r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9908
Expires: Mon, 05 Dec 2022 00:57:50 GMT
Date: Sun, 04 Dec 2022 22:12:42 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 645
Cache-Control: max-age=131360
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:42 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 10:42:02 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5885
Expires: Sun, 04 Dec 2022 23:50:47 GMT
Date: Sun, 04 Dec 2022 22:12:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 21:20:09 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3153
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nDGNjqzSP47A3vsOoa84vD2cBsu+bpzFevxx/VAciBfV8ziJcTDmdvQlbLojY56zn5G6eMC4G9w=
x-amz-request-id: KEV89HDX6VG07XD1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 21:47:43 GMT
age: 1499
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 22:12:42 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
301 Moved Permanently 216 B URL HTTP/1.1 www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a43618027295dda811f9bbd5203ae20c
5b430fe86d603a12793465b5f46ed798c40d488d
e2194784b4ccc83a5ca3534217b662e63dfed8e31ad763da80ea50f08ae613a5
Analyzer Verdict Alert fortinet Malware
GET /2022/11/manulife-viet-nam-ra-mat-chien-dich.html HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 04 Dec 2022 22:12:42 GMT
Expires: Sun, 04 Dec 2022 22:12:42 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 216
Server: GSE
ocsp.pki.goog/s/gts1d4/xdg8ywFzLiM
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/xdg8ywFzLiM
IP
Hash a7eee7126738424fc206daf4478879f0
357f71e5b93174300578c057d323ec7d9168bcc1
17e4222737d9888f45820c18761b87fbf1176dd8b4c93f7a72a5cff72d090ac8
POST /s/gts1d4/xdg8ywFzLiM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 22:08:58 GMT
cache-control: public,max-age=3600
age: 224
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 624
Cache-Control: max-age=126272
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 09:17:15 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
200 OK 19 kB URL HTTP/2 www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8395)
Hash a9a0764870856bd9345e01e5d9c51d14
f45e32f9ca7f1170c21ec402177d27c8277b1673
305bd550399771e38736bb24018cf9a9babd0f4aa2f4566334540a5a87836886
Analyzer Verdict Alert fortinet Malware
GET /2022/11/manulife-viet-nam-ra-mat-chien-dich.html HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sun, 04 Dec 2022 22:12:43 GMT
date: Sun, 04 Dec 2022 22:12:43 GMT
cache-control: private, max-age=0
last-modified: Sun, 04 Dec 2022 18:35:33 GMT
etag: W/"e96994d7370d3715adcbeba67607f97c5d1742004bbd9a64e68195a076ccc1cf"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19058
server: GSE
X-Firefox-Spdy: h2
www.doanhnhandoisong.vn/js/cookienotice.js
200 OK 2.0 kB URL HTTP/2 www.doanhnhandoisong.vn/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sun, 04 Dec 2022 22:12:43 GMT
expires: Sun, 11 Dec 2022 22:12:43 GMT
cache-control: public, max-age=604800
last-modified: Sun, 04 Dec 2022 19:52:57 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 14f27d4d65ddcbb296d78d6d3868d9ff
bea0ac7dec3584ceaac95e79710e9fc98c2a36fd
918a82dcd0a7027433ab983ce8480c028dce04a20f064a8a4aefcc69e86ca2d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
200 OK 32 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32764)
Hash 548260b20981c0be2d9dcf8d01c08c24
84230120f8f1bd559eca3fb2fec6acf6cffbf4e7
2f8a612a714e5c928525fdb193f8ec12f7965a6c0d63dd8e58ccae239358c8bb
GET /ajax/libs/jquery/1.6.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32245
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 10:57:32 GMT
expires: Mon, 04 Dec 2023 10:57:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 40511
