{"report_id":"138d7c60-8b35-4cca-b69f-dd50299b49a9","version":0,"status":"done","tags":[],"date":"2026-10-14T20:11:18Z","url":{"schema":"http","addr":"nfacebook.vn/timbannaygap0610?s0j\u0026ttu","fqdn":"nfacebook.vn","domain":"nfacebook.vn","tld":"vn"},"ip":{"addr":"206.206.126.131","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"nfacebook.vn/timbannaygap0610?s0j\u0026ttu","fqdn":"nfacebook.vn","domain":"nfacebook.vn","tld":"vn"},"title":"Cần tìm bạn này gấp ai gặp ở đau liên hệ mình với nhé có hậu tạ ạ","dom":{"size":16380,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (428)","md5":"69776d67d0c2d33197e7012482ccf287","sha1":"0691d525f3b44bfe6c8655893b03d863dca911cf","sha256":"4da6b77b14ea0b28831c6a06374a582a5dc8adbec68f05522318b080613d2f2a","sha512":"5ab0f0a5a4fd6df37681ce05a38379f933ac70f17554cc228d1c1e061342cc940ed40e6159151cc8a9aa326740f49651cf14d1902f7240218c686f3a73ecffb6","ssdeep":"384:+mBFJ3uBtsjMh4j603hQDOHlqDfhsHrQ4varQB:+mBFJeBWwhA6shVrQ4varQB","tlshash":"4672b77031f11b6622339474a9d5aa076be5f61bd6034c447bec4b953f87ca68d3332a","dom_hash":"domhash66b56453b556a519323263892321a6f2","first_seen":"2026-10-14T20:11:32.121963Z","last_seen":"2026-10-14T20:11:32.121963Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nfacebook.vn/timbannaygap0610?s0j\u0026ttu","fqdn":"nfacebook.vn","domain":"nfacebook.vn","tld":"vn"},"ip":{"addr":"206.206.126.131","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T20:11:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"nfacebook.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws-ap3.pusher.com","ip":{"addr":"13.196.232.234","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"1997-06-03","domain_rank":1911284,"first_seen":"2019-03-28T15:08:02Z","last_seen":"2026-10-10T13:35:27.165635Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":650,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"kit.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2026-10-12T16:46:38.502984Z","alert_count":0,"request_count":1,"received_data":890,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sockjs-ap3.pusher.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1997-06-03","domain_rank":4615410,"first_seen":"2019-03-28T15:21:18Z","last_seen":"2026-10-10T13:31:37.295553Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":658,"comment":"","tags":null,"fingerprints":null},{"fqdn":"brscdn.io.vn","ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-11T14:23:31.403012Z","last_seen":"2026-10-09T12:42:02.906042Z","alert_count":0,"request_count":10,"received_data":781709,"sent_data":5447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ka-p.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":22175,"first_seen":"2019-12-16T20:35:53Z","last_seen":"2026-10-12T18:24:50.531437Z","alert_count":0,"request_count":3,"received_data":453578,"sent_data":1618,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nfacebook.vn","ip":{"addr":"206.206.126.131","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-26T13:03:20.876241Z","last_seen":"2026-10-12T16:47:57.561777Z","alert_count":8,"request_count":2,"received_data":116688,"sent_data":1722,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-11T23:38:49.428366Z","alert_count":0,"request_count":2,"received_data":151492,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-10-14T22:33:07.390661Z","times_seen":202391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pusher/8.4.0/pusher.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"611206ec93d301e8eb82d9eedca65cbc","sha1":"16c67747de3195c65d62d2ead14a48a5736ada8d","sha256":"8562010754def2099b10de375d492c0120e78f621e58222e5103fcfd22488915","sha512":"a77ad1ef922ce8308ad6bd83f267712d085ee085950d24d405dc6ab3455eba6d211c3498fac1fd33a53a09eb2bd6e9a5c5b8842bdc3fdc885716565c593d40a0","ssdeep":"1536:Pn+mM6s86ZphXoUK5EdkVB1R1DlqYuoD72MvMxl:PNwXiEdkVB1R1DlqYuAv8","tlshash":"915308c4b591b05147eb7162586b4003e33929a4650bc0bcbf78eddaec786c9b13bb75","size":61917,"data":"","first_seen":"2025-06-24T21:39:21.514172Z","last_seen":"2026-10-14T20:11:32.192118Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/helpers.js","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d64cd168e441a8669fe85dff3e5195","sha1":"c65b9ed84b138752dce3f3d47486d87ea71f01ef","sha256":"dfbeb011197640f5e970179f029f170c993ff7e49e5a0b8ab350a7137786496b","sha512":"8b6282a5ac0421fe6ac91a7a971603cf65f1aa4dc71b2c4814a535f3308c05b7bb599f0bfed51b01618d58dfcca58f3066079499c0d8f29c70fa885ae91e4bb2","ssdeep":"","tlshash":"64418c44b9d19385157773b325fbc944ee2d042bc6295000ba2cda926f312d8b3b7d4e","size":1891,"data":"","first_seen":"2026-04-27T23:42:37.517966Z","last_seen":"2026-10-14T20:11:32.16163Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/close_logo.svg","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.472Z","timestamp":1792008249472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/close_logo.svg HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:10 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"e0adc8a5a9d8520f4eec0f028b8d7bb7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7R3aX5%2F23OZ7fiXJGfpGJssyn4LeQURSrnRJKSZAlcr3wYPrlb9vpY9sD%2FCUcUiJgAshrf1Mp1S%2Bv1ln50PTpUtysH2tZoVYFBo8h6%2FN8CzJmNYbw5oH%2Bl02XPHyFA%3D\"}]}\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4a9310a4b13b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472,"size_decoded":937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0adc8a5a9d8520f4eec0f028b8d7bb7","sha1":"c6f77ce89ae7eb06039c3637d263b96cef610c52","sha256":"2186372e8111062868ff02d931794174a63e721bfbc2bebda1f829e154186419","sha512":"c8aba9418f13373c8e8bafa391ff787440b1f32d4099e41360138b21c6dea44146805d6e927521fa1cd13e8698baa5dbfa902ab9bd04b3bfcc3ae1013a6ce360","ssdeep":"","tlshash":"46f027e7f708245c4d8ac7057daa1252c21fe0fa6896005d999ce9b0e0b38e3f413219","first_seen":"2026-04-27T23:42:37.513741Z","last_seen":"2026-10-14T20:11:32.126495Z","times_seen":100,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":485,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-p.fontawesome.com/releases/v7.3.1/css/pro-v4-font-face.min.css?token=8f728199e4","fqdn":"ka-p.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.767Z","timestamp":1792008249767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Oct 2026 23:22:20 GMT","end":"Sat, 09 Jan 2027 00:22:17 GMT"},"fingerprint":{"sha1":"9E:ED:32:F1:2C:09:7E:8C:D4:AF:F2:E7:AF:73:92:05:BC:59:C4:2A","sha256":"23:5A:2E:FC:2A:F5:E5:7D:81:03:3C:23:23:F1:A4:05:BD:25:58:91:5E:40:D5:A4:1B:5B:A3:8E:65:7E:0A:30"}}},"request":{"raw":"GET /releases/v7.3.1/css/pro-v4-font-face.min.css?token=8f728199e4 HTTP/1.1\r\nHost: ka-p.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kit.fontawesome.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 1673\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\netag: \"6a56682b-689\"\r\nlast-modified: Tue, 14 Jul 2026 16:47:39 GMT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method\r\nage: 7871170\r\ncf-cache-status: HIT\r\ncf-ray: a4a9310a08d1b503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6049,"size_decoded":2150,"mime_type":"text/css","magic":"ASCII text, with very long lines (5877)","md5":"ad5205890e3c3774522ea2a03ff2a731","sha1":"3e4a6829a96906de59353b161e5eff6a4477e9c6","sha256":"80bf53db1499cb6866ae8318aac09a6aae7cc9936988b4152a13749a5ac73092","sha512":"cd4f8879d6ef8ed7255ddb272bce88d5cbd8829e5735c6aaa5cdc660a07b29c6f6e2063865cb416fd47470daa1031fc3e19e97c8663bcfe106b2db6a47c2b13b","ssdeep":"96:ZP3Qx8+4ARQLTWITppVXTlUmpIj7Q7ESdpKKKiNm2Ddzg+canZHAn6anx0nlnMnQ:ZP60dq2pVXGGpKKu2RzRlItM","tlshash":"cdc1ce2882d501a1f072bc4a6ad67522bebe34654b749d13db2f4e440eefc60f1d6ea4","first_seen":"2026-07-15T17:54:45.911942Z","last_seen":"2026-10-14T20:11:32.130953Z","times_seen":612,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":98,"connect":25,"send":0,"wait":37,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nfacebook.vn/build/assets/app-DYLzX_-8.css","fqdn":"nfacebook.vn","domain":"nfacebook.vn","tld":"vn"},"ip":{"addr":"206.206.126.131","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.447Z","timestamp":1792008249447,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nfacebook.vn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 01:00:13 GMT","end":"Wed, 06 Jan 2027 01:00:12 GMT"},"fingerprint":{"sha1":"E2:04:BC:11:32:CB:A3:E9:0C:42:2B:FD:CB:A8:53:19:14:AD:E4:1C","sha256":"29:12:5D:9B:84:A1:C6:97:1F:7C:A7:A5:DA:AC:65:F0:A9:22:82:11:90:A8:EB:48:02:D7:08:B8:42:AE:42:E1"}}},"request":{"raw":"GET /build/assets/app-DYLzX_-8.css HTTP/1.1\r\nHost: nfacebook.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu\r\nCookie: XSRF-TOKEN=eyJpdiI6IkdlOVNQelhGS1M3MnRHQnovVHpmZWc9PSIsInZhbHVlIjoiMGs0d1NoL0YyVXBFM0RpWGQzTkVmaVNFSFArVmZRbmtnZjZZeFFEdmJsZEE3MkloM0VJV0hNODhZcUJVcXpzUGRjajVTdFJES05rVDdDQVdwVDlad2k1K0V4cUJSaGFieTdBYjMwUm5sMExSeFZ5SGZIWjNBQmFaYmFxUTlTOEIiLCJtYWMiOiJkNzQ0OGIyMjg4ZWVkYWQ5NTA3OWJjNmNiZTIzNDNkZWYyODgxYzZiMzI1MzY0Y2RkNTcyNzJkNTZiMTYxNmM3IiwidGFnIjoiIn0%3D; viewserver-session=eyJpdiI6IkVGT2w0bjIxS3VjRjkrZmg1ZnBnTWc9PSIsInZhbHVlIjoiQXZqSDJ4cE1kMjFrWVJTaVE0VDZZN0I3MjhqNXl5b2RlRXFvZ3hEY3pUK1NHSkFGY1IwL25VakxJOWczY0ZHWG8xTkVHNTJ3WnZLeTBQQk5IYnMyRmpnVVM1Ty9sNzhTeTNGSnpzQnZnc3VvR1pCaDdzSEsvajVuUTJzVXd0d3YiLCJtYWMiOiJhMTNlOTJiNWUzNmYwN2UxMzhmNjgyYmUwYWU4ZmUwYmNjMDUzMDYxZTRjNTRjNzA2MDU2ZTFmOTMxYTAzN2Y2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkdlOVNQelhGS1M3MnRHQnovVHpmZWc9PSIsInZhbHVlIjoiMGs0d1NoL0YyVXBFM0RpWGQzTkVmaVNFSFArVmZRbmtnZjZZeFFEdmJsZEE3MkloM0VJV0hNODhZcUJVcXpzUGRjajVTdFJES05rVDdDQVdwVDlad2k1K0V4cUJSaGFieTdBYjMwUm5sMExSeFZ5SGZIWjNBQmFaYmFxUTlTOEIiLCJtYWMiOiJkNzQ0OGIyMjg4ZWVkYWQ5NTA3OWJjNmNiZTIzNDNkZWYyODgxYzZiMzI1MzY0Y2RkNTcyNzJkNTZiMTYxNmM3IiwidGFnIjoiIn0%3D"},{"name":"viewserver-session","value":"eyJpdiI6IkVGT2w0bjIxS3VjRjkrZmg1ZnBnTWc9PSIsInZhbHVlIjoiQXZqSDJ4cE1kMjFrWVJTaVE0VDZZN0I3MjhqNXl5b2RlRXFvZ3hEY3pUK1NHSkFGY1IwL25VakxJOWczY0ZHWG8xTkVHNTJ3WnZLeTBQQk5IYnMyRmpnVVM1Ty9sNzhTeTNGSnpzQnZnc3VvR1pCaDdzSEsvajVuUTJzVXd0d3YiLCJtYWMiOiJhMTNlOTJiNWUzNmYwN2UxMzhmNjgyYmUwYWU4ZmUwYmNjMDUzMDYxZTRjNTRjNzA2MDU2ZTFmOTMxYTAzN2Y2IiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 