoding: gzip
Expires: Sun, 26 Nov 2023 13:41:37 GMT
Last-Modified: Sat, 26 Nov 2022 13:41:37 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 4880
chesuoigiang.vn/css/theme.css
125.212.221.113200 OK 22 kB URL HTTP/1.1 chesuoigiang.vn/css/theme.css
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type ASCII text, with CRLF line terminators
Hash 2ede2bc33aa14fde0bc08f2a53996803
cc97d2316350d55b289ab5bcd8096f9991282b01
0aeb4a57e034368dd2c67b247900a6f629e1a8a6f030d7041933ffcd2f5a9a26
GET /css/theme.css HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Fri, 26 Aug 2016 01:35:24 GMT
Accept-Ranges: bytes
ETag: "32f02c1e3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 21608
static.addtoany.com/menu/page.js
104.22.71.197200 OK 1.8 kB URL HTTP/2 static.addtoany.com/menu/page.js
IP 104.22.71.197:0
File type ASCII text, with very long lines (3076), with no line terminators
Hash 1e34ee929996d318f6bed9c6b0e31f0e
e9b42ca42e964ddb568ab8dff66227a0e199741d
a84bda0148a4300548b19bfd049790ace9ce2f0be922ddd70a8270e778803432
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:47 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 142344
etag: W/"c04-5ee0ab04c6251"
last-modified: Tue, 22 Nov 2022 08:09:18 GMT
vary: Accept-Encoding
via: e2s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76fe3cb508bc95de-ARN
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash e93c05da275c574b377bf486283da6d4
0b37fb7edcd4e9a4b76722efa62eb7e44225d2c6
6cf1c05cd98888725c136437d903d1df8e37a331f4a4e889430887d52c35aa39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4700
Cache-Control: max-age=149842
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:48 GMT
Etag: "6380e6b2-117"
Expires: Sun, 27 Nov 2022 17:19:10 GMT
Last-Modified: Fri, 25 Nov 2022 16:00:50 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
chesuoigiang.vn/ScriptResource.axd?d=_fJsUrEmCwgiKJMzqZ-wHGA0GOe17fT_f7eHbeYFS-bvcLQVfBIDcrCWMssDgWdgNjUYu8JO5EN0iFf5J26EsK8k0C7BXF32UQydFqSuec3nK1FztxjyUp8zLz7kmWi7YabYrW9lC8cMPETs7D-11wV1p5TFs4Kjfcubc182qyfJZMTPxwO-VDMZh73dVz9EHf5B4Q2&t=ffffffff87636c38
125.212.221.113200 OK 3.2 kB URL HTTP/1.1 chesuoigiang.vn/ScriptResource.axd?d=_fJsUrEmCwgiKJMzqZ-wHGA0GOe17fT_f7eHbeYFS-bvcLQVfBIDcrCWMssDgWdgNjUYu8JO5EN0iFf5J26EsK8k0C7BXF32UQydFqSuec3nK1FztxjyUp8zLz7kmWi7YabYrW9lC8cMPETs7D-11wV1p5TFs4Kjfcubc182qyfJZMTPxwO-VDMZh73dVz9EHf5B4Q2&t=ffffffff87636c38
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 438d8d97d1a8632dbff33af60dcb8dfc
a3c044611d8d7e070d575c53e50de05eef578f3c
1def3724a340c252195ea314600ac4f778b416f6204b7641a1d27565a79cb29e
GET /ScriptResource.axd?d=_fJsUrEmCwgiKJMzqZ-wHGA0GOe17fT_f7eHbeYFS-bvcLQVfBIDcrCWMssDgWdgNjUYu8JO5EN0iFf5J26EsK8k0C7BXF32UQydFqSuec3nK1FztxjyUp8zLz7kmWi7YabYrW9lC8cMPETs7D-11wV1p5TFs4Kjfcubc182qyfJZMTPxwO-VDMZh73dVz9EHf5B4Q2&t=ffffffff87636c38 HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: text/javascript
Content-Encoding: gzip
Expires: Sun, 26 Nov 2023 13:41:37 GMT
Last-Modified: Sat, 26 Nov 2022 13:41:37 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 3166
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash df06e70fc8a35facf1d8db463d18e231
fa8a2975566cc792898f870e48ae7518d3657326
4cef7e704f4d575ce6733f6f2d803d241b597be51ff3fb03f72e5c33a893b504
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2503
Cache-Control: max-age=122806
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:48 GMT
Etag: "638085ab-1d7"
Expires: Sun, 27 Nov 2022 09:48:34 GMT
Last-Modified: Fri, 25 Nov 2022 09:06:51 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
chesuoigiang.vn/themes/1/js-image-slider.css
125.212.221.113200 OK 3.2 kB URL HTTP/1.1 chesuoigiang.vn/themes/1/js-image-slider.css
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type ASCII text, with CRLF line terminators
Hash 4187a6368c17aa8e39ff01240c40aa8c
fb9adb1916f167895e6a2e6c645ee35a77a580d4
98768cd1c690371972a5f3647af1d10984a74bc98fabbe5af4384dc568ae30e7
GET /themes/1/js-image-slider.css HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Fri, 26 Aug 2016 01:35:35 GMT
Accept-Ranges: bytes
ETag: "8b65b3243affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 3204
chesuoigiang.vn/themes/1/js-image-slider.js
125.212.221.113200 OK 16 kB URL HTTP/1.1 chesuoigiang.vn/themes/1/js-image-slider.js
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
Hash f694706a38a1944e3a006b46bd4d4718
0af30fb907a47725745769e5ace9eba414927199
7fb834dbc5f6e05be07995ae8d23c31ad51dfab49e76ff6c2e92a2cfe3cefda7
Analyzer Verdict Alert fortinet Malware
GET /themes/1/js-image-slider.js HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 26 Aug 2016 01:35:35 GMT
Accept-Ranges: bytes
ETag: "29e5b8243affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 16291
chesuoigiang.vn/ScriptResource.axd?d=caWFW8CVefPGrvziD1Oya_y7VyGe2eZZI2FZBlITmQaPtfRouqVhUIbcJFVuRMbNul0bXnFDVeEVpTTH3StYMUeW4f2pzXucqpgXH6X3z0Cv4CiDLhmURAGbpJBhoQOvuRlEJEJmKuFKrYIwgbTEELROfVA9kDTOuWPDUqbvIAEfsgtU0&t=49337fe8
125.212.221.113200 OK 48 kB URL HTTP/1.1 chesuoigiang.vn/ScriptResource.axd?d=caWFW8CVefPGrvziD1Oya_y7VyGe2eZZI2FZBlITmQaPtfRouqVhUIbcJFVuRMbNul0bXnFDVeEVpTTH3StYMUeW4f2pzXucqpgXH6X3z0Cv4CiDLhmURAGbpJBhoQOvuRlEJEJmKuFKrYIwgbTEELROfVA9kDTOuWPDUqbvIAEfsgtU0&t=49337fe8
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 6e77a05ce1d5e8d19aa218e5a251e73f
af19b89b4228d9d552692cd3756f9fa740ea133c
0391959ff727c700b4f08adad1ea60c1d293be1851cf918cb1dc6ba1380d8f30
GET /ScriptResource.axd?d=caWFW8CVefPGrvziD1Oya_y7VyGe2eZZI2FZBlITmQaPtfRouqVhUIbcJFVuRMbNul0bXnFDVeEVpTTH3StYMUeW4f2pzXucqpgXH6X3z0Cv4CiDLhmURAGbpJBhoQOvuRlEJEJmKuFKrYIwgbTEELROfVA9kDTOuWPDUqbvIAEfsgtU0&t=49337fe8 HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Sun, 26 Nov 2023 13:41:37 GMT
Last-Modified: Sat, 26 Nov 2022 13:41:37 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 47752
chesuoigiang.vn/themes/generic.css
125.212.221.113200 OK 874 B URL HTTP/1.1 chesuoigiang.vn/themes/generic.css
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type troff or preprocessor input, ASCII text, with CRLF line terminators
Hash 570b3638c0f62364b87e001b3f0dbf58
c28ded9562957191c99b74b2405a1b85d7484e3b
39b03f559ec7f197601cbdb1b8d55f7678a2a721bb5f16f809456ed2ad4b3b12
GET /themes/generic.css HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Fri, 26 Aug 2016 01:35:25 GMT
Accept-Ranges: bytes
ETag: "39ca801e3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 874
chesuoigiang.vn/js/jquery-1.3.2.min.js
125.212.221.113200 OK 152 kB URL HTTP/1.1 chesuoigiang.vn/js/jquery-1.3.2.min.js
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type ASCII text, with very long lines (46986), with CRLF, LF line terminators
Size 152 kB (151903 bytes)
Hash ec4dfe63603070f617ff223970653446
787d3d614c1bdf0d783af6b4460311ab24dea09c
9d5d44f558cd8c63244b4f86ee84e3edae5606eb03ac2ffce7bb5d5ad192f92f
Analyzer Verdict Alert fortinet Malware
GET /js/jquery-1.3.2.min.js HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 26 Aug 2016 01:35:25 GMT
Accept-Ranges: bytes
ETag: "c115431e3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 151903
chesuoigiang.vn/autopopup/main.js
125.212.221.113200 OK 1.0 kB URL HTTP/1.1 chesuoigiang.vn/autopopup/main.js
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type ASCII text, with CRLF line terminators
Hash 67f71ec3f0da7be4dacb28c9e9b06bbe
8f5915c5811c1b45675b936a93171d211530977c
3b59287b854bfc0da11963183f2b77a44a1d6b25d8e027d9bc62f79824e396d9
Analyzer Verdict Alert fortinet Malware
GET /autopopup/main.js HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: application/javascript
Last-Modified: Fri, 26 Aug 2016 01:35:20 GMT
Accept-Ranges: bytes
ETag: "936b5b1b3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 1002
chesuoigiang.vn/WebResource.axd?d=Pl9L4y03UTbn2jXHENJuBSKQRlBdYblGi_oPOOlgHZmPDEeMsmERfKUQNvGLSapaOaSz9jLPMW1AJ8oOMi_dVLscoxM1&t=637814365746327080
125.212.221.113200 OK 23 kB URL HTTP/1.1 chesuoigiang.vn/WebResource.axd?d=Pl9L4y03UTbn2jXHENJuBSKQRlBdYblGi_oPOOlgHZmPDEeMsmERfKUQNvGLSapaOaSz9jLPMW1AJ8oOMi_dVLscoxM1&t=637814365746327080
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type ASCII text, with CRLF line terminators
Hash 90ea7274f19755002360945d54c2a0d7
647b5d8bf7d119a2c97895363a07a0c6eb8cd284
40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db
GET /WebResource.axd?d=Pl9L4y03UTbn2jXHENJuBSKQRlBdYblGi_oPOOlgHZmPDEeMsmERfKUQNvGLSapaOaSz9jLPMW1AJ8oOMi_dVLscoxM1&t=637814365746327080 HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Expires: Sun, 26 Nov 2023 13:25:11 GMT
Last-Modified: Sat, 26 Feb 2022 09:42:54 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 23063
chesachvn.com/wp-content/themes/Che/images/logotea.png
38.55.155.153301 Moved Permanently 162 B URL HTTP/1.1 chesachvn.com/wp-content/themes/Che/images/logotea.png
IP 38.55.155.153:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/themes/Che/images/logotea.png HTTP/1.1
Host: chesachvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 25 Nov 2022 23:41:48 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://chesachvn.com/wp-content/themes/Che/images/logotea.png
Strict-Transport-Security: max-age=31536000
chesuoigiang.vn/ScriptResource.axd?d=eNnNb2xJVk5vWW5UDN06QxirmoE7z2gV_eMz2GnGpiYhnrL56lQB9muZolx33G7Pmv4mbB8b8jX6HVO6GuZ5tGKKrnpIJyNXILvopOoRWNWSR8mOq9bpXw66juozpNw_RHTx40veu5F0umSJFjl8o2re3PTE8RWZ_LcT1yV60UXTWBIgAQQ3LWQ9PHauXHhVSjVl0g2&t=49337fe8
125.212.221.113200 OK 250 B URL HTTP/1.1 chesuoigiang.vn/ScriptResource.axd?d=eNnNb2xJVk5vWW5UDN06QxirmoE7z2gV_eMz2GnGpiYhnrL56lQB9muZolx33G7Pmv4mbB8b8jX6HVO6GuZ5tGKKrnpIJyNXILvopOoRWNWSR8mOq9bpXw66juozpNw_RHTx40veu5F0umSJFjl8o2re3PTE8RWZ_LcT1yV60UXTWBIgAQQ3LWQ9PHauXHhVSjVl0g2&t=49337fe8
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
Hash c72d2496df6f1e9536aaf1737be0152a
dabe01094217f439b22e3c6f2adf1a45dd451e18
591e34f9d7cb0bff9ad24f63b633f5823d30ab1fbdc6781e142adeb90dd48061
GET /ScriptResource.axd?d=eNnNb2xJVk5vWW5UDN06QxirmoE7z2gV_eMz2GnGpiYhnrL56lQB9muZolx33G7Pmv4mbB8b8jX6HVO6GuZ5tGKKrnpIJyNXILvopOoRWNWSR8mOq9bpXw66juozpNw_RHTx40veu5F0umSJFjl8o2re3PTE8RWZ_LcT1yV60UXTWBIgAQQ3LWQ9PHauXHhVSjVl0g2&t=49337fe8 HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: public
Content-Type: application/x-javascript
Content-Encoding: gzip
Expires: Sun, 26 Nov 2023 13:41:37 GMT
Last-Modified: Sat, 26 Nov 2022 13:41:37 GMT
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:36 GMT
Content-Length: 15431
chesuoigiang.vn/pic/web/theme/bg.gif
125.212.221.113200 OK 829 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/bg.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 1 x 1100\012- data
Hash 1f7f200c6208492ca97d98632924f37e
fdfcdf85e19c8e99a460c9651731e3136008f94b
ff2e7399718c74fa4cfbeba03c0cfe16710889cab76378ca01446c980bcdda4e
GET /pic/web/theme/bg.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "6c6cab413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 829
push.services.mozilla.com/
34.214.64.191101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.64.191:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OTrFqrgV4fYsO70gMa8pog==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PPdBaMzXQEZjWv3eyX/P+iNK4fc=
static.addtoany.com/menu/modules/core.9b4ec89f.js
104.22.71.197301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/modules/core.9b4ec89f.js
IP 104.22.71.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/modules/core.9b4ec89f.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 23:41:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 00:41:48 GMT
Location: https://static.addtoany.com/menu/modules/core.9b4ec89f.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76fe3cbb18fbf162-ARN
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-W6SNN9
142.250.74.168200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W6SNN9
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash eadbc5ccd582df08e88103849d922a2e
2978f5e09ff7569a4e9e997e76049de8749c5962
6e1a5e2f3cc5699d4e144f6e2eb346b546c8b45f5e2d798c23dbfa1474c56500
GET /gtm.js?id=GTM-W6SNN9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 25 Nov 2022 23:41:48 GMT
expires: Fri, 25 Nov 2022 23:41:48 GMT
cache-control: private, max-age=900
last-modified: Fri, 25 Nov 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37679
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/88276402_554944865375556_1715989565333831680_n.png
125.212.221.113200 OK 7.1 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/88276402_554944865375556_1715989565333831680_n.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash ca9d8deec09d7b1e1f5d2eb99c5662c1
e7f5b35b6d51d65b6e008d2d83e2c9bba3681d52
29e28b1a5149f1ff7becd9ab9d3ce4614e93162c1bb74fa4e5bc28608b64fd84
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/88276402_554944865375556_1715989565333831680_n.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 7060
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/thuong-can-kieu-cay-cau-canh-chu1.jpg
125.212.221.113200 OK 6.0 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/thuong-can-kieu-cay-cau-canh-chu1.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash f7271f5569b9eea76fe687bd056cb150
4db7d70fc30578d9ffad26f252285501e11ada56
0d15408b518034869706ee74f56dbff39150a15f0a839bd4cb79a30f919de789
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/thuong-can-kieu-cay-cau-canh-chu1.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 6047
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/che-pham-diet-moi-cay-tra-suoi-giang.jpg