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cd8c709d33861f92a8d0d016a198cd41
2b71fa86c94f5d50a8ce65d02b4c5b8d010eb2f2
a48025cdad584ab4cce456815b00f144c47df1f9a744dc962b4bdb33070a2827
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c1f7594a4097e4dcc9fd7d4a02cafafe
b9dba74fb06bc248a40b26cb26600e750e376695
4dc877df2ca9330da46809359d71469672d18d87edcfee2c825fde13f470bfd8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 14f27d4d65ddcbb296d78d6d3868d9ff
bea0ac7dec3584ceaac95e79710e9fc98c2a36fd
918a82dcd0a7027433ab983ce8480c028dce04a20f064a8a4aefcc69e86ca2d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP
File type ASCII text, with very long lines (32180)
Hash f16500423cc2867eff8b773df637c48f
1cd32d75b59a89c3a70274e383151a61ce0594f4
6ca5dc8ad67639c69117ace46c93703cf5fff82824cfc0bada0cf0fb3b2d41d7
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 07:58:22 GMT
expires: Mon, 04 Dec 2023 07:58:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 51261
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 41v9zj8/E83Kx/aCH9VzTg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7DLztoXD5ucQXvVkaXlnfMKLzeU=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65f78026bd16cfba254886219e4e2bff
559176fd6b23488891485f1e698dd34bbaebed9a
69b113b4dcf6e56e853a2ef1e050b777c6ba34bc9c0a1ca1efe373df2b751b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash d989f35706c62ce4a5c561586c55566e
d32e7958e5765609bf08dcdefd0b2c2a8714ce34
375dfe942a03ee024b5cc827b3efda5550d13df7530281f50862ce3b33fcb716
GET /ajax/libs/jquery/1.7.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33845
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 18:40:06 GMT
expires: Wed, 29 Nov 2023 18:40:06 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 444757
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65f78026bd16cfba254886219e4e2bff
559176fd6b23488891485f1e698dd34bbaebed9a
69b113b4dcf6e56e853a2ef1e050b777c6ba34bc9c0a1ca1efe373df2b751b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65f78026bd16cfba254886219e4e2bff
559176fd6b23488891485f1e698dd34bbaebed9a
69b113b4dcf6e56e853a2ef1e050b777c6ba34bc9c0a1ca1efe373df2b751b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Sun, 04 Dec 2022 22:12:43 GMT
expires: Sun, 04 Dec 2022 22:12:43 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img2.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 img2.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: img2.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:00:17 GMT
expires: Tue, 06 Dec 2022 14:00:17 GMT
cache-control: public, max-age=604800
last-modified: Tue, 29 Nov 2022 06:52:50 GMT
content-type: image/gif
age: 461546
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i.imgur.com/oWo8kYD.jpg
200 OK 32 kB IP
File type JPEG image data, baseline, precision 8, 300x250, components 3\012- data
Hash ec935e25ad369f80505c80cf66900b59
858c4d12489bc40b620c120cf7f700b10c1d9631
823e7f737eba03f5631fdc364ed064e44c0682a389211df856371712aecf0222
GET /oWo8kYD.jpg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Jul 2021 12:55:57 GMT
etag: "ec935e25ad369f80505c80cf66900b59"
content-type: image/jpeg
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Dec 2022 22:12:43 GMT
age: 2689150
x-served-by: cache-iad-kcgs7200144-IAD, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 252, 1
x-timer: S1670191964.515643,VS0,VE2
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 31821
X-Firefox-Spdy: h2
i.imgur.com/Q6JCESd.png
200 OK 104 kB IP
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Size 104 kB (104120 bytes)
Hash 97fa71a334b1c90906041800a8f0f845
a534e2e6a68677ddacf084c3fbb02469d0972623
21979dcac9a0998e897a7698a1a544966506c90a78689e1e201a19c6df52776c