14 Oct 2026 20:04:09 GMT\r\nContent-Type: text/css\r\nContent-Length: 98106\r\nLast-Modified: Tue, 29 Sep 2026 09:23:31 GMT\r\nConnection: keep-alive\r\nETag: \"6abb8393-17f3a\"\r\nExpires: Wed, 14 Oct 2026 20:34:09 GMT\r\nCache-Control: max-age=1800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98106,"size_decoded":98425,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5d6f8df5b9bb695d73fe60525b2b853f","sha1":"dba9a993fd69b8b666b458dabd19c161268e68e4","sha256":"4cc7cbb2132b424d92b66ac7714fde47af26cc9db461b0047ad1ac5c43eb88e3","sha512":"913ab351a46f1064b20cecdca3abedf0564f1606964e396c174acf65644db98080eeb2e8ec15f881101cea6c44ae0774addfdccb83d501c8f108887ee5269d49","ssdeep":"1536:AQY7m+nloEcaVGckTaZp0+JmMfWs8L4ZwC2Kf:AQY7m+nlEaV9kTaZm+JmMfWs8L4GC2Kf","tlshash":"55a361a4f264d57fbc23b4bde39ce84c7509a086dd265becbe12a11127c3bf65c52a04","first_seen":"2026-09-24T01:10:02.989832Z","last_seen":"2026-10-14T20:11:32.134402Z","times_seen":39,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":553,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"nfacebook.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.448Z","timestamp":1792008249448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nfacebook.vn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1809134\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWmHPtv3sr4sezg%2BPHiOWZXw%2BPvbC%2FwU%2F21IeNt9yV9mop5CWnvDnjN4E54OmfcWBiuadRH%2FKYqYqSpk08YIX7dloNz4isWWWTm5Wf1B7cjE5ngbwXoosO90Fz63OA3B2Cg1NpAL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4a931078abc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":28469,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-10-14T22:33:07.390661Z","times_seen":202391,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":35,"connect":43,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/show_pass.svg","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.473Z","timestamp":1792008249473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/show_pass.svg HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:10 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"d1dd9e33d2ba48864d81f1c0bd72ac68\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXYmBnsl1grR26Yl%2BelDszF8tLth0pDSOWGtpDZtNhHNPEb7KKIR%2BXEKtk0c3q%2BnUVNmox4G7DBTU2zSgoVUofgWb3DCtJch8oQGqeKlmH3a9I9qTbBCKKny0OWh%2FWc%3D\"}]}\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4a9310a4b0bb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":1072,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1dd9e33d2ba48864d81f1c0bd72ac68","sha1":"1758198c4e644103a90ad524669ded4f9d4c85b2","sha256":"785715116ea3176ccf5726b147fddf9343ace4113747458b8e8c024f15d07bab","sha512":"604fcf67801f4d57cf0248d36f3f6a0d72ab98acaa8c8b1c6d2be26132cb5f4d18b3ebecd4a6aa5c2f73bd4d356eda24d5d1c0679b338f54b6729350f25ce608","ssdeep":"","tlshash":"c901fdfd832844ec582fc239ed7a7ad6832fd2ed51946a9deadce4506063aa2d403024","first_seen":"2026-04-27T23:42:37.561502Z","last_seen":"2026-10-14T20:11:32.141552Z","times_seen":100,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":484,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-p.fontawesome.com/releases/v7.3.1/css/pro-v4-shims.min.css?token=8f728199e4","fqdn":"ka-p.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.765Z","timestamp":1792008249765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Oct 2026 23:22:20 GMT","end":"Sat, 09 Jan 2027 00:22:17 GMT"},"fingerprint":{"sha1":"9E:ED:32:F1:2C:09:7E:8C:D4:AF:F2:E7:AF:73:92:05:BC:59:C4:2A","sha256":"23:5A:2E:FC:2A:F5:E5:7D:81:03:3C:23:23:F1:A4:05:BD:25:58:91:5E:40:D5:A4:1B:5B:A3:8E:65:7E:0A:30"}}},"request":{"raw":"GET /releases/v7.3.1/css/pro-v4-shims.min.css?token=8f728199e4 HTTP/1.1\r\nHost: ka-p.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kit.fontawesome.