125.212.221.113200 OK 7.6 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/che-pham-diet-moi-cay-tra-suoi-giang.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash d934106d547fe8dfabe45877f634b184
84cbdd9a91efe800bc599d9f8879bb892f585b37
a23228bf99b9e19c17ab81ccfa72cd2a360f1cb77582841653b3a97c30367ca7
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/che-pham-diet-moi-cay-tra-suoi-giang.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 7631
static.addtoany.com/menu/eso.9b4ec89f.js
104.22.71.197301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/eso.9b4ec89f.js
IP 104.22.71.197:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/eso.9b4ec89f.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 301 Moved Permanently
Date: Fri, 25 Nov 2022 23:41:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 26 Nov 2022 00:41:48 GMT
Location: https://static.addtoany.com/menu/eso.9b4ec89f.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 76fe3cbc298998f4-ARN
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash a0111a2443450172e5d2b48d350a8f57
75e89d4cd001303e66a93880f96d6c47e7d665ab
c9865c82b8f373aeb3a7333b0f65408211d832aba753c35d3544ecb2913f4f64
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images.dmca.com/badges/dmca.css?ID=997ccc30-ad0f-41b5-9642-6af27c9e93dd
151.139.128.10200 OK 475 B URL HTTP/1.1 images.dmca.com/badges/dmca.css?ID=997ccc30-ad0f-41b5-9642-6af27c9e93dd
IP 151.139.128.10:0
File type ASCII text, with very long lines (829), with no line terminators
Hash ee475b948e19d08c09b8217d177966f8
8116eba634c0c0bb5edde40f02687c4508296d84
4916684239da77340c44d93cb89a7756d279531420c0884bd935d7d9f5f5b352
GET /badges/dmca.css?ID=997ccc30-ad0f-41b5-9642-6af27c9e93dd HTTP/1.1
Host: images.dmca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:41:48 GMT
Content-Encoding: gzip
Content-Type: text/css
Last-Modified: Wed, 06 Apr 2011 05:58:45 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Cache-Control: public,max-age=31536000
ETag: "594d7db01ff4cb1:0"
X-Powered-By: ASP.NET
X-HW: 1669419708.cds242.sk1.h2,1669419708.cds230.sk1.c
Link: <http://www.dmca.com/badges/dmca.css>; rel="canonical"
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Length: 475
chesuoigiang.vn/pic/web/theme/Tea-S_03.gif
125.212.221.113200 OK 127 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/Tea-S_03.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 990 x 225\012- data
Size 127 kB (126761 bytes)
Hash 15b5fd108166ca803e620ee83c855588
ef2764598f1c66ed6e186b42915cc67983148091
71170ca571f7a7d626b7133e95681825943a15bf64d90818534b545990e77d9a
GET /pic/web/theme/Tea-S_03.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "56708423affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 126761
chesuoigiang.vn/pic/web/theme/body_top.gif
125.212.221.113200 OK 133 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_top.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 19 x 9\012- data
Hash 7c2d573dd3bc28ba8cb31876c04fe032
88799da18eac0e93cbb196e57906446ffc8a6b79
5a4e4d241bd536bac1b51a17aa8e35efe53a28741d2102ac54dde70e65497495
GET /pic/web/theme/body_top.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "9d38c7413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 133
chesuoigiang.vn/pic/web/theme/body_top_left.gif
125.212.221.113200 OK 688 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_top_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 19 x 20\012- data
Hash bac9d57ad4d3c63bc335e20dbe332105
a7e1697a2d012ca2ff8f811deb80f6c5c6f1573a
8fe5eec48aba35f3bba178b58c583bae967f96477102024d417139088e57e497
GET /pic/web/theme/body_top_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "3caac9413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 688
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 31fecd944b643357899b7098a9deb00f
8dd69939e328fa0ca5279f0df5dd07050a739f1b
aed4e3cac29dec21d618aa34d0a8c5702af803221426d54a401ab88e42530ff9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3930
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Last-Modified: Fri, 25 Nov 2022 22:36:23 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e922b25acaba2d7f8921ebe973a4b261
5dd4c237c84a652cbcf3db163529f3788ceafc46
a7856c7777aa01b671ddae097494f2b031cbbddc7b244fe8714a8c02b85d8589
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
chesachvn.com/wp-content/themes/Che/images/bgbottomsingle.png
38.55.155.153301 Moved Permanently 162 B URL HTTP/1.1 chesachvn.com/wp-content/themes/Che/images/bgbottomsingle.png
IP 38.55.155.153:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/themes/Che/images/bgbottomsingle.png HTTP/1.1
Host: chesachvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 25 Nov 2022 23:41:49 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://chesachvn.com/wp-content/themes/Che/images/bgbottomsingle.png
Strict-Transport-Security: max-age=31536000
chesuoigiang.vn/pic/web/theme/top_box.gif
125.212.221.113200 OK 260 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/top_box.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 1 x 37\012- data
Hash ffc6d52fc1732a9c8ea751a764739484
b2ac2911ef0bb4f3434fb04afd0d031900842d9b
4d0d5893a9ed2d5618f022f71a715e28fe7513a8829b4eb520fae4fe58a6995c
GET /pic/web/theme/top_box.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "4e65e423affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 260
chesuoigiang.vn/pic/web/theme/left_box.gif
125.212.221.113200 OK 1.9 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/left_box.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 43 x 37\012- data
Hash d86f9dc91c1e4ab38a33a9543f34f3fd
8ce81dd983052784caa4e86d15d9a18f14916e31
f248998d81864ac2b7f33f9400490d9d2525116ddea5b0983b1f201f2c19126e
GET /pic/web/theme/left_box.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "b68eed413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 1939
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 30 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 31ec4f8a3cf939809d0ccf97a240cf5c
842fd0ae4ef325857a300e22ce4a7620d9026ca0
dec9db2bf0f1a8ac9e23570fed760f03d339c2fbddefa51521b9cc59804d8801
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "029CBC89ADAB64CF2DEC68DD5AEA669262BD1A9E8AE138CB73830C752E53498C"
Last-Modified: Thu, 24 Nov 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21497
Expires: Sat, 26 Nov 2022 05:40:06 GMT
Date: Fri, 25 Nov 2022 23:41:49 GMT
Connection: keep-alive
chesuoigiang.vn/pic/web/theme/center_box.gif
125.212.221.113200 OK 317 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/center_box.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 1 x 112\012- data
Hash dc73a1ec38d36ed7fe2c8896eb1da456
5b50afffa87e29720bf6199ba47fc1864a463542
fee8a2d7e59caad911ef7fa3638480a581be0e37fbee40ed8e94c7f5f4cb85eb
GET /pic/web/theme/center_box.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "2326d1413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 317
chesuoigiang.vn/pic/web/theme/right_box.gif
125.212.221.113200 OK 659 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/right_box.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 9 x 37\012- data
Hash c992536effbddb242181b1ce3a98c6ce
f3f13f3ed86ab9057cb82091568344cfb6a02fd4
94394cd0ea88543d88de4d5d6a47f6fac5346120d6cb8dfd02a01af2f2039a28
GET /pic/web/theme/right_box.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "8478f9413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 659
www.youtube.com/embed/Hu0sjSK6IZI
216.58.211.14200 OK 26 kB URL HTTP/2 www.youtube.com/embed/Hu0sjSK6IZI
IP 216.58.211.14:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (54775)
Hash 1e736072d2407b0bf262de15a81b0007
e9f3896fa6ab6fb5c547337e5307c309450a5649
294b55369bea080fcf7ea5762e14c16e26c8862922a9e9e696565d61d8776778
GET /embed/Hu0sjSK6IZI HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 25 Nov 2022 23:41:49 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=yKz8z4ESCiY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=CF2ZGRcym7c; Domain=.youtube.com; Expires=Wed, 24-May-2023 23:41:49 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+817; expires=Sun, 24-Nov-2024 23:41:49 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/watch?v=Hu0sjSK6IZI
216.58.211.14200 OK 3.4 kB URL HTTP/2 www.youtube.com/watch?v=Hu0sjSK6IZI
IP 216.58.211.14:0
Hash 895c026829e5de2328186a54112e41f1
d814d62640e5e30643fd1916c038070c62e78c68
9089139584930ff4e8f09fcf2a9752e677ae26a89ccb93ea06aaba0d5f20070d
GET /watch?v=Hu0sjSK6IZI HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 25 Nov 2022 23:41:49 GMT
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-opener-policy-report-only: same-origin-allow-popups; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=hs8bEQbERxE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=; Domain=.youtube.com; Expires=Sat, 29-Feb-2020 23:41:49 GMT; Path=/; Secure; HttpOnly; SameSite=none
__Secure-YEC=CgtJRVdFOWlhdkhvdyi9pYWcBg%3D%3D; Domain=.youtube.com; Expires=Mon, 25-Dec-2023 23:41:48 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+197; expires=Sun, 24-Nov-2024 23:41:49 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 558591
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chesuoigiang.vn/pic/web/theme/listbg_leftmn.png
125.212.221.113200 OK 867 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/listbg_leftmn.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 14 x 17, 8-bit/color RGBA, non-interlaced\012- data
Hash ed89ded9aba15bff2fd98d0f5e2da80a
e04674540f46a56d75e727035ee44a4b10229c1f
4f914c18a3b211e06ada1ab36499205dbb0bc5a1090b929460c4d289edf9d992
GET /pic/web/theme/listbg_leftmn.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "9deeee413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 867
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 93333
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dulichsuoigiang.com/wp-content/uploads/2016/06/ban-tra-dien-da-nang-dt04.jpg
14.225.238.227200 OK 93 kB URL HTTP/1.1 dulichsuoigiang.com/wp-content/uploads/2016/06/ban-tra-dien-da-nang-dt04.jpg
IP 14.225.238.227:0
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 2x2, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, height=554, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=750], baseline, precision 8, 640x271, components 3\012- data
Hash 4cc0524c4bd51e8e45081645c8d08d37
50773518b60f32f33bc8b6c66106e9ebcf6c3198
77ee5c96fff89b2731c807262a840949ff253c08de1cb185e87aec29332161d3
GET /wp-content/uploads/2016/06/ban-tra-dien-da-nang-dt04.jpg HTTP/1.1
Host: dulichsuoigiang.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 25 Nov 2022 23:41:48 GMT
Content-Type: image/jpeg
Content-Length: 93271
Last-Modified: Fri, 14 Apr 2017 10:33:38 GMT
Connection: keep-alive
ETag: "58f0a582-16c57"
Accept-Ranges: bytes
chesuoigiang.vn/pic/web/theme/bottom_center_box.gif
125.212.221.113200 OK 65 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/bottom_center_box.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 1 x 9\012- data
Hash fbd02014771445547ac1c1954f4afb5d
5e68352ac2c628cb4e82dd1f8ced42ce1b6d2d8c
d542a51a37878fcd92c39082d8f3e94ab05d0c80dda5eb07803830ec68c59660
GET /pic/web/theme/bottom_center_box.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "ef42cc413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 65
chesuoigiang.vn/pic/web/theme/bottom_left_box.gif
125.212.221.113200 OK 284 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/bottom_left_box.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 11 x 9\012- data
Hash 4a446f59c082061da5cb5ad62d58aa73
3b6530271b45e55c37e75c36938963bbcb813bc2
07c840d19e1a091ccd335ca65bafb8f92bad9f5fc1b28bfb28cf449bce2c7f33
GET /pic/web/theme/bottom_left_box.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "ef42cc413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 284
chesuoigiang.vn/pic/web/theme/bottom_right_box.gif
125.212.221.113200 OK 283 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/bottom_right_box.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 11 x 9\012- data
Hash 20c777c78c28f04b3734efde9de555be
af20e3ccdf0f11946a84149451c01252d0e7ccdb
225b26e9db1f53dfb12a64ded4f9be663055358ce853c875f6354325a387211d
GET /pic/web/theme/bottom_right_box.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "2218ce413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 283
chesuoigiang.vn/pic/web/theme/consulting_listbg.png
125.212.221.113200 OK 996 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/consulting_listbg.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 19 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash ce000093c3f3bb2a7836f304a11bb413
c029e4862d15217aa75a6ac28191f3ca778a3477
abc6d60d4c3907d7e1af13e24b90a102b334107e155f2b8b446d04e5767c6c0a
GET /pic/web/theme/consulting_listbg.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "6b22d3413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 996
chesuoigiang.vn/themes/1/loading.gif
125.212.221.113200 OK 9.5 kB URL HTTP/1.1 chesuoigiang.vn/themes/1/loading.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 120 x 7\012- data
Hash 3eb63d6867e720e525cca07b3e33afbc
a8f7e932184af78689021b9856294bf6f11357d1
92f83b8019abf0f93f7e51d04ebd33aa2ca447f68df7ecd2c08637af77551b05
GET /themes/1/loading.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/themes/1/js-image-slider.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:35:36 GMT
Accept-Ranges: bytes
ETag: "d94bd243affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 9548