GET /Q6JCESd.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 27 Jul 2021 12:43:29 GMT
etag: "97fa71a334b1c90906041800a8f0f845"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Dec 2022 22:12:43 GMT
age: 3374102
x-served-by: cache-iad-kjyo7100038-IAD, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 58, 1
x-timer: S1670191963.496415,VS0,VE1
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 104120
X-Firefox-Spdy: h2
i.imgur.com/WpeU3WJ.png
200 OK 186 kB IP
File type PNG image data, 1000 x 120, 8-bit/color RGB, non-interlaced\012- data
Size 186 kB (185577 bytes)
Hash 6e306876fbcb056f8eee24b73c958bca
fcf6ed3e464e455f39f3b1eb25302e08ae562b80
35ec3f5aeeb9637acc2401039494eb677014ad9c7895900d6e74d2aefd19d0c5
GET /WpeU3WJ.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Jul 2021 12:51:45 GMT
etag: "6e306876fbcb056f8eee24b73c958bca"
x-amz-storage-class: STANDARD_IA
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Dec 2022 22:12:43 GMT
age: 306657
x-served-by: cache-iad-kjyo7100046-IAD, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 2, 1
x-timer: S1670191963.496647,VS0,VE2
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 185577
X-Firefox-Spdy: h2
i.imgur.com/NztzuSr.jpeg
200 OK 303 kB IP
File type JPEG image data, baseline, precision 8, 4450x563, components 3\012- data
Size 303 kB (302731 bytes)
Hash eaa42ecb19a0ee09ed44f95dd815dde3
0f6b39408f1bbca73ef74f3b69cac376c05d71a6
2f6fbb0d702213854c2f6b86de84d8658da663dca6e1c49159375446fd70e11d
GET /NztzuSr.jpeg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Jul 2021 12:58:31 GMT
etag: "eaa42ecb19a0ee09ed44f95dd815dde3"
x-amz-storage-class: STANDARD_IA
content-type: image/jpeg
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Dec 2022 22:12:43 GMT
age: 2816405
x-served-by: cache-iad-kjyo7100088-IAD, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 169, 1
x-timer: S1670191964.515640,VS0,VE3
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 302731
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:01:43 GMT
expires: Wed, 29 Nov 2023 14:01:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/css
age: 461460
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/mixgroup/postload.js
200 OK 1.6 kB URL HTTP/2 storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/mixgroup/postload.js
IP
File type HTML document, ASCII text
Hash 3a9da847b70f9d31ae6c2dc59273d9b6
7ff541bf36727f2921a22683e00fc4c711109c58
713ce1f931f1472f582ed0d20157190b53f3d9bc670ca68acaaf7daf93126af1
GET /google-code-archive-downloads/v2/code.google.com/mixgroup/postload.js HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdsx1qqOe1fJD4W9T4jzJmNoDTR96LKMPfhHa_2Nie48pjceqz2PzqGq8HHW_zc78GNJK32WuFd8FoVEOoHLu3pyLA
x-goog-generation: 1453525775849000
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1636
x-goog-hash: crc32c=vQtVNA==, md5=Op2oR7cPnTGubC3FknPZtg==
x-goog-storage-class: NEARLINE
accept-ranges: bytes
content-length: 1636
server: UploadServer
date: Sun, 04 Dec 2022 22:12:43 GMT
expires: Sun, 04 Dec 2022 23:12:43 GMT
cache-control: public, max-age=3600
last-modified: Sat, 23 Jan 2016 05:09:35 GMT
etag: "3a9da847b70f9d31ae6c2dc59273d9b6"
content-type: application/octet-stream
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2342155703-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 1217c8e34acb09c7cea97bae4d386ea1
55ee17703d0a7710943e93913bacb49220d98b4b
c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 05:43:29 GMT
expires: Wed, 29 Nov 2023 05:43:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/javascript
age: 491354
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f54a71942ab5d7fdc54672cf84aa76db
e03db706ad371c93ddd3cc4a3e4c329777bb5f4b
87453ee6a206085c9b82594123a30bf59f7354733d19f21e388dea70768198c9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/mixgroup/slide.js