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 4092\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\netag: \"6a56682b-ffc\"\r\nlast-modified: Tue, 14 Jul 2026 16:47:39 GMT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method\r\nage: 5860592\r\ncf-cache-status: HIT\r\ncf-ray: a4a9310a08cdb503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21081,"size_decoded":4569,"mime_type":"text/css","magic":"ASCII text, with very long lines (20909)","md5":"5d51889d52166667d5e3a255fa3b89c8","sha1":"1c626fb0aa30faba7027066d00a67e1d10096630","sha256":"e4e5b08f7f07071fc1be8bcafbde5af14deae02d2d0a65840f1774524903a353","sha512":"80cd36710b54e448f8a57ec1e8dd0c15716f90e15b6efa20ed604fc1ad4fed530e966838c337ba62d9a50beafd11d1349a75b06a7015ce28af225e954e28f5e0","ssdeep":"384:N06G/n6Lv2PlZ7lgueQyPxHJtrll6m1dO:i60Jl3eQyPxHJUm0","tlshash":"129225112b1ca053b0dc3c6bb4417eb427762b8919d65c91e3273c84aef785b32eeb65","first_seen":"2026-07-15T17:54:45.931669Z","last_seen":"2026-10-14T20:11:32.147282Z","times_seen":607,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":100,"connect":24,"send":0,"wait":45,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws-ap3.pusher.com/app/9b6d0d38803706704381?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false","fqdn":"ws-ap3.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"13.196.232.234","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:10.440Z","timestamp":1792008250440,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 30 Aug 2026 00:00:00 GMT","end":"Mon, 15 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:B6:AD:07:BC:7C:E0:B2:3C:BC:44:7C:C9:8D:B1:4F:44:86:AD:57","sha256":"D6:7F:CD:F0:CB:09:D3:4E:E3:11:FE:B0:BD:2A:2C:93:C9:D3:6E:D8:0C:B5:C1:39:04:78:48:78:D3:D8:17:AB"}}},"request":{"raw":"GET /app/9b6d0d38803706704381?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false HTTP/1.1\r\nHost: ws-ap3.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nfacebook.vn\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FmPtwBwt5apODtDBZ3KsQg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 14 Oct 2026 20:04:12 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: MSe6jedQ5KTUCMutqrNLyom8p6o=\r\nSec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":268,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":3334,"timings":{"blocked":0,"dns":1096,"connect":1372,"send":0,"wait":273,"receive":0,"ssl":592},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/8f728199e4.css","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.451Z","timestamp":1792008249451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Oct 2026 23:22:20 GMT","end":"Sat, 09 Jan 2027 00:22:17 GMT"},"fingerprint":{"sha1":"9E:ED:32:F1:2C:09:7E:8C:D4:AF:F2:E7:AF:73:92:05:BC:59:C4:2A","sha256":"23:5A:2E:FC:2A:F5:E5:7D:81:03:3C:23:23:F1:A4:05:BD:25:58:91:5E:40:D5:A4:1B:5B:A3:8E:65:7E:0A:30"}}},"request":{"raw":"GET /8f728199e4.css HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nfacebook.vn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: text/css\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=300, public, stale-while-revalidate=30\r\nserver: cloudflare\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: GNpA0BpHt3c3SAMMWZAC\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: a4a93107db7fb4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":737,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"9ed968e16b286cc4543ef633390eed86","sha1":"c69e4e3ff15fe22bec33858536fc476f5cb7e9eb","sha256":"88cd37cc9f32b01282518141dfeba37251cbacc5e6b2eea13fa322c016860197","sha512":"d972cb63d1229d19458570641e9e76e8e090cf706f6b52d8bf6369e7a9fa451fd23f504e9c1436ddd6c9c8d1c8aebf11550038d93b8cb6a1c7c0f45fe8558850","ssdeep":"","tlshash":"2de0121780345105961815709e5db14fbd33f15d0fe1eeb6d0219935eff4a32b1115f0","first_seen":"2026-07-26T23:51:38.049178Z","last_seen":"2026-10-14T20:11:32.159354Z","times_seen":63,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":45,"connect":32,"send":0,"wait":163,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/helpers.js","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.454Z","timestamp":1792008249454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/helpers.js HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: application/javascript\r\netag: W/\"69d64cd168e441a8669fe85dff3e5195\"\r\ncf-cache-status: HIT\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P6uLKTSTOgjZEz1G1SziL07Xm2VAFK4%2FI5z3Ulo8DmkdKEgYIvlP9npKAtRTBJxU1agbGUFmhgF4u%2FovSWpklSKS8IVRg0BqJoJb5rXxsoDpsT%2BWNvh%2Fd1pA%2FPxXlv8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncontent-encoding: zstd\r\ncf-ray: a4a9310879ad56a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1891,"size_decoded":1285,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"69d64cd168e441a8669fe85dff3e5195","sha1":"c65b9ed84b138752dce3f3d47486d87ea71f01ef","sha256":"dfbeb011197640f5e970179f029f170c993ff7e49e5a0b8ab350a7137786496b","sha512":"8b6282a5ac0421fe6ac91a7a971603cf65f1aa4dc71b2c4814a535f3308c05b7bb599f0bfed51b01618d58dfcca58f3066079499c0d8f29c70fa885ae91e4bb2","ssdeep":"","tlshash":"64418c44b9d19385157773b325fbc944ee2d042bc6295000ba2cda926f312d8b3b7d4e","first_seen":"2026-04-27T23:42:37.517966Z","last_seen":"2026-10-14T20:11:32.16163Z","times_seen":101,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":168,"connect":54,"send":0,"wait":271,"receive":-1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/hide_pass.svg","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.474Z","timestamp":1792008249474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/hide_pass.svg HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:10 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"5286e4e6623351192e235ec4f2438a8a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCU%2BICFsWCBXfer82xThG%2B6b%2BJ%2Fe9cYsRcS0axECtrMT37EZMh08HmCDmMGFK%2F6ZkELYtVy4i5lq3DOfwnR6Cd6ueCrAKfs6twBJdYJ4mwxrK91zNLr5sHuZgSTdQsI%3D\"}]}\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4a9310a3af8b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988,"size_decoded":1208,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5286e4e6623351192e235ec4f2438a8a","sha1":"2da8224f2c609cd18599053c6be5a3bf5a22ec28","sha256":"2e13f64630a10b21200af902dd3a35de69908cd2d2f204866f492c8add1afceb","sha512":"50d56fc9481604b0b5ca4dcfbf9a3c507aee5fe5e5fd3bfde4bc6b169753e86b03ee216c2154eb4ffc7f3ab9c67ddcfb4cf276b21a1b1534f7ead297be2219c9","ssdeep":"","tlshash":"fa1154fa573c10ac095fcfac9d653016a31f91ef706240dbd6ac0aa050627dae843990","first_seen":"2026-04-27T23:42:37.572711Z","last_seen":"2026-10-14T20:11:32.162582Z","times_seen":100,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":482,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/fb_font.woff2","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:10.353Z","timestamp":1792008250353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/fb_font.woff2 HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nfacebook.vn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33376\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nvary: Origin\r\naccess-control-expose-headers: ETag\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"84969a1f9821371802d2018591c87a44\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OlVPMpji%2FZKDeZhD3wLwCONjfBQYGdwgUIkz%2BJfIMo6R7mK3qozCttp%2FACBA9wLieTTHNmqw7u1w1v5LhPR3roMlnz6a0H4tnyYzX3unxusGUwnY%2BlgedaJe3sB%2B9c%3D\"}]}\r\ncf-ray: a4a9310cbda856a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33376,"size_decoded":34115,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33376, version 4.0","md5":"84969a1f9821371802d2018591c87a44","sha1":"987ca449dc2010354af76e49c4d13818ad4da2ee","sha256":"ca2a91128b19a23b8825658baf2610f57240aceeef2ea982ca65174691d41f2c","sha512":"ddc6da38ba7c1f1b2a2a7641200ebd6353f87c0809ae510ffd6b94c4718bb6f9ba1cccbdd360be5eb64c57e0debc47e130aa986c05b346e991a2001ebb2423bd","ssdeep":"768:HXl3daCmsNBoGHEr1KMcH/vJl6P1UcGjY9eRjZol3xQ:33hmFTr1KMcHnvm1UcGjHjZope","tlshash":"b1e2f136a9116ab3e5974d4e33393be5e80300afe8c932e8c2ac7497d3152e137a15dd","first_seen":"2026-04-27T23:42:37.564885Z","last_seen":"2026-10-14T20:11:32.169961Z","times_seen":99,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/device.png","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.470Z","timestamp":1792008249470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/device.png HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 527224\r\naccept-ranges: bytes\r\netag: \"ae1d099bc55f1b48af6774be30910976\"\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxrmDtzMHXxRsFvPZ1L5r1pR4G5dKKeU1zLf7OB1dnU5WbT5w8lRdwbwK0ahB87hkE3Ok1yiqpfUGEktkPgOnz75FfjayPZSKZ6lfwjhGl3M82RLE3xvb6TLsstqhPo%3D\"}]}\r\ncf-ray: a4a9310a4b03b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":527224,"size_decoded":527870,"mime_type":"image/png","magic":"PNG image data, 1125 x 492, 8-bit/color RGBA, non-interlaced","md5":"ae1d099bc55f1b48af6774be30910976","sha1":"e7fbb95d9ae6a599cb2a1e6efffac2d3a16890ad","sha256":"4140df2c8d17ad1d8352714a2845ec09116dc95f6a47f50553ea2a0d89f62a80","sha512":"004556631fa113d2c22c50f70a9050e4cbcf113c6c86d2ffbf3258515eb09c0e706691e036f0367ac4363a5c8faae2221bef2531c093911c7ff45c3eb1e70ecb","ssdeep":"12288:vnIo5Fi/rP5FrP9xQEIRhNaVpuP+u/vRguH6RLOQYYqHTs2SDdt:vBQBFrP9xQEIRhN67u/H6lOQIQ2SDb","tlshash":"64b4232e40698d467e034ba362425df3ba9b793f09b14f89b8f4c94ab7d38354db7448","first_seen":"2024-08-17T22:54:38Z","last_seen":"2026-10-14T20:11:32.172871Z","times_seen":324,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":484,"dns":0,"connect":0,"send":0,"wait":239,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/fblogo.png","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:10.717Z","timestamp":1792008250717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/fblogo.png HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 986\r\naccept-ranges: bytes\r\netag: \"2e1e36c58df9f157339edd77b709af2b\"\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jhkffd1rRnK1i%2FfTE9vkU6%2FR3y2TkePcjvpGRFQn6S2R1h0rktXFwXuM%2BSPYvzZtfmGcETflRLayp2qDcODdt8yl6OGb%2BqpXpsM%2BmyCnum9OKF2kIgIBMZVyyY94mQ4%3D\"}]}\r\ncf-ray: a4a9310effd756a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":986,"size_decoded":1647,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"2e1e36c58df9f157339edd77b709af2b","sha1":"017c8fea5dd3a9892ef89f017baf4259970990bb","sha256":"e8f4cbfe46ebd29dd2e6fb20b1d06fc0ee181f379e735b100170011f9a09ca90","sha512":"4b3cab12f87e23018cd7fbdc003004943add3918181016a4aa34e713560b110062bd38c642cb2eb337bf72139e8311ae432fe26a8e3b7a1fb29bd3360a05c585","ssdeep":"","tlshash":"aa1150b161a3b4742217a769c5b0ceed92132d95da70561e42c3f81d32fbfa2c0a05da","first_seen":"2024-04-19T19:35:51Z","last_seen":"2026-10-14T20:11:32.175202Z","times_seen":241,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sockjs-ap3.pusher.com/pusher/app/9b6d0d38803706704381/936/7sckb4d3/xhr_streaming?protocol=7\u0026client=js\u0026version=8.4.0\u0026t=1792008252494\u0026n=1","fqdn":"sockjs-ap3.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:12.499Z","timestamp":1792008252499,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /pusher/app/9b6d0d38803706704381/936/7sckb4d3/xhr_streaming?protocol=7\u0026client=js\u0026version=8.4.0\u0026t=1792008252494\u0026n=1 HTTP/1.1\r\nHost: sockjs-ap3.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nfacebook.vn/\r\nOrigin: https://nfacebook.vn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/meta_logo.png","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.475Z","timestamp":1792008249475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/meta_logo.png HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2965\r\naccept-ranges: bytes\r\netag: \"21c92b4d593a22e88b4e76feed7337ec\"\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhNDtfFZ3CWh41oKC9WteHoshk5uz2xBGv3VAIU8DIQYG9QPD%2FNeOtLDBUkVTEvYeJ1GjIbOxXHAEUpm%2F7Y0pYB2oJOWOWhfB7TbzAs9KKU2buOdBnR5HIoREnNX4OM%3D\"}]}\r\ncf-ray: a4a9310c3d3b56a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2965,"size_decoded":3613,"mime_type":"image/png","magic":"PNG image data, 180 x 36, 8-bit colormap, non-interlaced","md5":"21c92b4d593a22e88b4e76feed7337ec","sha1":"488cb621244e5399fd45517a7ac957b8a9361ac4","sha256":"7a426609b5fba43529f502c403792cf8f8e4b7bf94990f2cdca25a184a993c4c","sha512":"f593130cf1b50cac64166552d6631b296a86a76d6d48d66aa074cd1db5ae7a6d69ad33a7a966ae4e205a423f9fd68c6ba73582f943d18486553f7525cfe2fe7b","ssdeep":"","tlshash":"e6515cc2f76350f9a72503a9387a6264c42cdcf542444f020251b09a7c06bf0a6577ee","first_seen":"2025-04-25T03:21:28.285405Z","last_seen":"2026-10-14T20:11:32.178448Z","times_seen":2007,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":798,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-p.fontawesome.com/assets/8f728199e4/49570632/kit.css?token=8f728199e4","fqdn":"ka-p.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.763Z","timestamp":1792008249763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Oct 2026 23:22:20 GMT","end":"Sat, 09 Jan 2027 00:22:17 GMT"},"fingerprint":{"sha1":"9E:ED:32:F1:2C:09:7E:8C:D4:AF:F2:E7:AF:73:92:05:BC:59:C4:2A","sha256":"23:5A:2E:FC:2A:F5:E5:7D:81:03:3C:23:23:F1:A4:05:BD:25:58:91:5E:40:D5:A4:1B:5B:A3:8E:65:7E:0A:30"}}},"request":{"raw":"GET /assets/8f728199e4/49570632/kit.css?token=8f728199e4 HTTP/1.1\r\nHost: ka-p.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://kit.fontawesome.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: text/css\r\netag: W/\"35224abfe46744136d2dc8b7b24a6e39\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nlast-modified: Wed, 01 Jul 2026 00:00:40 GMT\r\nserver: cloudflare\r\nvary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-cache-status: MISS\r\nage: 4396231\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: a4a93109f8ccb503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":425017,"size_decoded":56467,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62674), with no line terminators","md5":"35224abfe46744136d2dc8b7b24a6e39","sha1":"0ba87288c880b7bf78ae320abc7220bfd84751e4","sha256":"70d3fa38d5e176141dbc07a88ade5f2237cf8f00018442c19a9bea5d5481c0ef","sha512":"3aa19bd37bcd712fcdbcae93915a24935a6b403e422a17482e35b8f1c5598cae7128786b3a5a668bb962cd0972fa60bdc35e052f418f7aeed377ce80588d116a","ssdeep":"3072:lCMC7k8ooxaP3Bg+aKNSifKym4LUxzuzt72z4y1Q7MTFCyj:IMC7k8orPRZ/NSiyyf0FCyj","tlshash":"6b943f1450520417f1e74c3b248f7f28b835e7521b959a57a2328e90addae7f229fb33","first_seen":"2026-08-25T09:28:24.234747Z","last_seen":"2026-10-14T20:11:32.182125Z","times_seen":45,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":102,"connect":24,"send":0,"wait":41,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nfacebook.vn/timbannaygap0610?s0j\u0026ttu","fqdn":"nfacebook.vn","domain":"nfacebook.vn","tld":"vn"},"ip":{"addr":"206.206.126.131","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T20:04:07.564Z","timestamp":1792008247564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nfacebook.vn","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 01:00:13 GMT","end":"Wed, 06 Jan 2027 01:00:12 GMT"},"fingerprint":{"sha1":"E2:04:BC:11:32:CB:A3:E9:0C:42:2B:FD:CB:A8:53:19:14:AD:E4:1C","sha256":"29:12:5D:9B:84:A1:C6:97:1F:7C:A7:A5:DA:AC:65:F0:A9:22:82:11:90:A8:EB:48:02:D7:08:B8:42:AE:42:E1"}}},"request":{"raw":"GET /timbannaygap0610?s0j\u0026ttu HTTP/1.1\r\nHost: nfacebook.