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10659
Expires: Sat, 26 Nov 2022 02:39:28 GMT
Date: Fri, 25 Nov 2022 23:41:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 33 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9e0ac96bd3ecc6d7356f9ea3c4139d36
08565a40cf8ec96983aca96a4dd8d9b9beea571e
5cd8d8b217aeb72a3c30dc5b1ddf762339fd822a8aa2ea2cca0870d06f034f3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10659
Expires: Sat, 26 Nov 2022 02:39:28 GMT
Date: Fri, 25 Nov 2022 23:41:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10659
Expires: Sat, 26 Nov 2022 02:39:28 GMT
Date: Fri, 25 Nov 2022 23:41:49 GMT
Connection: keep-alive
chesuoigiang.vn/pic/web/theme/content_top.gif
125.212.221.113200 OK 65 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_top.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 1 x 10\012- data
Hash ab143566e26fae81e06a710152f26d48
052719a2a470c18105a842c00814534845e508a7
baf9465eb71c7843761e8bad14d626b118ddd1aa698481a616cb3e54149c7207
GET /pic/web/theme/content_top.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "5b9eda413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 65
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5088223f5973e3cd56f03f50a1e84b79
0b6c9b51d10762a4747286ab5b1c2354fa39c622
8159e4f7eec7bea518bb29e3fdb070bab4fb70116205577f7b7d74ad4d0dfbc7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc7a5b86-3ad1-40c7-b173-8a9ac078c227.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8913
x-amzn-requestid: d0a9414c-eccf-44e8-adb7-92654544eeb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWXEpeIAMFnzw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-5825510666b3e80a5f83cafa;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: whO__FB0B2ywDP_p63eQ044RXbT207sX1i87I6nPAFUB85nSYc0Cuw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 6943
etag: "0b6c9b51d10762a4747286ab5b1c2354fa39c622"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0174b63e0e8e8184799bedd77c7ca5f
ab196fcf5ef72cd13d1f8f370039258b963834ba
ffb99678ae74f059a66aaf5097b1c4b659519012f137b40a644ded7a3c524623
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14128
x-amzn-requestid: ac7d027c-55fe-479d-a5ca-baa09eabebea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUgEEXSIAMFzmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813466-061f1c9c36d007347d0c1302;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VBKkrmELCAhKQjBs5fb1udGUtrFAXF2_ifrzd8lTnmDTkdhO6d7clw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:07:00 GMT
etag: "ab196fcf5ef72cd13d1f8f370039258b963834ba"
content-type: image/jpeg
age: 5689
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TI0cacek54dPUYW7fYy0xm-1CKdRXZGqBH1vGURakUsBbm-WGcW-vA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:55 GMT
age: 5034
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
chesuoigiang.vn/pic/web/theme/content_top_right.gif
125.212.221.113200 OK 679 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_top_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 20 x 19\012- data
Hash 43ef4282452e5d5a2c3514e27ce433d3
34c7429dd80023f5298053563e062343697ddd7f
52ff7b5ffe9d002055c2eea82e212814817a255629399bfb0a3d9e653fd457ac
GET /pic/web/theme/content_top_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "f1a4e1413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 679
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faaa084a5-6673-4918-8b26-e359fdbd5c53.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faaa084a5-6673-4918-8b26-e359fdbd5c53.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0cfec0de07b11c3b4b2bde82a9d85395
c6a37206ae6327b5626ee48675638fb3b79eaf2b
b5cd58f099675e96d8f28b633c18db2aab90f1e7e0f593cd38e654f1956c53c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faaa084a5-6673-4918-8b26-e359fdbd5c53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10966
x-amzn-requestid: 9c8cca96-85d6-4256-9f64-e7ed26946e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVOLHMPoAMFTTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381358d-2857476f6bdd231525a041f8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RmHOIrJvsyjOKVoOMeV4yGpq4jNofO7-OB4PlhQyIcGEBlQWxBJMWw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:27 GMT
age: 6142
etag: "c6a37206ae6327b5626ee48675638fb3b79eaf2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP 34.120.237.76:0
Hash 7f7313165bca257f3ad5ec7f692d0eb7
28b7e0d57499b7a6e3a8069edfbb402dfc34ab4c
c69beb6dd1465fca1baf851e7e09d5ba389ad05bfdf5f3214fec26f05e987827
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 04:38:44 GMT
age: 68585
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg
34.120.237.76200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96437d0cb1ceaffa77124f0dcfeb38cf
3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50
89244601b0a4bc150033e52dc56cf0fbe2846ebba7532c477146258a70783e05
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93728079-c686-4b9a-9313-1cc6778793d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7799
x-amzn-requestid: 4b3bf619-fb69-4cfe-b8e7-7de4ea127853
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXADFOvoAMFXQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813866-77f561ae3496d84c75541300;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:49:26 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lt_7H9W9LVUS5gKPrBF_vGiXg-anP_bGV5izsxPiGhiasy2eBnltuw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:39 GMT
age: 4090
etag: "3f4a47cdd9ea3bbd20fec37e4a9dbfa9af2acc50"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
chesuoigiang.vn/pic/web/theme/off.png
125.212.221.113200 OK 6.3 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/off.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 54 x 55, 8-bit/color RGBA, non-interlaced\012- data
Hash 9a18b77eb6e18b9ffa1132237c68f2ac
b75a9f13f7af29eb63322a9734040f14dc6262bf
0938a7a21c2b6ac84228d13ad7b19ad215e2f32c832b2b0b6c2940c612f38f4e
GET /pic/web/theme/off.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "399f2413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 6293
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 31fecd944b643357899b7098a9deb00f
8dd69939e328fa0ca5279f0df5dd07050a739f1b
aed4e3cac29dec21d618aa34d0a8c5702af803221426d54a401ab88e42530ff9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3930
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Last-Modified: Fri, 25 Nov 2022 22:36:23 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279
chesuoigiang.vn/pic/web/theme/content_top_left.gif
125.212.221.113200 OK 677 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_top_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 20 x 19\012- data
Hash 3579873ff0d45258d40363ed5a6a6cf4
e4785c5e93d05e202c4cc44fb59c192440caa9b2
a2332a5d2b24d84ba50e748539893f63c7edd4148c47ae3aa6d47392f9396da4
GET /pic/web/theme/content_top_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "3dcdf413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 677
chesuoigiang.vn/pic/web/theme/header_tet.png
125.212.221.113200 OK 59 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/header_tet.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 1366 x 129, 8-bit/color RGBA, non-interlaced\012- data
Hash 43411038577e9d427f24500a681dac4d
90fe1940eec43e1c81514d8ad88db551e509e355
02f8364b3e932d8feab7204bcb08d1431a823e852d098a3eba9bedc5a4d68a01
GET /pic/web/theme/header_tet.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/common.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "201deb413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:37 GMT
Content-Length: 59145
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 60951c730d96e02c20219f2765873699
64d0ecb0d9001990841e9faa434d9239af4b6927
9eb0e510930409a6eed080afd7759a51ca4ecb58dd30ea04221cea917358f658
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
chesuoigiang.vn/pic/web/theme/content_ct_left.gif
125.212.221.113200 OK 64 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_ct_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 8 x 1\012- data
Hash 0cc981a53421d72edc76566015b65739
e82e0577b649d899066c36701e3ac39178f82957
c2bc0c889f0a9d612bc22773a4e6852268ee22b8fbdc4e189f3de0d84767fbfe
GET /pic/web/theme/content_ct_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "bd2cd8413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 64
static.doubleclick.net/instream/ad_status.js
142.250.74.166200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP 142.250.74.166:0
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Nov 2022 23:30:21 GMT
expires: Fri, 25 Nov 2022 23:45:21 GMT
cache-control: public, max-age=900
age: 688
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chesuoigiang.vn/pic/web/theme/content_ct_right.gif
125.212.221.113200 OK 65 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_ct_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 9 x 1\012- data
Hash 7c308b834dcf354db5ed5239e26d2194
4f3e91aaaab97d4e582f3cf4a1b1dee47a12f046
af5863408cdabf9e8db5da84160a2013fd4c898b23e59bbf72f159f3576475bb
GET /pic/web/theme/content_ct_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "5b9eda413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 65
googleads.g.doubleclick.net/pagead/id
142.250.74.162302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP 142.250.74.162:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Fri, 25 Nov 2022 23:41:49 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chesuoigiang.vn/css/images/telbottomsingle.png
125.212.221.113404 Not Found 1.2 kB URL HTTP/1.1 chesuoigiang.vn/css/images/telbottomsingle.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
GET /css/images/telbottomsingle.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:38 GMT
Content-Length: 1245
chesachvn.com/wp-content/themes/Che/images/bgbottomsingle.png
38.55.155.153301 Moved Permanently 162 B URL HTTP/2 chesachvn.com/wp-content/themes/Che/images/bgbottomsingle.png
IP 38.55.155.153:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/themes/Che/images/bgbottomsingle.png HTTP/1.1
Host: chesachvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 25 Nov 2022 23:41:49 GMT
content-type: text/html
location: http://www.chesachvn.com/
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
chesuoigiang.vn/pic/web/theme/content_bt.gif
125.212.221.113200 OK 132 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_bt.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 20 x 6\012- data
Hash de4f794ffe3a6989ce61bacb07e09fa5
4e07706d529f05b3e129df3ac6bd3dee9bd7f0c8
cd3eded7cdee47bb7585a3df3a03de7dd92e784122c18d2db2271cfc83723f8b
GET /pic/web/theme/content_bt.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "3c5bd4413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 132
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash be0da545931a6e6f06c7eb8395b8a3af
bea09f1e5d361abfe41135f1497b1b469699b912
3428d08f184d29f34d4067e1796ecfa6aa9f9cc6e76006fac23aaf175bdd4eaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.211.10200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.211.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 25 Nov 2022 23:41:49 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d3d2d21ac304813a16da64921ce18ba4
98b1762c675c61eeb18254986461e6b1074ebc92
af00429c189464ddb8df704dc48035421f943444df6ca17390fb97466c2e7e9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
chesuoigiang.vn/pic/web/theme/content_bt_left.gif
125.212.221.113200 OK 666 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_bt_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 20 x 19\012- data
Hash 64580be2021a625e35ba37fd25a8fec9
aa733a950c6ebea2743a7bc6fa4108af76fe6bbf
653cbc4e602f70c08d9bd201d8c400b4b4b2330637773745013168cee0329e4a
GET /pic/web/theme/content_bt_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "594d5413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 666
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
216.58.211.10200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 216.58.211.10:0
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 7363e7b99a19ced7cfc9c3c6487ce51f
5045df970fbff396d02e9da4814d27cd51e4e119
d85b38ab661eb29d9cd4f37f695e4881ebd9809e1c94efc664f50686b7a492ad
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 25 Nov 2022 23:41:49 GMT
server: ESF
cache-control: private
content-length: 30751
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b44543de9922ec7d97f2e0be1865553e
caef856450efd75de0cfae9402903b1f4bd6de4c
d251377b4bc11c32a847ce4dc5dfda92e56031617f5b3eeea54fdcd0945b3eb7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
chesuoigiang.vn/pic/web/theme/content_bt_right.gif
125.212.221.113200 OK 671 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/content_bt_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 20 x 19\012- data
Hash cb9f8cc8cd7f9d44b40315bfa0e4c834
221fd77b9bdf1cb3ce89ce67040cf6f45e64a74e
22fa3d28506458f0ae51f955fd658a37c3a3c30561ff31f7a36e8add733a1dbd
GET /pic/web/theme/content_bt_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "5690d7413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 671
chesuoigiang.vn/pic/web/theme/ft_left.gif
125.212.221.113200 OK 2.0 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/ft_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 14 x 129\012- data
Hash cd3a80b66a48f9ba663353bdb39d9601
093c9e05ca8447fe8073202d281679242d6b23a2
343bbaa39220f9faf159212a7fcaa93b9bc9938eddf2e06113181ac8dbfc2a6f