200 OK 58 kB URL HTTP/2 storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/mixgroup/slide.js
IP
File type ASCII text, with very long lines (4967)
Hash b356bc9c05f9683997a91f95acb47645
1604a87d43990781c24a4e62ccb58a51795c1737
906a67af1b265f22700b9260d1f8d0aac1b93923a0b2ea1befa54a030d75642c
GET /google-code-archive-downloads/v2/code.google.com/mixgroup/slide.js HTTP/1.1
Host: storage.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-guploader-uploadid: ADPycdtBXfi7fxgLnIngykRZYnqfXkJdmXIMyYaDjrwDZZ8ErRtlJh5KIvlU_JQbvcqET8Aj32ucqE0vBQQiP9moDemhHA
x-goog-generation: 1453525775403000
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 58134
x-goog-hash: crc32c=fk3BXg==, md5=s1a8nAX5aDmXqR+VrLR2RQ==
x-goog-storage-class: NEARLINE
accept-ranges: bytes
content-length: 58134
server: UploadServer
date: Sun, 04 Dec 2022 22:12:43 GMT
expires: Sun, 04 Dec 2022 23:12:43 GMT
cache-control: public, max-age=3600
last-modified: Sat, 23 Jan 2016 05:09:35 GMT
etag: "b356bc9c05f9683997a91f95acb47645"
content-type: application/octet-stream
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65f78026bd16cfba254886219e4e2bff
559176fd6b23488891485f1e698dd34bbaebed9a
69b113b4dcf6e56e853a2ef1e050b777c6ba34bc9c0a1ca1efe373df2b751b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65f78026bd16cfba254886219e4e2bff
559176fd6b23488891485f1e698dd34bbaebed9a
69b113b4dcf6e56e853a2ef1e050b777c6ba34bc9c0a1ca1efe373df2b751b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 14f27d4d65ddcbb296d78d6d3868d9ff
bea0ac7dec3584ceaac95e79710e9fc98c2a36fd
918a82dcd0a7027433ab983ce8480c028dce04a20f064a8a4aefcc69e86ca2d1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.imgur.com/XID176U.jpeg
200 OK 1.1 MB IP
File type JPEG image data, baseline, precision 8, 4450x563, components 3\012- data
Size 1.1 MB (1133800 bytes)
Hash a936b64a286e249b4396d3d4653ae922
17971512e802c622365a4e92d02c16f2f66a8f5c
548add012557be0de7289c8b5220d292d2badf019542cb0c1247d2a345ea1dfe
GET /XID176U.jpeg HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Jul 2021 12:37:33 GMT
etag: "a936b64a286e249b4396d3d4653ae922"
x-amz-storage-class: STANDARD_IA
content-type: image/jpeg
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Dec 2022 22:12:43 GMT
age: 220240
x-served-by: cache-iad-kjyo7100158-IAD, cache-hel1410034-HEL
x-cache: HIT, MISS
x-cache-hits: 18, 0
x-timer: S1670191963.496490,VS0,VE231
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 1133800
X-Firefox-Spdy: h2
4.bp.blogspot.com/-nexgnZnZ_E0/WAROKqE--QI/AAAAAAAAf8Q/lnBDN4qSnDYhgVgSIB1nJ37vCP8z7iT-QCLcB/s1600/home-icon.png
200 OK 534 B URL HTTP/2 4.bp.blogspot.com/-nexgnZnZ_E0/WAROKqE--QI/AAAAAAAAf8Q/lnBDN4qSnDYhgVgSIB1nJ37vCP8z7iT-QCLcB/s1600/home-icon.png
IP
File type PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 35bed90460823adca17c19b39ffc13fe
d024b12fd77c3c8ee139734e8da137a851088859
a964ed48a0253110e9db27cf6e9fda29bb795b6e6dee3779681af64d768d6d0f
GET /-nexgnZnZ_E0/WAROKqE--QI/AAAAAAAAf8Q/lnBDN4qSnDYhgVgSIB1nJ37vCP8z7iT-QCLcB/s1600/home-icon.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="home-icon.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 534
x-xss-protection: 0
date: Sun, 04 Dec 2022 22:12:43 GMT
expires: Tue, 29 Nov 2022 03:00:10 GMT
cache-control: public, max-age=86400, no-transform
etag: "v7fc6"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c1f7594a4097e4dcc9fd7d4a02cafafe
b9dba74fb06bc248a40b26cb26600e750e376695
4dc877df2ca9330da46809359d71469672d18d87edcfee2c825fde13f470bfd8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-c_EJ90PnKS8/V-9TBvHZzVI/AAAAAAAAO6U/4WgMHXN6RnMGww4-k2ORikLUbP53xbRBgCLcB/s1600/search.png