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Wed, 14 Oct 2026 20:04:08 GMT\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IkdlOVNQelhGS1M3MnRHQnovVHpmZWc9PSIsInZhbHVlIjoiMGs0d1NoL0YyVXBFM0RpWGQzTkVmaVNFSFArVmZRbmtnZjZZeFFEdmJsZEE3MkloM0VJV0hNODhZcUJVcXpzUGRjajVTdFJES05rVDdDQVdwVDlad2k1K0V4cUJSaGFieTdBYjMwUm5sMExSeFZ5SGZIWjNBQmFaYmFxUTlTOEIiLCJtYWMiOiJkNzQ0OGIyMjg4ZWVkYWQ5NTA3OWJjNmNiZTIzNDNkZWYyODgxYzZiMzI1MzY0Y2RkNTcyNzJkNTZiMTYxNmM3IiwidGFnIjoiIn0%3D; expires=Wed, 14 Oct 2026 22:04:08 GMT; Max-Age=7200; path=/; secure; samesite=lax\nviewserver-session=eyJpdiI6IkVGT2w0bjIxS3VjRjkrZmg1ZnBnTWc9PSIsInZhbHVlIjoiQXZqSDJ4cE1kMjFrWVJTaVE0VDZZN0I3MjhqNXl5b2RlRXFvZ3hEY3pUK1NHSkFGY1IwL25VakxJOWczY0ZHWG8xTkVHNTJ3WnZLeTBQQk5IYnMyRmpnVVM1Ty9sNzhTeTNGSnpzQnZnc3VvR1pCaDdzSEsvajVuUTJzVXd0d3YiLCJtYWMiOiJhMTNlOTJiNWUzNmYwN2UxMzhmNjgyYmUwYWU4ZmUwYmNjMDUzMDYxZTRjNTRjNzA2MDU2ZTFmOTMxYTAzN2Y2IiwidGFnIjoiIn0%3D; expires=Wed, 14 Oct 2026 22:04:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IkdlOVNQelhGS1M3MnRHQnovVHpmZWc9PSIsInZhbHVlIjoiMGs0d1NoL0YyVXBFM0RpWGQzTkVmaVNFSFArVmZRbmtnZjZZeFFEdmJsZEE3MkloM0VJV0hNODhZcUJVcXpzUGRjajVTdFJES05rVDdDQVdwVDlad2k1K0V4cUJSaGFieTdBYjMwUm5sMExSeFZ5SGZIWjNBQmFaYmFxUTlTOEIiLCJtYWMiOiJkNzQ0OGIyMjg4ZWVkYWQ5NTA3OWJjNmNiZTIzNDNkZWYyODgxYzZiMzI1MzY0Y2RkNTcyNzJkNTZiMTYxNmM3IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-14T22:04:08Z","raw_expires":"Wed, 14 Oct 2026 22:04:08 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IkdlOVNQelhGS1M3MnRHQnovVHpmZWc9PSIsInZhbHVlIjoiMGs0d1NoL0YyVXBFM0RpWGQzTkVmaVNFSFArVmZRbmtnZjZZeFFEdmJsZEE3MkloM0VJV0hNODhZcUJVcXpzUGRjajVTdFJES05rVDdDQVdwVDlad2k1K0V4cUJSaGFieTdBYjMwUm5sMExSeFZ5SGZIWjNBQmFaYmFxUTlTOEIiLCJtYWMiOiJkNzQ0OGIyMjg4ZWVkYWQ5NTA3OWJjNmNiZTIzNDNkZWYyODgxYzZiMzI1MzY0Y2RkNTcyNzJkNTZiMTYxNmM3IiwidGFnIjoiIn0%3D; expires=Wed, 14 Oct 2026 22:04:08 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"viewserver-session","value":"eyJpdiI6IkVGT2w0bjIxS3VjRjkrZmg1ZnBnTWc9PSIsInZhbHVlIjoiQXZqSDJ4cE1kMjFrWVJTaVE0VDZZN0I3MjhqNXl5b2RlRXFvZ3hEY3pUK1NHSkFGY1IwL25VakxJOWczY0ZHWG8xTkVHNTJ3WnZLeTBQQk5IYnMyRmpnVVM1Ty9sNzhTeTNGSnpzQnZnc3VvR1pCaDdzSEsvajVuUTJzVXd0d3YiLCJtYWMiOiJhMTNlOTJiNWUzNmYwN2UxMzhmNjgyYmUwYWU4ZmUwYmNjMDUzMDYxZTRjNTRjNzA2MDU2ZTFmOTMxYTAzN2Y2IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-10-14T22:04:08Z","raw_expires":"Wed, 14 Oct 2026 22:04:08 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"viewserver-session=eyJpdiI6IkVGT2w0bjIxS3VjRjkrZmg1ZnBnTWc9PSIsInZhbHVlIjoiQXZqSDJ4cE1kMjFrWVJTaVE0VDZZN0I3MjhqNXl5b2RlRXFvZ3hEY3pUK1NHSkFGY1IwL25VakxJOWczY0ZHWG8xTkVHNTJ3WnZLeTBQQk5IYnMyRmpnVVM1Ty9sNzhTeTNGSnpzQnZnc3VvR1pCaDdzSEsvajVuUTJzVXd0d3YiLCJtYWMiOiJhMTNlOTJiNWUzNmYwN2UxMzhmNjgyYmUwYWU4ZmUwYmNjMDUzMDYxZTRjNTRjNzA2MDU2ZTFmOTMxYTAzN2Y2IiwidGFnIjoiIn0%3D; expires=Wed, 14 Oct 2026 22:04:08 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17121,"size_decoded":5917,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (339)","md5":"ffbdccd3e9eb1318b5d93c61aa96fd4d","sha1":"a772df7dd7dfe73f6eafa633d6877499779a5c23","sha256":"cd6298ec6ab377e6871c0d41c3d18d3d2e55925d17c8e2f2dc6e6154a56f7576","sha512":"354aa11048d428135d6e136b48d10bab8164bd4057e4069b84dbd9ce078a9875b7f511efa9b49c9f88bb5328ac1792bb74bc1a4061257b4bf891d55b494ec773","ssdeep":"384:8BBuu3Q1tsjMh4NaVhtJ9cbqDfhsHrQ4varQYu:8BBuuA1Wwhw4hgrQ4varQ7","tlshash":"7072d97031f11ba622279474a9d5aa071be5f617d6034c447bec8b913f87ca58e3336a","first_seen":"2026-10-14T20:11:32.185591Z","last_seen":"2026-10-14T20:11:32.185591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1155,"timings":{"blocked":-1,"dns":33,"connect":269,"send":0,"wait":325,"receive":0,"ssl":528},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-14","alert":"Phishing Block","trigger":"nfacebook.vn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"nfacebook.vn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pusher/8.4.0/pusher.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.450Z","timestamp":1792008249450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/pusher/8.4.0/pusher.