GET /pic/web/theme/ft_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "f1b2e4413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 1994
chesuoigiang.vn/pic/web/theme/tea_logo.png
125.212.221.113200 OK 13 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/tea_logo.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 103 x 129, 8-bit/color RGB, non-interlaced\012- data
Hash 76be923d2c99f548f908e96451b2d757
71f865bd3cc4f16778f0754010c7585d1d60e678
16405235dc175f6691c430b77b6e86e39c9c13b3ee37f90f9cf8bfcd8fb5175d
GET /pic/web/theme/tea_logo.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "34228423affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 13211
chesuoigiang.vn/pic/web/theme/ft_center.gif
125.212.221.113200 OK 551 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/ft_center.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 1 x 129\012- data
Hash fd823db5ea88f32df35acefd2b3734a5
3b05347e47dbe04a10847168c43847de336f8d17
a47532b527f8d6618a2f7b96fc8a5a6d6b46e41dc76a5e70efa4858e5a3fde4d
GET /pic/web/theme/ft_center.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "247ae3413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 551
chesuoigiang.vn/pic/web/theme/ft_right.gif
125.212.221.113200 OK 2.0 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/ft_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 15 x 129\012- data
Hash 834629f323811171eb339c49ea1d4caa
fbf1c596829ef4109b79f25fb621482586834d7e
81fba608fd65c7a79eaa4ae3989b7fb7a488443706a02ed80280c3f4a3d91df3
GET /pic/web/theme/ft_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "984be7413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 1954
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
216.58.211.10200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 216.58.211.10:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Fri, 25 Nov 2022 23:41:50 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.chesachvn.com/
38.55.155.153200 OK 7.7 kB IP 38.55.155.153:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5506), with CRLF, LF line terminators
Hash 29721146f646058815910ec264dc30c9
1fa6c5d33ef8148ec04b840f3e4f00bfc0ce4e51
be2b3de6e0e78c6de4fa16355c3d2084543942ec6d31d909fedd8545d6dc55ee
GET / HTTP/1.1
Host: www.chesachvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 23:41:50 GMT
content-type: text/html
content-length: 7664
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
chesuoigiang.vn/pic/web/theme/tel40.jpg
125.212.221.113200 OK 1.3 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/tel40.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 40x40, components 3\012- data
Hash 27c65074003d07247ea4b2dc95830ff1
b09aab4ad5ef67b5961bb6c6a7137f55c91c6ed3
365e08e1eca509719fb7e38ea4c74e12eed8855a80151cedeb47ad3cac5ced16
GET /pic/web/theme/tel40.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "1fbba423affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 1336
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
216.58.211.10200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 216.58.211.10:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 11d9dec0cb1372a9395031824e5a96e8
f0f292adac337005d2affdf50055e711df458ab7
3e03d149de8c8a4cc592475c53ea5d270cfbecbabd4794d71eec3b0fe8739847
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1068
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Fri, 25 Nov 2022 23:41:50 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
chesuoigiang.vn/pic/web/theme/body_bt_left.gif
125.212.221.113200 OK 685 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_bt_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 19 x 20\012- data
Hash e447f7bafbf70e91450a44de0e464b6f
4ba6267262ceb19bce1b50eb2945b73ffe4f07fb
3e359b1d6c5e3a6b425e8b2ab9093a6ec80b9eee09e64a8ff84d34266f60a3e6
GET /pic/web/theme/body_bt_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "3680c0413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 685
chesuoigiang.vn/pic/web/theme/body_bt_right.gif
125.212.221.113200 OK 691 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_bt_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 19 x 20\012- data
Hash d5aef2a18a009a01215508e9a300d501
7fc449fb0cc520a8eb45c7b98c3a4a469385a2f8
695c825444461fe71394b546f8a8c1a60d2b5aad9aa801631c2770bf595adec2
GET /pic/web/theme/body_bt_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "2167c3413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 691
chesuoigiang.vn/pic/web/theme/body_bottom.gif
125.212.221.113200 OK 228 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_bottom.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 19 x 16\012- data
Hash 5c672b0386f74e5f744aa983578c73b3
0edd8247181be727db25ecc41d568559e6cb5fff
3be56d3e05b7a3879800529536140456f10cb8ca9f2b67a050674890f1f55ca4
GET /pic/web/theme/body_bottom.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "2013b1413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 228
chesuoigiang.vn/pic/web/theme/repeat_left.gif
125.212.221.113200 OK 93 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/repeat_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 15 x 1\012- data
Hash 3fc85d4668bec0e9fdb02f3acb850923
c7a095b4e0dc06017c118ad0787399a0f7eca6e6
aade0e51d88d0e8dd89fecddd18bb061e7408daf771878913435b152d99099b4
GET /pic/web/theme/repeat_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "8478f9413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 93
www.chesachvn.com/
38.55.155.153200 OK 7.7 kB IP 38.55.155.153:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5506), with CRLF, LF line terminators
Hash 29721146f646058815910ec264dc30c9
1fa6c5d33ef8148ec04b840f3e4f00bfc0ce4e51
be2b3de6e0e78c6de4fa16355c3d2084543942ec6d31d909fedd8545d6dc55ee
GET / HTTP/1.1
Host: www.chesachvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 25 Nov 2022 23:41:50 GMT
content-type: text/html
content-length: 7664
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
chesuoigiang.vn/pic/web/theme/body_top_right.gif
125.212.221.113200 OK 682 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_top_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 19 x 20\012- data
Hash e92448f49637120b919c887839e3160f
1a862cd61a91fbcdc9f60e846c33b0819581e5bc
c0bb6273bc499dfdcc0f8cad942c73fe928210e726a7e039cca66c3b29ad482e
GET /pic/web/theme/body_top_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "3caac9413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 682
chesuoigiang.vn/pic/web/theme/repeat_right.gif
125.212.221.113200 OK 93 B URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/repeat_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 15 x 1\012- data
Hash 273f9fd4fde6844461d4684ff1115123
a62e9b4e64b41b03702e9ad9710d7c5900ea9d2b
9261709bfce43c2ccf692f07bf9ba876f8a8259247f4cd0e670649ee82da9cc4
GET /pic/web/theme/repeat_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "ea6f7413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 93
chesuoigiang.vn/pic/web/theme/body_left.gif
125.212.221.113200 OK 5.9 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_left.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 15 x 1011\012- data
Hash f290e991358376cf16cb6572b04a91e3
bd18b788a462044f64e053f500f1979cacd657fa
29586133aff664318a0790c960606686744fc90c50d4f5bf110ca44a727d4bdd
GET /pic/web/theme/body_left.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "ea9fc4413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 5933
chesuoigiang.vn/pic/web/theme/body_right.gif
125.212.221.113200 OK 6.0 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/body_right.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 15 x 1011\012- data
Hash bb5530f0323a1cdfeca4d6e217774491
da4a5e66ce87efdbfea4c2f24fed8c0ed777fbca
3be86eccda5683aad16c991bd59b6a07b0fa01b7a3c3182795dbb653b7a72bb9
GET /pic/web/theme/body_right.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "9d38c7413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 6045
chesuoigiang.vn/pic/web/theme/bgmn.gif
125.212.221.113200 OK 5.8 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/bgmn.gif
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type GIF image data, version 89a, 173 x 54\012- data
Hash 6e9b633b3a3ccd0f4ac387ce8515b1d3
3003717ea675d4a00cf6943c0a5806346333d5dc
50dc61bcec499165133cea0ef2c64c259b51091a55c7aabc731bbd293141ecfb
GET /pic/web/theme/bgmn.gif HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/gif
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "86a1ae413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 5834
chesuoigiang.vn/pic/web/theme/textbox_bg.png
125.212.221.113200 OK 1.1 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/textbox_bg.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 107 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 4acba4bff4c1cb2101f646cef5d1f12b
76b56ad69ef3a7af095d12be8f7b01e7e9f9d049
bf6a970988977d13f216a60fdc77f20d2319d851749531bc1a4807d5c9b937a0
GET /pic/web/theme/textbox_bg.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/css/theme.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "685d423affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 1142
chesuoigiang.vn/pic/news/tin%20tuc/co-gai-hai-che-truong-lan-phuong.jpg
125.212.221.113200 OK 50 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tin%20tuc/co-gai-hai-che-truong-lan-phuong.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x304, components 3\012- data
Hash f201664bcfbf71cac5b541de67ec869d
e5128f54a132f810d0357a62ae8fe638fe8e0807
cf1043bba52fff33bffc4971dba91f4f286d99c6f4661ace45ea7b2cd610b880
GET /pic/news/tin%20tuc/co-gai-hai-che-truong-lan-phuong.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:45 GMT
Accept-Ranges: bytes
ETag: "bd576d2a3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 49963
chesuoigiang.vn/themes/1/bullet.png
125.212.221.113200 OK 836 B URL HTTP/1.1 chesuoigiang.vn/themes/1/bullet.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 11 x 22, 8-bit/color RGBA, non-interlaced\012- data
Hash 117c0297bac6096d62702893e7d7b840
944fdf3a34941372eec4b6f9abe9f614910c70ee
787b1b4739ed664e7023df554798b4dcb6e0d6a62e93323528dd9e854bec5130
GET /themes/1/bullet.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/themes/1/js-image-slider.css
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:35:35 GMT
Accept-Ranges: bytes
ETag: "2434ae243affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 836
chesuoigiang.vn/pic/web/theme/btnSearch.png
125.212.221.113200 OK 2.8 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/btnSearch.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 78774e5df649e2d6d326e36184bd98a8
638bcb3b9e39f6f9e428bdd52d504708174489f0
bc3ed2fd7162d29a2f815fcdf35dd4e97107bd82b487cf058c2c7d3ff208a4ee
GET /pic/web/theme/btnSearch.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "84b4ce413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 2771
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/72161862_1396732637146843_6574631500292030464_n.png
125.212.221.113200 OK 7.5 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/72161862_1396732637146843_6574631500292030464_n.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 05c96775dc89ce053d80cb20a254680a
eec9b8393fd3d6041553eba5eebf4c0f7cb1924a
8ad22d7d71a62cc22d54c0b566a7e25b784a7ec96a9bad46d3744597829f2f27
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/72161862_1396732637146843_6574631500292030464_n.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 7485
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/che-viet-nam-dc-trao-giai-tra-the-gioi.jpg
125.212.221.113200 OK 6.0 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/che-viet-nam-dc-trao-giai-tra-the-gioi.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash cb55198c6e6d7cabb9f9e02744bd52ba
276ee883f526d1c6a6aebc204d61f9c93b99eed5
7f8b46b5bda7645a6741e6a9497ae10369deb10eb5acb445350cc21ddddb2927
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/che-viet-nam-dc-trao-giai-tra-the-gioi.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 6032
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=https://che-sach.com/wp-content/uploads/2017/03/doi-tra-yen-bai4.jpg
125.212.221.113200 OK 0 B URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=https://che-sach.com/wp-content/uploads/2017/03/doi-tra-yen-bai4.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=https://che-sach.com/wp-content/uploads/2017/03/doi-tra-yen-bai4.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 0
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/33186871_1178716292265814_752749566163419136_n.jpg
125.212.221.113200 OK 7.3 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/33186871_1178716292265814_752749566163419136_n.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 68928b328a14ccfae870213c05440398
97026cccf1f60fa08c009209690d2fd44ab71bba
da082d29a4b526475fc22fb0354c6a02a5c85490ee36734602f7c00d12c6871f
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/33186871_1178716292265814_752749566163419136_n.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:39 GMT
Content-Length: 7302
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=pic/news/UploadImage/hoi-thao-thuong-hieu-tra-viet636483242024037425.jpg
125.212.221.113200 OK 7.3 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=pic/news/UploadImage/hoi-thao-thuong-hieu-tra-viet636483242024037425.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash c17d8e56044f899db1b93e50bc14a76c
7d070881e6aa47a5288da98b4e84cc5dbc519647
7dca520bc3e17eb946372a3790816226f4dc5ff243f38004db0a824f3323ce17