200 OK 529 B URL HTTP/2 2.bp.blogspot.com/-c_EJ90PnKS8/V-9TBvHZzVI/AAAAAAAAO6U/4WgMHXN6RnMGww4-k2ORikLUbP53xbRBgCLcB/s1600/search.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ff7ac282387d1bffe14d6e840cdbaaa
bd907d55b077e44af75d959efa1d378c3a8d5838
432fd5c4e7f3958c270cce7bd127aa492603135deb223352d0f463dd4cd24cb4
GET /-c_EJ90PnKS8/V-9TBvHZzVI/AAAAAAAAO6U/4WgMHXN6RnMGww4-k2ORikLUbP53xbRBgCLcB/s1600/search.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="search.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 529
x-xss-protection: 0
date: Sun, 04 Dec 2022 22:12:43 GMT
expires: Fri, 11 Nov 2022 05:39:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3bad"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-CJL6AbkTJ-I/ULdD3Di_R5I/AAAAAAAAN9U/uCkoX72_9x0/s1600/breadcrumbs_arrow.png
200 OK 203 B URL HTTP/2 3.bp.blogspot.com/-CJL6AbkTJ-I/ULdD3Di_R5I/AAAAAAAAN9U/uCkoX72_9x0/s1600/breadcrumbs_arrow.png
IP
File type PNG image data, 3 x 5, 8-bit/color RGBA, non-interlaced\012- data
Hash 3d3f655697d52f2070cec5a90e49973f
ccca49b5de575efbe30c4fc607c8d9118529d65b
be01a8a8c80fdff52423b995c34e5f46e35f281cb66c0c835f92f9dfdac12417
GET /-CJL6AbkTJ-I/ULdD3Di_R5I/AAAAAAAAN9U/uCkoX72_9x0/s1600/breadcrumbs_arrow.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v37d5"
expires: Mon, 05 Dec 2022 22:12:43 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="breadcrumbs_arrow.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:43 GMT
server: fife
content-length: 203
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-kuZwhbbIwww/WDpyxpDqUPI/AAAAAAAAiuY/3_oyDGyF30IU8cU_Yen3ypbTck2LheG3ACK4B/s1600/Doanhnhandoisong1.png
200 OK 102 kB URL HTTP/2 1.bp.blogspot.com/-kuZwhbbIwww/WDpyxpDqUPI/AAAAAAAAiuY/3_oyDGyF30IU8cU_Yen3ypbTck2LheG3ACK4B/s1600/Doanhnhandoisong1.png
IP
File type PNG image data, 1589 x 382, 8-bit/color RGBA, non-interlaced\012- data
Size 102 kB (102218 bytes)
Hash 3d9213b61c929fea022230f3ecef9d82
4c3e82498e4e31da8fdff3c63fd582e7c028c5ff
6f341064c61001ba5a6a48b091ac11f2785b6c24ccc2e215416e3436f027ce25
GET /-kuZwhbbIwww/WDpyxpDqUPI/AAAAAAAAiuY/3_oyDGyF30IU8cU_Yen3ypbTck2LheG3ACK4B/s1600/Doanhnhandoisong1.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Doanhnhandoisong1.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 102218
x-xss-protection: 0
date: Sun, 04 Dec 2022 22:12:44 GMT
expires: Fri, 02 Dec 2022 12:46:04 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8ae8"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.doanhnhandoisong.vn/feeds/posts/default/-/x%C3%A3%20h%E1%BB%99i?alt=json-in-script&callback=related_results_labels
200 OK 80 kB URL HTTP/2 www.doanhnhandoisong.vn/feeds/posts/default/-/x%C3%A3%20h%E1%BB%99i?alt=json-in-script&callback=related_results_labels
IP
File type Unicode text, UTF-8 text, with very long lines (57655)
Hash 9c22a561a140fb90c2964427ca612a74
3c92d4e7dec434df11299fe2cb46cccb5fb436f9
e414d0784d66c3e4fb50baeb535bd1006278e5ad7ea7d61cbc684b01d814f109
GET /feeds/posts/default/-/x%C3%A3%20h%E1%BB%99i?alt=json-in-script&callback=related_results_labels HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"887b34feaabbb0d5c42b77fd79ebcafdde66280398e3409ebd81012e23f14b78"
date: Sun, 04 Dec 2022 22:12:43 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 04 Dec 2022 22:12:44 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Sun, 04 Dec 2022 18:35:33 GMT
content-encoding: gzip
content-length: 80162
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.doanhnhandoisong.vn/feeds/posts/default/-/x%C3%A3%20h%E1%BB%99i?alt=json-in-script&callback=related_results_labels_thumbs
200 OK 80 kB URL HTTP/2 www.doanhnhandoisong.vn/feeds/posts/default/-/x%C3%A3%20h%E1%BB%99i?alt=json-in-script&callback=related_results_labels_thumbs
IP
File type Unicode text, UTF-8 text, with very long lines (57655)