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nfacebook.vn\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1799312\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 18 Mar 2025 05:39:16 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YGir1nR%2F4X59wOKQ1QKjpPjGWId4Pu2cMzHHYrnhY3TPSVRdaU4sLEfXVc4yjfIZulvDw0oJ3z8nRZZR0UZVZRBvMha4%2By7fmmiKeFuLMjft1ExYlovs9z3yUt92qDDf6d%2BZvCz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4a931078abd0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61917,"size_decoded":17231,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (61747)","md5":"611206ec93d301e8eb82d9eedca65cbc","sha1":"16c67747de3195c65d62d2ead14a48a5736ada8d","sha256":"8562010754def2099b10de375d492c0120e78f621e58222e5103fcfd22488915","sha512":"a77ad1ef922ce8308ad6bd83f267712d085ee085950d24d405dc6ab3455eba6d211c3498fac1fd33a53a09eb2bd6e9a5c5b8842bdc3fdc885716565c593d40a0","ssdeep":"1536:Pn+mM6s86ZphXoUK5EdkVB1R1DlqYuoD72MvMxl:PNwXiEdkVB1R1DlqYuAv8","tlshash":"915308c4b591b05147eb7162586b4003e33929a4650bc0bcbf78eddaec786c9b13bb75","first_seen":"2025-06-24T21:39:21.514172Z","last_seen":"2026-10-14T20:11:32.192118Z","times_seen":256,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":32,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/another_device.png","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.468Z","timestamp":1792008249468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/another_device.png HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 204762\r\naccept-ranges: bytes\r\netag: \"7db3c45720a76adc872391733f0a0c23\"\r\nlast-modified: Sat, 20 Jun 2026 07:04:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beaC2Wy6WOweIY2Z%2FXx%2FFqs8Gn5BnfXVRrI%2BxdpSaGb0o93M7CgKuCP34kHWcFBjI54IYA17TJmewHcGzugoVfQB0E0D0b9H09fkEisNT2Jju0ICB4yGNL6i%2BocnbPg%3D\"}]}\r\ncf-ray: a4a931089d21b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204762,"size_decoded":205416,"mime_type":"image/png","magic":"PNG image data, 1920 x 840, 8-bit/color RGBA, non-interlaced","md5":"7db3c45720a76adc872391733f0a0c23","sha1":"1a701d8e6c13542556cd190e71c693fe74d4c2c0","sha256":"d566a8a1d9221ca0e581113974dc813bcde965e8868eb40a12f07ca6a6be0879","sha512":"022f4fff453b66da933b7b4c4715cb285ce022b1424da1f6b0d5cd10d44d67bf66f5b473641c6716112bb1a79ce4f9b6bf101145f383cdcf417ea90c6298d6d2","ssdeep":"3072:Ccx4Mej9XjitRquhs/cm0hwVkAHOECJqi39JmwDXfBoX63JERKyzdBQWKIKGF6A5:CcqMe1GjVm0hwVB3IJrqXAJERrz90E","tlshash":"5a142325d8a973e1e645c07c939a2e1ed6fbd0e447fd09af27a91ca41c266c64339f80","first_seen":"2026-06-22T01:31:06.326636Z","last_seen":"2026-10-14T20:11:32.194423Z","times_seen":91,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":218,"dns":0,"connect":23,"send":0,"wait":247,"receive":62,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brscdn.io.vn/theme/system/facebook/fb_logo.png","fqdn":"brscdn.io.vn","domain":"brscdn.io.vn","tld":"io.vn"},"ip":{"addr":"104.21.2.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nfacebook.vn/timbannaygap0610?s0j\u0026ttu","date":"2026-10-14T20:04:09.471Z","timestamp":1792008249471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"082980cc.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 15:33:54 GMT","end":"Tue, 05 Jan 2027 16:33:49 GMT"},"fingerprint":{"sha1":"87:79:EB:53:80:D4:44:25:F7:14:A5:26:46:D1:3B:FC:1D:1C:D5:14","sha256":"08:13:07:33:25:D7:FC:A7:39:A2:44:B6:39:A3:19:67:42:8A:3F:A3:D8:9F:4A:C6:2C:7E:77:7E:44:DC:9C:60"}}},"request":{"raw":"GET /theme/system/facebook/fb_logo.png HTTP/1.1\r\nHost: brscdn.io.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nfacebook.vn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 20:04:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1710\r\naccept-ranges: bytes\r\netag: \"3c98762685c921c003221178d46545c6\"\r\nlast-modified: Mon, 13 Apr 2026 15:17:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5V7WfNurtYjmWW0KepE%2F8X%2ByMrLCD17Gf4pkoGS1KbeWnkUdd9xax2yWnkZRu5zLUAqHGQH7hmd3QgPjlyrd6hNICuw9lv%2BZA4%2BvVIW%2FtZoiqk00lzu%2BaLORmdDNdE%3D\"}]}\r\ncf-ray: a4a9310c3d3756a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1710,"size_decoded":2366,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"3c98762685c921c003221178d46545c6","sha1":"ea3cecbb315dfb5a3ad05dcffa2978f730adf439","sha256":"dd0613a78ab7385702593f21a4c19174ed8e9897e37849b16fc7b97700ffaba8","sha512":"48a4e4915974f3005931c211fe0eb891a4c9333b0cc4a2b128f467bbbc94d524d80f8f61010bc8810a5303a13676e033881f4dc7d3abd2389c95741eba172bac","ssdeep":"","tlshash":"1331f87395d14137427b1616d505caec3ca70dc99df02cccc084b1d835f3228aa98652","first_seen":"2024-07-06T12:13:16Z","last_seen":"2026-10-14T20:11:32.19586Z","times_seen":1693,"resource_available":false,"data":null}},"time_used":1374,"timings":{"blocked":798,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}