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=pic/news/UploadImage/hoi-thao-thuong-hieu-tra-viet636483242024037425.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 7270
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/tra-cothu-suoi-giang-duy-thinh-tea-10.png
125.212.221.113200 OK 8.1 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/tra-cothu-suoi-giang-duy-thinh-tea-10.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 72d009ece18a1cd5316c92fd22eb6cfd
daf57fe7bec279509a719dd4a6740460a8002bb9
0f80aeee3d65807536d3466cfcf2afbf96e9be94ce271aa722f07ee2853a0d9e
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tin%20tuc/tra-cothu-suoi-giang-duy-thinh-tea-10.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 8103
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tra%20suoi%20giang/co%20gai%20hai%20tra.jpg
125.212.221.113200 OK 6.6 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tra%20suoi%20giang/co%20gai%20hai%20tra.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash d30cda72261aaa1f2f4c45686906062a
49f7f5014c766122826015a0861a65052003cd2a
f194d26ef8a27c09232cbe56b5bf2c95ec59a8949395ef457c5cfb88052163b2
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=/pic/news/tra%20suoi%20giang/co%20gai%20hai%20tra.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 6564
chesuoigiang.vn/pic/web/theme/cart.png
125.212.221.113200 OK 6.7 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/cart.png
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 95 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash 72740895ed0eb9f6fbe083beac3ae2fa
870e467cec507cf125fb6b0b5c0b781458a4d778
add13416d0c3bb70619d92ea6ed32aeb5473443f6e98b51142abfac360587b8e
GET /pic/web/theme/cart.png HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Fri, 26 Aug 2016 01:36:24 GMT
Accept-Ranges: bytes
ETag: "2326d1413affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 6746
chesuoigiang.vn/DrawThumbImage.ashx?width=150&height=120&ImageName=pic/store/UploadImage/may_han_mep_tui_dap_tay2634893939249190000.jpg
125.212.221.113200 OK 14 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=150&height=120&ImageName=pic/store/UploadImage/may_han_mep_tui_dap_tay2634893939249190000.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x120, components 3\012- data
Hash 6e12b9478765d25db60ea07d24d3bfd4
fb15e85d679d95d23b32f9b55bc90c5aeaa65aac
ea1280c3b7747112d473dc9598b114c8e3a7d596c16d3de3f25ec6eec3d25012
GET /DrawThumbImage.ashx?width=150&height=120&ImageName=pic/store/UploadImage/may_han_mep_tui_dap_tay2634893939249190000.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 13643
chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=pic/store/UploadImage/images_(1)634893933322130000.jpg
125.212.221.113200 OK 6.7 kB URL HTTP/1.1 chesuoigiang.vn/DrawThumbImage.ashx?width=80&height=60&ImageName=pic/store/UploadImage/images_(1)634893933322130000.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 80x60, components 3\012- data
Hash 56112dfa4d4858acf0be78f063499eee
12e2e4d41416c768c4f0a31bb00f1b18b2121978
a1070923b4666850c910b40b7a1901deb52f87cc11e15d9e3bc96b1c3c6589a8
GET /DrawThumbImage.ashx?width=80&height=60&ImageName=pic/store/UploadImage/images_(1)634893933322130000.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: image/jpeg
Server: Microsoft-IIS/10.0
X-AspNet-Version: 4.0.30319
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 6711
chesuoigiang.vn/pic/web/theme/website-da-dang-ky-voi-bo-cong-thuong.jpg
125.212.221.113200 OK 35 kB URL HTTP/1.1 chesuoigiang.vn/pic/web/theme/website-da-dang-ky-voi-bo-cong-thuong.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 368x205, components 3\012- data
Hash 237b78c288b729cfd8634cba07f5c6ca
67f2068c82437c0c4221029fd9899d9c68986a52
069e7a25fde8f605be50ae604d039e483345d4516e1e09b3945818f02cb84b14
GET /pic/web/theme/website-da-dang-ky-voi-bo-cong-thuong.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:36:25 GMT
Accept-Ranges: bytes
ETag: "97e811423affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 34969
chesuoigiang.vn/pic/news/tin%20tuc/che-mot-bup-suoi-giang-2.jpg
125.212.221.113200 OK 74 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tin%20tuc/che-mot-bup-suoi-giang-2.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x304, components 3\012- data
Hash 19f7e94884ee5c5a6f69f5d90c32869e
c83a53109b66f97928dda4074125a87ee7848249
33eafebce542f56616d2124565b9152941fcc847207db968b070c053093caedc
GET /pic/news/tin%20tuc/che-mot-bup-suoi-giang-2.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:45 GMT
Accept-Ranges: bytes
ETag: "d52a5b2a3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 73687
chesuoigiang.vn/pic/news/tin%20tuc/tra%20shan%20tuyet%20co%20thu%20suoi%20giang.jpg
125.212.221.113200 OK 88 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tin%20tuc/tra%20shan%20tuyet%20co%20thu%20suoi%20giang.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x304, components 3\012- data
Hash ff4de613fa23fa586e06ba04b89869a5
554c13da2f393c6539b74ffed6eb064ed1ba9ff0
d7e122d687da6bec4b0757e4deef73a65607262430f86e022eb9a52ca3b394da
GET /pic/news/tin%20tuc/tra%20shan%20tuyet%20co%20thu%20suoi%20giang.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:47 GMT
Accept-Ranges: bytes
ETag: "101ddf2b3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 87581
chesuoigiang.vn/pic/news/tin%20tuc/co%20gai%20nguoi%20mong%20hai%20tra%20tuyet.jpg
125.212.221.113200 OK 79 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tin%20tuc/co%20gai%20nguoi%20mong%20hai%20tra%20tuyet.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x304, components 3\012- data
Hash c8740a8f5d12667382c558b6536383a8
ec1c354487f9928e28b30140e196e073dd1e90b6
b0077fb52a8c8ccc3097b8cdf9de6ae3fa2713316b693dabf5d4d3117aa5dd64
GET /pic/news/tin%20tuc/co%20gai%20nguoi%20mong%20hai%20tra%20tuyet.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:45 GMT
Accept-Ranges: bytes
ETag: "a3226a2a3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 78638
chexanh.net/pic/7.png
103.75.185.15301 Moved Permanently 0 B IP 103.75.185.15:0
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pic/7.png HTTP/1.1
Host: chexanh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
X-Powered-By: PHP/7.4.33
X-DNS-Prefetch-Control: on
Content-Type: text/html; charset=UTF-8
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-LiteSpeed-Tag: d23_HTTP.404,d23_HTTP.301
X-Redirect-By: WordPress
Location: https://chexanh.net
X-LiteSpeed-Cache-Control: no-cache
Content-Length: 0
Date: Fri, 25 Nov 2022 23:37:48 GMT
Server: LiteSpeed
chesuoigiang.vn/pic/news/tra%20suoi%20giang/hai-che-1.jpg
125.212.221.113200 OK 66 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tra%20suoi%20giang/hai-che-1.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 718x310, components 3\012- data
Hash 2f093803390759421065efcafc232e53
cdbbdb2bd646107ebf20e91f882f58db00a45d6b
5a0543fe19e331e5fb9a1cee1b9238b38cb0e0f7e9b4026b546a47b3de319c6d
GET /pic/news/tra%20suoi%20giang/hai-che-1.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:51 GMT
Accept-Ranges: bytes
ETag: "e7ddbc2d3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 66101
chesuoigiang.vn/pic/news/tra%20suoi%20giang/thu-hai-che-6.jpg
125.212.221.113200 OK 50 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tra%20suoi%20giang/thu-hai-che-6.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 718x310, components 3\012- data
Hash 2cfd959300bd11c8a70fb9a73b03dd52
1692880fa65143581c89c53ba038a6d269b8222f
cf78008e6e6b98aa68963364c247653b1134b42984d8868354c9ab268908896b
GET /pic/news/tra%20suoi%20giang/thu-hai-che-6.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:51 GMT
Accept-Ranges: bytes
ETag: "4362142e3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 50438
chesuoigiang.vn/pic/news/tin%20tuc/10888425_366964073486636_8440687492118977109_n.jpg
125.212.221.113200 OK 95 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tin%20tuc/10888425_366964073486636_8440687492118977109_n.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x304, components 3\012- data
Hash 3f9ddda90afe0ef02d03bdcb8806c24c
a1c4910a6d3a7a1442941e9687663481bbb8e0e2
c800f3aeaa3c64e06e4550ab83d122167600fe629086cfe9162cf1c2e885e181
GET /pic/news/tin%20tuc/10888425_366964073486636_8440687492118977109_n.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:44 GMT
Accept-Ranges: bytes
ETag: "819cc9293affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 94601
chesuoigiang.vn/pic/news/tin%20tuc/che%20co%20thu%20suoi%20giang%20loai%201.jpg
125.212.221.113200 OK 49 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tin%20tuc/che%20co%20thu%20suoi%20giang%20loai%201.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x304, components 3\012- data
Hash 72ea5aa6f33912aa532054064a96f784
fe2e59e46f60e8402d3ee3f3110708e06b4e2f3a
f8913c474f1d1e6608c90de6b5fdc35ba91f0081c399e71ee3659774044b6313
GET /pic/news/tin%20tuc/che%20co%20thu%20suoi%20giang%20loai%201.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:45 GMT
Accept-Ranges: bytes
ETag: "4e543a2a3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 49244
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ba49ccdb1ca0020a43b0a36f3cdb42cf
b017cdf1d076b17322b3bbd3b3ca64fb130a01ff
701632f4286181263791824e2400af34fdc70fd8ccb583146dd652fd60ad34d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "701632F4286181263791824E2400AF34FDC70FD8CCB583146DD652FD60AD34D3"
Last-Modified: Wed, 23 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21534
Expires: Sat, 26 Nov 2022 05:40:46 GMT
Date: Fri, 25 Nov 2022 23:41:52 GMT
Connection: keep-alive
tcr.tynt.com/ti.js
172.64.151.83200 OK 16 kB IP 172.64.151.83:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1213)
Hash a384492ef8f3bb035fc8ecba870e86d3
a6da9b212e2d640261cc1c1a5c98096aef5d8778
9232a4a99aa4630732414441f411afe936b0e95047f3d018e46c40f211fc1ede
GET /ti.js HTTP/1.1
Host: tcr.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:41:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 21 Jul 2022 14:57:10 GMT
vary: Accept-Encoding
etag: W/"62d96946-b4ff"
content-encoding: gzip
CF-Cache-Status: HIT
Age: 103068
Expires: Mon, 28 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=259200
Server: cloudflare
CF-RAY: 76fe3cd1ef510b49-OSL
connect.facebook.net/vi_VN/sdk.js
31.13.72.12200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/vi_VN/sdk.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash 7ab6138632277e44bb6bcf8b94939b9d
69f24ed8b4d2746f6777e3bd9c380237347d9a2d
4506ad157b4c808647859a7056b245357b88c706949b60fbe4c9ec80a95d2dff
GET /vi_VN/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: f2e46eca909ec8712a2728e899defb70
ETag: "334289bb8e35440a09a15220d2086d7e"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Fri, 25 Nov 2022 23:57:39 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: erYThjInfkS7a8+LlJObnQ==
X-FB-Debug: 9kVJi31XPlJOxGZvm08kYORS+51+N8sB5t/Rmvl6pDbV1xrFO0AJdXAIUpE3VSaHQSFZBDpQ/ZctBz68WXgPpw==
Priority: u=3,i
X-FB-TRIP-ID: 1904183273
Date: Fri, 25 Nov 2022 23:41:52 GMT
Alt-Svc: h3=":443"; ma=86400
Connection: keep-alive
Content-Length: 1688
www.google-analytics.com/ga.js
142.250.74.174200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Fri, 25 Nov 2022 23:05:57 GMT
Expires: Sat, 26 Nov 2022 01:05:57 GMT
Cache-Control: public, max-age=7200
Age: 2155
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/1.1 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 20039
Date: Fri, 25 Nov 2022 22:22:56 GMT
Expires: Sat, 26 Nov 2022 00:22:56 GMT
Cache-Control: public, max-age=7200
Age: 4736
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript
connect.facebook.net/en_US/all.js
31.13.72.12200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/en_US/all.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (1957)
Hash 1f8cb797d18ad210b446000f395df8fb
5894c1930e3857bf055fe5d47d491c40d9b8d013
2ff2afafc15d3bf036bad7efb9d6d9e39a21e97e3f28c4daa70b8c72dd105872
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: f42a241dcb1c0e46586f4d55db44bbcc
ETag: "3c3069d06ffdfb76c2c2e4801700e970"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Fri, 25 Nov 2022 23:55:28 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: H4y3l9GK0hC0RgAPOV34+w==
X-FB-Debug: xLIJHX11ZK1zGDTYFAkXza97Tgtg26rfycgmrc4BocENOLOhk+Ti5HCeszvWSifNIkUUPQIYVp77ivqtiQro8g==
Priority: u=3,i
X-FB-TRIP-ID: 1904183273
Date: Fri, 25 Nov 2022 23:41:52 GMT
Alt-Svc: h3=":443"; ma=86400
Connection: keep-alive
Content-Length: 1686
widgets.amung.us/small.js
104.22.75.171200 OK 3.5 kB URL HTTP/1.1 widgets.amung.us/small.js
IP 104.22.75.171:0
File type ASCII text, with very long lines (8560), with no line terminators
Hash 08283f674ed2a3a87b0ca0b64950ef28
1d6018c4a9104d337726cfe9f67b43ff37acc0cb
442e1c2e9e1692d86c6c4df3c68167fbddb4ec4ec7fa90258fd683f5a5f3578d
GET /small.js HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:41:52 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Fri, 11 Nov 2022 22:14:56 GMT
etag: W/"636ec960-2170"
expires: Sat, 26 Nov 2022 23:30:18 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: HIT
Age: 694
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76fe3cd20c6a0a3c-ARN
platform.twitter.com/widgets.js
93.184.220.66200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP 93.184.220.66:0
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 7899fffaf0046efb7f9be2495d9dc928
d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 842