Hash 12c270f0530d06e5c5c6df983d9d3392
a03fc95ede656967ff9a277616357bc2c5fbb68b
6022922b460edf2e8ef73eb6dbaf51e6ead1d45420d0e5d447ea2b7073d592d5
GET /feeds/posts/default/-/x%C3%A3%20h%E1%BB%99i?alt=json-in-script&callback=related_results_labels_thumbs HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"887b34feaabbb0d5c42b77fd79ebcafdde66280398e3409ebd81012e23f14b78"
date: Sun, 04 Dec 2022 22:12:44 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Sun, 04 Dec 2022 22:12:45 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Sun, 04 Dec 2022 18:35:33 GMT
content-length: 80166
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11646
Expires: Mon, 05 Dec 2022 01:26:50 GMT
Date: Sun, 04 Dec 2022 22:12:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11646
Expires: Mon, 05 Dec 2022 01:26:50 GMT
Date: Sun, 04 Dec 2022 22:12:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11646
Expires: Mon, 05 Dec 2022 01:26:50 GMT
Date: Sun, 04 Dec 2022 22:12:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11646
Expires: Mon, 05 Dec 2022 01:26:50 GMT
Date: Sun, 04 Dec 2022 22:12:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:49:44 GMT
age: 1380
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:42:39 GMT
age: 1805
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a6e7b32ac999cf3c899a234c621fa91a
fc5d4f3163ebb9faf85968cbb1d194e8e68418be
f12db3aed126006fee00649aba0b3eaae900de200b85b9523866a90b5494f18e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8989
x-amzn-requestid: abce0b01-f70c-42ad-b242-5a24735fe4c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltl4Gk2oAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f2-1cccffff5199dffe70264a95;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: emlp1xilsRT2P1bLbS63ImV7rpoIInC-6mQhu7eGProt148Gj-f1zg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:50:05 GMT
age: 1359
etag: "fc5d4f3163ebb9faf85968cbb1d194e8e68418be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2636f91bb8fa4d9bb7bef114c248a9ae
8637105f41058bc0d2b259d462b560881928adb6
3d93fd8fcf1af31d00ccbd453142dbea5f2b91d7f58373095943ed40a31ed1f7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F61cc2744-b517-4404-bfa2-25fadadfa3f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10431
x-amzn-requestid: f79ab5e7-8c1b-4827-a531-aaa19c1d80aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsCGEwxIAMF34g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc073-6358d2950955884c470c0a89;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J5nMfQKgT-FYVTurkqi_1CM7gu_aDiAN9NLP7hocqQ10UixVzQcq5w==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:47:08 GMT
age: 1536
etag: "8637105f41058bc0d2b259d462b560881928adb6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kmki-SBINSx1kbiIkaSGebdCLrnDeHVhYeotAWzE__CevkNDdfzRGg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:44:05 GMT
age: 1719
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KHd4ajJWl-8TDH5HGbkuJXI4NL6I83IwSUBKzfq85cxpyRH_LGl6OA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 05:55:20 GMT
age: 58644
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.doanhnhandoisong.vn/feeds/posts/default/-/ti%C3%AAu%20%C4%91i%E1%BB%83m?max-results=5&orderby=published&alt=json-in-script&callback=showrecentposts
200 OK 27 kB URL HTTP/2 www.doanhnhandoisong.vn/feeds/posts/default/-/ti%C3%AAu%20%C4%91i%E1%BB%83m?max-results=5&orderby=published&alt=json-in-script&callback=showrecentposts
IP
File type Unicode text, UTF-8 text, with very long lines (58703)
Hash c82b0ec4590c23a69bd3e1ce4d139840
91c2153387b3b4fb8d175d410e38878d8ebbd688
411157b5e09cc5f7719c0815d1eec0607ced3791f2917c8f218525451f7efb0b