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Fri, 25 Nov 2022 23:41:52 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71B)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b7757171f2e55c37975a5bcdeba7a4ae
1ce146a166c3c1d510d26c855321ca4b2426353d
7675dc8e0d7a554bf286e61db1c9546aa6fc7188cb83c3d9bd5beb80c2351fe5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b7757171f2e55c37975a5bcdeba7a4ae
1ce146a166c3c1d510d26c855321ca4b2426353d
7675dc8e0d7a554bf286e61db1c9546aa6fc7188cb83c3d9bd5beb80c2351fe5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 2a03384abe9f9728677b1f7b876b4694
41c1c401e79ac5b6edc6fc3cce8b4d085c565ac1
744b3562ef1851ca3c0413020ef5c40e71af514e6ff8da065f6ea9f846e70717
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
chesuoigiang.vn/pic/news/tin%20tuc/co%20gai%20h'mong%20tra%20shan%20tuyet%20co%20thu.jpg
125.212.221.113200 OK 76 kB URL HTTP/1.1 chesuoigiang.vn/pic/news/tin%20tuc/co%20gai%20h'mong%20tra%20shan%20tuyet%20co%20thu.jpg
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x304, components 3\012- data
Hash 32bfd5095dc8e05794858e128e7e4c68
12d83ae1b97a5b6395ecd4ab7e8e4b07bd9d4e09
c874ea4012fe9a3b747c2126f4c0c28ec7dc2503ebd3539cf8726ddc34aac293
GET /pic/news/tin%20tuc/co%20gai%20h'mong%20tra%20shan%20tuyet%20co%20thu.jpg HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/jpeg
Last-Modified: Fri, 26 Aug 2016 01:35:45 GMT
Accept-Ranges: bytes
ETag: "f989672a3affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:40 GMT
Content-Length: 75878
platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fchesuoigiang.vn
93.184.220.66200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fchesuoigiang.vn
IP 93.184.220.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash 2b4968b185495eddda0d85b2351ebb71
c665785ca0f4039f8c71d94631cd50a879d866b5
eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fchesuoigiang.vn HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1992059
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Fri, 25 Nov 2022 23:41:52 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
chesuoigiang.vn/favicon.ico
125.212.221.113200 OK 5.4 kB URL HTTP/1.1 chesuoigiang.vn/favicon.ico
IP 125.212.221.113:0
ASN #38731 CHT Compamy Ltd
File type MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel\012- data
Hash 226751f4956360b1b2dab82705f01ae3
ead0f38081172bbc194fae77dcc2c03a55ad36fa
3f54f5e3fdc02326486980d0fa0a590290a69c97e8884317067a322270308d4f
GET /favicon.ico HTTP/1.1
Host: chesuoigiang.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/62/d/sto/may-han-mieng-tui-dap-tay.aspx
Cookie: ASP.NET_SessionId=fdawod4glyt3jq1qy5i1yi0m; lang=VIE
HTTP/1.1 200 OK
Content-Type: image/x-icon
Last-Modified: Fri, 26 Aug 2016 01:35:15 GMT
Accept-Ranges: bytes
ETag: "d71bc2183affd11:0"
Server: Microsoft-IIS/10.0
X-Powered-By: UrlRewriter.NET 1.8.0, ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Sat, 26 Nov 2022 13:41:41 GMT
Content-Length: 5430
www.google-analytics.com/collect?v=1&_v=j98&a=1426087408&t=pageview&_s=2&dl=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&ul=en-us&de=UTF-8&dt=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=152125675.392774832.1669419712.1669419712.1669419712.1&_utmz=152125675.1669419712.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1669419711754&_u=IQBCAEABAAAAACAAI~&jid=&gjid=&cid=392774832.1669419712&tid=UA-36327302-1&_gid=285078824.1669419712&z=1852266503
142.250.74.174200 OK 35 B URL HTTP/1.1 www.google-analytics.com/collect?v=1&_v=j98&a=1426087408&t=pageview&_s=2&dl=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&ul=en-us&de=UTF-8&dt=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=152125675.392774832.1669419712.1669419712.1669419712.1&_utmz=152125675.1669419712.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1669419711754&_u=IQBCAEABAAAAACAAI~&jid=&gjid=&cid=392774832.1669419712&tid=UA-36327302-1&_gid=285078824.1669419712&z=1852266503
IP 142.250.74.174:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j98&a=1426087408&t=pageview&_s=2&dl=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&ul=en-us&de=UTF-8&dt=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=152125675.392774832.1669419712.1669419712.1669419712.1&_utmz=152125675.1669419712.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1669419711754&_u=IQBCAEABAAAAACAAI~&jid=&gjid=&cid=392774832.1669419712&tid=UA-36327302-1&_gid=285078824.1669419712&z=1852266503 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Pragma: no-cache
X-Content-Type-Options: nosniff
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
Date: Fri, 25 Nov 2022 17:27:05 GMT
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Age: 22487
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Content-Type: image/gif
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=2069807177&utmhn=chesuoigiang.vn&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&utmhid=1426087408&utmr=-&utmp=%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&utmht=1669419711734&utmac=UA-36377702-1&utmcc=__utma%3D152125675.392774832.1669419712.1669419712.1669419712.1%3B%2B__utmz%3D152125675.1669419712.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1496383986&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
142.250.74.174302 Found 370 B URL HTTP/1.1 www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=2069807177&utmhn=chesuoigiang.vn&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&utmhid=1426087408&utmr=-&utmp=%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&utmht=1669419711734&utmac=UA-36377702-1&utmcc=__utma%3D152125675.392774832.1669419712.1669419712.1669419712.1%3B%2B__utmz%3D152125675.1669419712.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1496383986&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP 142.250.74.174:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash fef5b98e868a56e0fa6817f351ff1cd8
2b7eea286ed3c58f30bf00f63807c55224d30d2f
c3cf195fdccdaaa63ceab61140d3f31cafc58b98d3796f61d4612aed82b56a1e
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=2069807177&utmhn=chesuoigiang.vn&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&utmhid=1426087408&utmr=-&utmp=%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&utmht=1669419711734&utmac=UA-36377702-1&utmcc=__utma%3D152125675.392774832.1669419712.1669419712.1669419712.1%3B%2B__utmz%3D152125675.1669419712.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1496383986&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 302 Found
Location: https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-36377702-1&cid=392774832.1669419712&jid=1496383986&_v=5.7.2&z=2069807177
Access-Control-Allow-Origin: *
Date: Fri, 25 Nov 2022 23:41:52 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
Server: Golfe2
Content-Length: 370
ocsp.digicert.com/
93.184.220.29200 OK 312 B IP 93.184.220.29:0
Hash 735c9d7f22925c5ab8aefbb8af96afb5
cd3e0452bcf4efb8a250cad5d8245b8744e486f6
edcb8cc42b114a2990957b054a6a5c71e7262f01090273d034d55006a016c53a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5453
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Etag: "63804d52-138"
Last-Modified: Fri, 25 Nov 2022 22:10:59 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 312
developers.google.com/
142.250.74.14301 Moved Permanently 0 B IP 142.250.74.14:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://developers.google.com/
X-Cloud-Trace-Context: 5a1126e484c94fe25021588fb2d91775
Date: Fri, 25 Nov 2022 23:41:52 GMT
Content-Type: text/html
Server: Google Frontend
Content-Length: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 966255e8eae5f73b5fe45aab88646f99
57eadbf09ae6a8170cdfe3b0691b908f49e2c08d
a99ecadf4c294cebf0c392ea036f508443cb471c44773cc5ea0212ab86074cbe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1446
Cache-Control: max-age=108071
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Etag: "63805041-1d7"
Expires: Sun, 27 Nov 2022 05:43:03 GMT
Last-Modified: Fri, 25 Nov 2022 05:18:57 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
chexanh.net/
103.75.185.15200 OK 1.3 kB IP 103.75.185.15:0
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash c8ec54ce2ad05db6d930def424babb1c
dbd9f0223f883223c94d400e3e4a17fd911236a7
e6d58b84e5bfbb040855d7757c9c09901985b688d4e09e55aa97fcacccfbd6db
GET / HTTP/1.1
Host: chexanh.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
x-dns-prefetch-control: on
content-type: text/html; charset=UTF-8
link: <https://chexanh.net/wp-json/>; rel="https://api.w.org/", <https://chexanh.net/wp-json/wp/v2/pages/7>; rel="alternate"; type="application/json", <https://chexanh.net/>; rel=shortlink
etag: "40728-1668910692;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 24345
date: Fri, 25 Nov 2022 23:37:49 GMT
server: LiteSpeed
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-user-list/975712529/?random=1669419707809&cv=9&fst=1669417200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=dynx_itemid%3DREPLACE_WITH_VALUE%3Bdynx_itemid2%3DREPLACE_WITH_VALUE%3Bdynx_pagetype%3DREPLACE_WITH_VALUE%3Bdynx_totalvalue%3DREPLACE_WITH_VALUE&frm=0&url=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&tiba=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&fmt=3&is_vtc=1&random=1780130674&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
142.250.74.164200 OK 42 B URL HTTP/2 www.google.com/pagead/1p-user-list/975712529/?random=1669419707809&cv=9&fst=1669417200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=dynx_itemid%3DREPLACE_WITH_VALUE%3Bdynx_itemid2%3DREPLACE_WITH_VALUE%3Bdynx_pagetype%3DREPLACE_WITH_VALUE%3Bdynx_totalvalue%3DREPLACE_WITH_VALUE&frm=0&url=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&tiba=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&fmt=3&is_vtc=1&random=1780130674&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y
IP 142.250.74.164:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/975712529/?random=1669419707809&cv=9&fst=1669417200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=dynx_itemid%3DREPLACE_WITH_VALUE%3Bdynx_itemid2%3DREPLACE_WITH_VALUE%3Bdynx_pagetype%3DREPLACE_WITH_VALUE%3Bdynx_totalvalue%3DREPLACE_WITH_VALUE&frm=0&url=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&tiba=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&fmt=3&is_vtc=1&random=1780130674&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 23:41:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/vi_VN/sdk.js?hash=37a89cdc024af8792aa1b979a269525e
31.13.72.12200 OK 87 kB URL HTTP/2 connect.facebook.net/vi_VN/sdk.js?hash=37a89cdc024af8792aa1b979a269525e
IP 31.13.72.12:0
File type ASCII text, with very long lines (13192)
Hash e0cb8a51837cea2dd1c9b9dd1e584a62
4cb4e69bee863260e3a9841cb1fb6bb58ecfc2f8
8053ee14325b3e425b8c4c91e704112a8448c953da9d5bd20fa80a7f7ab10891
GET /vi_VN/sdk.js?hash=37a89cdc024af8792aa1b979a269525e HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: f1b5d1d2a2c60b3dce02bdd5f1497af7
etag: "24b222a157b222e92c1ebadc387fea1d"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 25 Nov 2023 23:23:40 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 4MuKUYN86i3RybndHlhKYg==
x-fb-debug: vC4EMbZEgX3SE6SPKJ5mNQkOi4F3g0mESGFBL0e11HmeQt0WQ0xCO5EYO4j+k1Z6X7kuBtIR2tx7C4ea27RVLw==
content-length: 87037
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:52 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.no/pagead/1p-user-list/975712529/?random=1669419707809&cv=9&fst=1669417200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=dynx_itemid%3DREPLACE_WITH_VALUE%3Bdynx_itemid2%3DREPLACE_WITH_VALUE%3Bdynx_pagetype%3DREPLACE_WITH_VALUE%3Bdynx_totalvalue%3DREPLACE_WITH_VALUE&frm=0&url=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&tiba=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&fmt=3&is_vtc=1&random=1780130674&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
142.250.74.3200 OK 42 B URL HTTP/2 www.google.no/pagead/1p-user-list/975712529/?random=1669419707809&cv=9&fst=1669417200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=dynx_itemid%3DREPLACE_WITH_VALUE%3Bdynx_itemid2%3DREPLACE_WITH_VALUE%3Bdynx_pagetype%3DREPLACE_WITH_VALUE%3Bdynx_totalvalue%3DREPLACE_WITH_VALUE&frm=0&url=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&tiba=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&fmt=3&is_vtc=1&random=1780130674&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y
IP 142.250.74.3:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/975712529/?random=1669419707809&cv=9&fst=1669417200000&num=1&guid=ON&eid=375603261&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&data=dynx_itemid%3DREPLACE_WITH_VALUE%3Bdynx_itemid2%3DREPLACE_WITH_VALUE%3Bdynx_pagetype%3DREPLACE_WITH_VALUE%3Bdynx_totalvalue%3DREPLACE_WITH_VALUE&frm=0&url=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&tiba=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&fmt=3&is_vtc=1&random=1780130674&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 25 Nov 2022 23:41:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 24bbb1799a4197ca54d07a718929c244
306e1db159c6462ac16527788f772c0615f3741d
5f3ac2e0666918f3c4a525d1d0e811059b5f5143c10883e8c9dd8726938f3797
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:41:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 23 Nov 2022 23:33:45 GMT
Expires: Wed, 30 Nov 2022 23:33:44 GMT
Etag: "306e1db159c6462ac16527788f772c0615f3741d"
Cache-Control: max-age=430911,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76fe3cd46f9efabc-OSL
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 966255e8eae5f73b5fe45aab88646f99
57eadbf09ae6a8170cdfe3b0691b908f49e2c08d
a99ecadf4c294cebf0c392ea036f508443cb471c44773cc5ea0212ab86074cbe
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1446
Cache-Control: max-age=108071
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Etag: "63805041-1d7"
Expires: Sun, 27 Nov 2022 05:43:03 GMT
Last-Modified: Fri, 25 Nov 2022 05:18:57 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
whos.amung.us/pingjs/?k=5btjxzjh6r1y&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&c=s&x=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&y=&a=0&d=2.27&v=27&r=3905
104.22.74.171200 OK 50 B URL HTTP/1.1 whos.amung.us/pingjs/?k=5btjxzjh6r1y&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&c=s&x=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&y=&a=0&d=2.27&v=27&r=3905
IP 104.22.74.171:0
File type ASCII text, with no line terminators
Hash 5c78ba8720669d51e97bc3dc9b79f6bc
66dcc405a25323194d679924786f306adf08139d
c9e93f4e27aa8f70032badc8464d4489f085df34fab73ac4e2ea451e385bfcc3
GET /pingjs/?k=5btjxzjh6r1y&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay&c=s&x=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&y=&a=0&d=2.27&v=27&r=3905 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://chesuoigiang.vn/
HTTP/1.1 200 OK
Date: Fri, 25 Nov 2022 23:41:52 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76fe3cd42ede9909-ARN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36327302-1&cid=392774832.1669419712&jid=601475499&gjid=1454827663&_gid=285078824.1669419712&_u=IQBCAEAAAAAAACAAI~&z=127573590
142.250.150.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36327302-1&cid=392774832.1669419712&jid=601475499&gjid=1454827663&_gid=285078824.1669419712&_u=IQBCAEAAAAAAACAAI~&z=127573590
IP 142.250.150.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-36327302-1&cid=392774832.1669419712&jid=601475499&gjid=1454827663&_gid=285078824.1669419712&_u=IQBCAEAAAAAAACAAI~&z=127573590 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://chesuoigiang.vn
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 23:41:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-36377702-1&cid=392774832.1669419712&jid=1496383986&_v=5.7.2&z=2069807177
142.250.150.156302 Found 368 B URL HTTP/2 stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-36377702-1&cid=392774832.1669419712&jid=1496383986&_v=5.7.2&z=2069807177
IP 142.250.150.156:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2d703807631e06d3594cd82ee676d68a
9de0ba280fadef1b56fc2dbd17c244065ec86076
eada9c086a53517a5a2afee4bb87d7424d57270e4ad6203e9affe93400202542
GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-36377702-1&cid=392774832.1669419712&jid=1496383986&_v=5.7.2&z=2069807177 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://www.google.com/ads/ga-audiences?v=1&aip=1&t=sr&_r=4&tid=UA-36377702-1&cid=392774832.1669419712&jid=1496383986&_v=5.7.2&z=2069807177
access-control-allow-origin: *
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 25 Nov 2022 23:41:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
server: Golfe2
content-length: 368
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash e61028bc752671cea11924bc1a42a422
b2555d630c063dda53f0e5a84324759e42b48352
23c45f9941b1a476fe0cd4650c9ea13a22e05e5640025e380b13faa4997109ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 163d4912a06d8358abc770dc0351d7b4
1e8dc04b95e704679ab729f81716466ea8a3e591
72245d178d481350af611804e557032ffb7bb3a3e8cdb83f3332a5ffba78d193
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh6.googleusercontent.com/-FByNmDPd12M/ULDkDal4VOI/AAAAAAAAA8g/uHcCD3Ahbns/s128/may%20han%20mep%20tui%20dap%20tay2.jpg
142.250.74.33200 OK 6.7 kB URL HTTP/2 lh6.googleusercontent.com/-FByNmDPd12M/ULDkDal4VOI/AAAAAAAAA8g/uHcCD3Ahbns/s128/may%20han%20mep%20tui%20dap%20tay2.jpg
IP 142.250.74.33:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 128x128, components 3\012- data
Hash e403cc1fcefd89cdcdb98dd8b885f30c
b115c00a9853ccde911b9c837ef9d5059b2c493f
efd6890d7fc003168a3acba7f8b9441fac7cacad0768aa954e31eb40f6474239
GET /-FByNmDPd12M/ULDkDal4VOI/AAAAAAAAA8g/uHcCD3Ahbns/s128/may%20han%20mep%20tui%20dap%20tay2.jpg HTTP/1.1
Host: lh6.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3c8"
expires: Sat, 26 Nov 2022 23:41:52 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="may han mep tui dap tay2.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 23:41:52 GMT
server: fife
content-length: 6725
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-mUBHuHXlOYA/ULDkC7v8uLI/AAAAAAAAA8c/e7g0iBAa6wI/s128/may%20han%20mep%20tui%20dap%20tay.jpg
142.250.74.33200 OK 3.5 kB URL HTTP/2 lh4.googleusercontent.com/-mUBHuHXlOYA/ULDkC7v8uLI/AAAAAAAAA8c/e7g0iBAa6wI/s128/may%20han%20mep%20tui%20dap%20tay.jpg
IP 142.250.74.33:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 128x105, components 3\012- data
Hash 558238fa5171f7319d9f2885fdc89e56
7cf60c14dbf90ce3be533f66b675e97d0d0bf267
aec3291d724863836b5fd68b29e7a91db4e86e64b5ab67d62c5bf67c50541962
GET /-mUBHuHXlOYA/ULDkC7v8uLI/AAAAAAAAA8c/e7g0iBAa6wI/s128/may%20han%20mep%20tui%20dap%20tay.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3c7"
expires: Sat, 26 Nov 2022 23:41:52 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="may han mep tui dap tay.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 25 Nov 2022 23:41:52 GMT
server: fife
content-length: 3463
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
syndication.twitter.com/settings?session_id=420fc4cf4ecf6b80d2ccd2e64c0eba36248c43f7
104.244.42.200200 OK 374 B URL HTTP/2 syndication.twitter.com/settings?session_id=420fc4cf4ecf6b80d2ccd2e64c0eba36248c43f7
IP 104.244.42.200:0
File type JSON data\012- , ASCII text, with very long lines (913), with no line terminators
Hash 925c2a7587f39436ea29513221652474
695b7f2f3d99f407bcdfd0b372db0e28193cc60c
62e36e14e5c219119cb51c3cdf43a2005512a1bd6ebf2d68d0c610a2e6e3ef0f
GET /settings?session_id=420fc4cf4ecf6b80d2ccd2e64c0eba36248c43f7 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:51 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Fri, 25 Nov 2022 23:41:52 GMT
content-length: 374
content-encoding: gzip
x-transaction-id: ff13d785711d8eaf
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 117
x-connection-hash: 74c531a71fe90f8acc352b700bc441ccd9a7fb49b4eac3d1f6249dbe06fbc077
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash e4d661d999b855142d472fd230fb4ab3
b4be1feeaccc98768ec3393929772bd8f75deed7
97a1c1b509250dd99cde7f76b53a43b7ee415011744414d83f5980df2e11dc60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 25 Nov 2022 23:41:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.dtscout.com/i/?l=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&j=
172.64.163.7200 OK 5.4 kB URL HTTP/2 t.dtscout.com/i/?l=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&j=
IP 172.64.163.7:0
File type ASCII text, with very long lines (2077)
Hash 9fedeb99e95b41e18866ea64da72617e
ffa9263e61136ae1984e35762ae8c7cb7578bcb8
9d4865c771af2a521ba628f3a07aea9eabc36a13af1ff9421d5a90dac46c1a1f
GET /i/?l=http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:52 GMT
content-type: application/javascript
x-s: mtl3
set-cookie: m=1; Domain=dtscout.com; Expires=Sat, 26-Nov-2022 01:05:12 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sat, 26-Nov-2022 03:41:52 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1669419712; Domain=dtscout.com; Expires=Sun, 05-Mar-2023 23:41:52 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.446
expires: Fri, 25 Nov 2022 23:41:51 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ced1CibYvKFVD4HeRDIqpa4dk5zIBujpgBoaZpj%2BPynR5niylavb9y8u3d1wrNIpGOinMVhJSLWr4YmzFqzq39U3IDcJG5h5Yy%2Ff8bQ6iV5UuUk9AKx79hWoVqY2kgjX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fe3cd3798671e0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
93.184.220.66200 OK 2.4 kB URL HTTP/1.1 platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
IP 93.184.220.66:0
File type ASCII text, with very long lines (7017), with no line terminators
Hash 83616664e4155f8af0efb0576f8920cf
1277b0f4f935bec3ada0f87c45395bb6d9b2efbc
bb19d85932c5e8a952b6fc28c1df42aed6d6920f79ee3f2217d2484294d575d3
GET /js/button.d2f864f87f544dc0c11d7d712a191c1f.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1992053
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Fri, 25 Nov 2022 23:41:52 GMT
Etag: "7bb2d17ac20be3bd6ec1079356afecd9+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71B)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2362
t.dtscout.com/pv/?_a=v&_h=chesuoigiang.vn&_ss=1yyh1bxehf&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=4z3z&_cb=_dtspv.c
172.64.163.7200 OK 96 B URL HTTP/2 t.dtscout.com/pv/?_a=v&_h=chesuoigiang.vn&_ss=1yyh1bxehf&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=4z3z&_cb=_dtspv.c
IP 172.64.163.7:0
File type ASCII text, with no line terminators
Hash 4d98f33d172fbed24582ec36256dd2f5
7813b29ea7c4dd83a4fda83beea0f42b9fc6e12c
5a310a2030203dbab8c71b73b4aa43b80f75ae88eff376ed2a29a1bda09b5eeb
GET /pv/?_a=v&_h=chesuoigiang.vn&_ss=1yyh1bxehf&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=4z3z&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Cookie: m=1; oa=1; df=1669419712
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:52 GMT
content-type: application/javascript
x-t: 0.158
x-c: 0
expires: Fri, 25 Nov 2022 23:41:51 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0R8MMoxjrUkPNXP29p0zK30T9sTMFb1iIpZLKuXHHyv1mICZk8E0qNSPXoTpyWOui%2BxyOqkkLy9ZnO5EeOVYNVRSF0mLLdnxBJPI7KYyesh%2FV5ZZfIHb3JM887WvpDG7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76fe3cd4daee71e0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
93.184.220.66200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
IP 93.184.220.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32033)
Hash cd8176e04a5a760140a9de9ffe9d8a17
f3b4514c9df71da30eadd2d87fd6131e5c3bf7e3
601089b9e7dcd29e255c391dff1c3da64dd80bb72ee047561592d86dbbc4c472
GET /widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1992053
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Fri, 25 Nov 2022 23:41:53 GMT
Etag: "126ffb93f08e989b18a6e1fc082c9e33+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:56 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71B)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 13753
ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.16.1
date: Fri, 25 Nov 2022 23:41:52 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
de.tynt.com/deb/v2?id=bOIpg6KBir4l-hadbi-bpO&dn=TI&cc=1&r=
67.202.105.33200 OK 4 B URL HTTP/2 de.tynt.com/deb/v2?id=bOIpg6KBir4l-hadbi-bpO&dn=TI&cc=1&r=
IP 67.202.105.33:0
File type ASCII text, with no line terminators
Hash 350fd6ef6446635f7a8f608434a405ec
a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179
GET /deb/v2?id=bOIpg6KBir4l-hadbi-bpO&dn=TI&cc=1&r= HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
expires: Sat, 26 Nov 2022 23:41:53 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/javascript
content-length: 4
date: Fri, 25 Nov 2022 23:41:52 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0&t=M%C3%A1y%20H%C3%A0n%20Mi%E1%BB%87ng%20T%C3%BAi%20D%E1%BA%ADp%20Tay%7CMay%20han%20mieng%20tui%20dap%20tay HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Fri, 25 Nov 2022 23:41:53 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1669419712278%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=420fc4cf4ecf6b80d2ccd2e64c0eba36248c43f7
104.244.42.200200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1669419712278%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=420fc4cf4ecf6b80d2ccd2e64c0eba36248c43f7
IP 104.244.42.200:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fchesuoigiang.vn%2F62%2Fd%2Fsto%2Fmay-han-mieng-tui-dap-tay.aspx%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1669419712278%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=420fc4cf4ecf6b80d2ccd2e64c0eba36248c43f7 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:52 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Fri, 25 Nov 2022 23:41:53 GMT
content-length: 43
x-transaction-id: 4a5fd3f14fe0a726
strict-transport-security: max-age=631138519
x-response-time: 117
x-connection-hash: 74c531a71fe90f8acc352b700bc441ccd9a7fb49b4eac3d1f6249dbe06fbc077
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Fri, 25 Nov 2022 23:41:53 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Fri, 25 Nov 2022 23:41:53 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Fri, 25 Nov 2022 23:41:53 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=bOIpg6KBir4l-hadbi-bpO&lm=0&ts=1669419711623&dn=TI&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Fri, 25 Nov 2022 23:41:53 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
www.facebook.com/v2.5/plugins/comments.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3587b6b59b4c38%26domain%3Dchesuoigiang.vn%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fchesuoigiang.vn%252Ff2d088ecad5fb08%26relation%3Dparent.parent&color_scheme=light&container_width=715&height=100&href=http%3A%2F%2Fchesuoigiang.vn%2F&locale=vi_VN&numposts=5&sdk=joey&version=v2.5&width=550
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/v2.5/plugins/comments.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3587b6b59b4c38%26domain%3Dchesuoigiang.vn%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fchesuoigiang.vn%252Ff2d088ecad5fb08%26relation%3Dparent.parent&color_scheme=light&container_width=715&height=100&href=http%3A%2F%2Fchesuoigiang.vn%2F&locale=vi_VN&numposts=5&sdk=joey&version=v2.5&width=550
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2.5/plugins/comments.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3587b6b59b4c38%26domain%3Dchesuoigiang.vn%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fchesuoigiang.vn%252Ff2d088ecad5fb08%26relation%3Dparent.parent&color_scheme=light&container_width=715&height=100&href=http%3A%2F%2Fchesuoigiang.vn%2F&locale=vi_VN&numposts=5&sdk=joey&version=v2.5&width=550 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: T8WAFrW3vHuS7E151wUCK882TsOdzzMj7gHwpp8UlYZr/VFRqlGSrUK4BdYIOcuoKj/GykFYyJ7POvKE79PNOg==
content-length: 0
date: Fri, 25 Nov 2022 23:41:53 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/qaVSlhEOkZo.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 4.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yP/l/0,cross/qaVSlhEOkZo.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (4431)
Hash 2f266660dbeeb0b72d6c6f5c5fe0e1e8
b4469c6d8ec6f402f782363986e3261504123e0a
470700ca5d96a05b73896d7666520f3c950570bfd4668cc4b47fd5d0e8e6c517
GET /rsrc.php/v3/yP/l/0,cross/qaVSlhEOkZo.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 25 Nov 2023 17:51:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: LyZmYNvusLctbG9cX+Dh6A==
x-fb-debug: wOhciFEqU8/o8gE0as3QwgsmvuJpbISxjDnRtPBNUGAW6L/kz/o1x8qFpbXCZrA6/ZKOobDQW4qD80g7+nQnog==
content-length: 4377
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yk/l/0,cross/lkNcWOjl-U9.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 3.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yk/l/0,cross/lkNcWOjl-U9.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (3040)
Hash b27f6cab20a6eda1d9b3030c9a09660d
3169ce97a78df1ed950dc27623c191485d3107ee
2b3945a951059474536dcbb24070db0e476148aa79db35e2431f49b5b93231da
GET /rsrc.php/v3/yk/l/0,cross/lkNcWOjl-U9.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 25 Nov 2023 17:51:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: sn9sqyCm7aHZswMMmglmDQ==
x-fb-debug: 3wrVtekQ/y7wS/2reIF/EwjJOawLhsjiLIMJy7/ZtA2A0fE2/nfgpyG+o6iqKOHalByy7AI5gFrrVw4T9r7XmA==
priority: u=2
content-length: 3292
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 830 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (724)
Hash d63a02ce87c07ffcfa869fef7fc5f233
cae745fef84088abe3525bb77f75c55cd1d4cc2c
bf9d4d71541a0a1f31b10be351add847ee935da6de355756314c8ca96512444d
GET /rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 18 Nov 2023 18:18:38 GMT
cache-control: public,max-age=31536000,immutable
timing-allow-origin: *
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
x-fb-rlafr: 0
content-md5: 1joCzofAf/z6hp/vf8XyMw==
x-fb-debug: vKrIT7bDcuELxUQABfykTxFSmykRoUCEVhYV4TgDJd5oiZgsEJBZyhiv20JBlkWsTGEVyts+Yz2c1cL+WGyqLQ==
priority: u=2
content-length: 830
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y8/r/qc0dVyw0ZD0.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y8/r/qc0dVyw0ZD0.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (18622)
Hash 151e87d38f4f425e44d9c851c9aecf05
762111e5095f5354be95b98ad476f6e7161ce6b1
f236f289f38c8081b496e0537ed3b2c66822e7a743f5d9d4959f955c64b0b2b0
GET /rsrc.php/v3/y8/r/qc0dVyw0ZD0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 17 Nov 2023 16:37:58 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FR6H049PQl5E2chRya7PBQ==
x-fb-debug: 578mKTEkjWrVEys7x3EPigYBAculQ9+xqvoP9TrG2OhBAdzzHHNJrM2CslcbWlUPbOvnx/9TeqgH2B9JTmDk2g==
content-length: 91088
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (1984)
Hash 16f083b23b565db9d2f20d1ad75933c1
6d74ad139c96b1e3fc9d541419788b5b4893ec9a
36b909cd9132a8996a1bbb221d05217c31506a6951bb408deeea6aa612dc4200
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 16 Nov 2023 22:24:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FvCDsjtWXbnS8g0a11kzwQ==
x-fb-debug: DPBbprD+WR1JkQp8+12RV5L7aPu0l9wEhB+zyXXmLLBejlnOoB6/sW7YTAqPr0a+bmM8AnZbmMS0hVd638ZZKw==
content-length: 1657
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (5542)
Hash 0765d76d746716156d53d36ee6f80836
17e1546f87cc6417615caa10dcbbcb699c59471a
f1e6af63ae9ff0385126b72a492b0d34709514dd4c00074a1be28272c253d4f8
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 02:59:52 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: B2XXbXRnFhVtU9Nu5vgINg==
x-fb-debug: lc88K6EyvdDGPPx2M9F9UjQtcA6x7gHoPDHJ4myv+5p7kWQcEEBkGVaZf4JN/V394ygCJOmW5HG6ivjAbj4DEw==
priority: u=3,i
content-length: 12369
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iSa94/yM/l/vi_VN/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iSa94/yM/l/vi_VN/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (42485)
Hash b2793163409e31193631b05140324d11
9d31403c77cf1225d4c4afa0393834cdc4750f5c
52a2bc8058b2012f800e5d2a5f2c1dccc14e1f6ef5f4855d8358f835ba5280c3
GET /rsrc.php/v3iSa94/yM/l/vi_VN/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 18 Nov 2023 06:53:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: snkxY0CeMRk2MbBRQDJNEQ==
x-fb-debug: y0dnB+hVCgxO7ax/4LuqgITfGXqmvL65Y1bH39Qcetg5jci++2WV1or/E1hMyup+frhsFvmGSqW8aJn1go8kGg==
content-length: 23590
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-runtime.js
172.67.38.66200 OK 9.5 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-runtime.js
IP 172.67.38.66:0
File type ASCII text, with very long lines (2306), with no line terminators
Hash 06a64f0f78adf74c4e2754ebb28adc08
c7d1d5b816f2d8b10d4771976ff432677f4dee28
84552c7a79d241ef88abfa3030fee9cc0b0be0a03adf1d53863c8bcd9f2b2731
GET /_s/v4/app/637ddf31c8f/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:53 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"9075c2f5460b2832318d3c7217cc68cb"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76fe3cdb6a440b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 8.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (9885)
Hash 71e8e93b5e55f2010013b0814f4e3ae5
4732ba3acc539a0e9ff12d08c1b5a16f535bd594
b710ea52f812ac39c5195f0c170142bfcfcc274aa6b250a29a1ed1c59ea58556
GET /rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 05:04:43 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: cejpO15V8gEAE7CBT0465Q==
x-fb-debug: C/EC5sZQT7XV5BDFunWE5HcD8G7fTnWFrFwWQ/rGHeSNO5XkK706ORQBk10xOa7Ow+oKSIdFxS6Ia8i534VOUA==
priority: u=3,i
content-length: 8748
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
31.13.72.12200 OK 293 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP 31.13.72.12:0
File type ASCII text, with very long lines (327)
Hash 2f913d812811ef7e6fca30334c5972e2
d17caaa167443dc08696c672380f237e0db3fb02
ee8918a2f5d163099104b70f79065abc8fd309e69add57170546f2706956eef8
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 18 Nov 2023 00:30:25 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: L5E9gSgR735vyjAzTFly4g==
x-fb-debug: L8VzeyQXvcN6eQjIIOJCtS/LgPW9pegvZNUNNwZhkEQ8tySHb4MM53+OymxmoOO36BUiCE2IfCUN9gmAJeN/gg==
content-length: 293
x-fb-trip-id: 1904183273
date: Fri, 25 Nov 2022 23:41:54 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/v2.5/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df34f9b1a0cc0b42%26domain%3Dchesuoigiang.vn%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fchesuoigiang.vn%252Ff2d088ecad5fb08%26relation%3Dparent.parent&container_width=250&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fchesachvn&locale=vi_VN&sdk=joey&show_faces=true&stream=false&width=250
31.13.72.36200 OK 21 kB URL HTTP/2 www.facebook.com/v2.5/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df34f9b1a0cc0b42%26domain%3Dchesuoigiang.vn%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fchesuoigiang.vn%252Ff2d088ecad5fb08%26relation%3Dparent.parent&container_width=250&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fchesachvn&locale=vi_VN&sdk=joey&show_faces=true&stream=false&width=250
IP 31.13.72.36:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19844)
Hash 41e7f2b99c8bfc4c4ddb0e2435e2ebb9
bef21587a8beeff49e2c711ffe3b23b848a4da4f
27623785b6a41222694b194995f2ccac82aa95ca1ea808f45d4f401e9c9aa241
GET /v2.5/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df34f9b1a0cc0b42%26domain%3Dchesuoigiang.vn%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fchesuoigiang.vn%252Ff2d088ecad5fb08%26relation%3Dparent.parent&container_width=250&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fchesachvn&locale=vi_VN&sdk=joey&show_faces=true&stream=false&width=250 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: qCy064Lfk0KfUbumfMQQ4iGrfhK1fr/LVhZsSfv0f+mYT6+AIDzvnFVLJ4AHO/dcIRnXKo8NGRk+YjA6KTJ7UA==
date: Fri, 25 Nov 2022 23:41:53 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-common.js
172.67.38.66200 OK 41 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-common.js
IP 172.67.38.66:0
File type ASCII text, with very long lines (65466)
Hash 7c374d0c8e61264867dd56db3171bc7a
64664ba83acd897d564280d7635d1c2c43c02918
e7d934e4f3bebaef65262d2a8c4293c3a30a4e55a570285b33d795b7bcc3aff9
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:54 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"bde99510bdf9ab7bbc9ce82519a19a36"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76fe3cdb5a320b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-vendor.js
172.67.38.66200 OK 34 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-vendor.js
IP 172.67.38.66:0
File type ASCII text, with very long lines (65472)
Hash 2887cc42561b08709e3330e930d19f71
90d4bf0f72f541f7a2b9c99891c6954118f126e3
49f7740730f02d6835d400dd6816fa4c3fbf8b7d249b48a51261638a47fc56d2
GET /_s/v4/app/637ddf31c8f/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:54 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76fe3cdb5a2f0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.tynt.com/tc.js
104.18.36.173200 OK 0 B IP 104.18.36.173:0
GET /tc.js HTTP/1.1
Host: cdn.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:52 GMT
content-type: application/javascript
last-modified: Thu, 21 Jul 2022 14:57:29 GMT
vary: Accept-Encoding
etag: W/"62d96959-4599"
content-encoding: gzip
cf-cache-status: HIT
age: 116217
expires: Mon, 28 Nov 2022 23:41:52 GMT
cache-control: public, max-age=259200
server: cloudflare
cf-ray: 76fe3cd5f8c0b4f4-OSL
X-Firefox-Spdy: h2
embed.tawk.to/586b4c224160416f6db9d58f/default
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/586b4c224160416f6db9d58f/default
IP 172.67.38.66:0
GET /586b4c224160416f6db9d58f/default HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:49 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-637ddf31c8f"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: REVALIDATED
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76fe3cbdc8340b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-main.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-main.js
IP 172.67.38.66:0
GET /_s/v4/app/637ddf31c8f/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:53 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76fe3cdb5a2e0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
chesachvn.com/wp-content/themes/Che/images/logotea.png
38.55.155.153301 Moved Permanently 0 B URL HTTP/2 chesachvn.com/wp-content/themes/Che/images/logotea.png
IP 38.55.155.153:0
GET /wp-content/themes/Che/images/logotea.png HTTP/1.1
Host: chesachvn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://chesuoigiang.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 25 Nov 2022 23:41:49 GMT
content-type: text/html
location: http://www.chesachvn.com/
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
sc.tynt.com/script/sc/bOIpg6KBir4l-hadbi-bpO.js
104.18.36.173200 OK 0 B URL HTTP/2 sc.tynt.com/script/sc/bOIpg6KBir4l-hadbi-bpO.js
IP 104.18.36.173:0
GET /script/sc/bOIpg6KBir4l-hadbi-bpO.js HTTP/1.1
Host: sc.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:52 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
status: 200 OK
x-rack-cache: fresh
cache-control: max-age=86400, public, s-maxage=172800
last-modified: Tue, 22 Nov 2022 15:09:50 GMT
x-xss-protection: 1; mode=block
x-request-id: c1b166a4-c44e-4625-aceb-d299c38fdeda
x-content-digest: 0349635d62e35c3af19cc42fbd1e936b16ca9d0e
x-runtime: 0.002407
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
expires: Thu, 24 Nov 2022 04:00:23 GMT
content-encoding: gzip
cf-cache-status: HIT
age: 173211
server: cloudflare
cf-ray: 76fe3cd4df63b4f4-OSL
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fchesuoigiang.vn&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
216.58.207.237200 OK 0 B URL HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Fchesuoigiang.vn&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
IP 216.58.207.237:0
GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fchesuoigiang.vn&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 25 Nov 2022 23:41:52 GMT
content-security-policy: script-src 'nonce-35X2yzVRwG5cv38XQ0oang' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport, require-trusted-types-for 'script';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-app.js
172.67.38.66200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-app.js
IP 172.67.38.66:0
GET /_s/v4/app/637ddf31c8f/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://chesuoigiang.vn
Connection: keep-alive
Referer: http://chesuoigiang.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 25 Nov 2022 23:41:53 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
age: 173211
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 76fe3cdb6a4a0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2