GET /feeds/posts/default/-/ti%C3%AAu%20%C4%91i%E1%BB%83m?max-results=5&orderby=published&alt=json-in-script&callback=showrecentposts HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"39e0d9afdb1a2491f82dfc5efa803ab47566d8661555c19141d86e160872e57a"
date: Sun, 04 Dec 2022 22:12:44 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 04 Dec 2022 22:12:45 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Sun, 04 Dec 2022 18:35:33 GMT
content-encoding: gzip
content-length: 27216
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.doanhnhandoisong.vn/feeds/posts/default?max-results=5&orderby=published&alt=json-in-script&callback=showrecentposts
200 OK 19 kB URL HTTP/2 www.doanhnhandoisong.vn/feeds/posts/default?max-results=5&orderby=published&alt=json-in-script&callback=showrecentposts
IP
File type Unicode text, UTF-8 text, with very long lines (60934)
Hash 9226ffc072346a2afdda900788330746
46778018e6221e75a64ee30419723c15b6233b71
6b57d3158f1be9d22637985352956013ca99e763b45b9a00cd018b8191b506b0
GET /feeds/posts/default?max-results=5&orderby=published&alt=json-in-script&callback=showrecentposts HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"f8d39f7a77e95b2ab023081934fe011d6055323c53f093a60472879125565a6e"
date: Sun, 04 Dec 2022 22:12:45 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 04 Dec 2022 22:12:46 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Sun, 04 Dec 2022 18:35:33 GMT
content-encoding: gzip
content-length: 19209
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ws.sharethis.com/button/async-buttons.js
200 OK 19 kB URL HTTP/2 ws.sharethis.com/button/async-buttons.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0b3b7d06f8df8276ede0facec198706e
3e42fc6cacb95a5fa1b56c5b3984e8269752fbbe
342ffe242184c80ddf304e21db8b256ccb8aecb1f4bd9363802dcf2f36053837
GET /button/async-buttons.js HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 18813
content-encoding: gzip
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
date: Sat, 03 Dec 2022 21:42:44 GMT
cache-control: max-age=259200
expires: Tue, 06 Dec 2022 21:42:44 GMT
etag: W/"634f1895-16245"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: caTP42qEshmE3hG8Vt_NzmtV83NOY49airy-k4pQ0i-JWvBnd3aZag==
age: 88201
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ws.sharethis.com/button/css/buttons-secure.css
200 OK 3.9 kB URL HTTP/2 ws.sharethis.com/button/css/buttons-secure.css
IP
File type ASCII text, with very long lines (23158), with no line terminators
Hash 61da924a747e08c5f54a6cb31c724a48
8e49d971d6a667c3888a481b742e05cafcf72a43
54302324d4b6aa780466c869b9932504d0b1eaa7ef1df6c5481b35fb0625343a
GET /button/css/buttons-secure.css HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 3851
content-encoding: gzip
last-modified: Tue, 18 Oct 2022 21:20:21 GMT
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
date: Sat, 03 Dec 2022 23:28:19 GMT
etag: W/"634f1895-5a76"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pKE0gD5SHJADBN7Cp9GwJd7Y7hcfzS2UDP2a7o76YLCwRzdMu4UdVw==
age: 81869
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 33002e87ed87cec83ec76bdfe55cb33a
a2dafcefab949833412ab20508096c9974b9e359
f73d30247eb325d9dc9531381224e8942b39b56c264ade1618855f1fad9eda2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2788
Cache-Control: max-age=138882
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Etag: "638c8bfc-1d7"
Expires: Tue, 06 Dec 2022 12:47:28 GMT
Last-Modified: Sun, 04 Dec 2022 12:01:00 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.googleusercontent.com/-kuZwhbbIwww/WDpyxpDqUPI/AAAAAAAAiuY/3_oyDGyF30IU8cU_Yen3ypbTck2LheG3ACK4B/s1600/Doanhnhandoisong1.png
200 OK 102 kB URL HTTP/2 lh4.googleusercontent.com/-kuZwhbbIwww/WDpyxpDqUPI/AAAAAAAAiuY/3_oyDGyF30IU8cU_Yen3ypbTck2LheG3ACK4B/s1600/Doanhnhandoisong1.png
IP
File type PNG image data, 1589 x 382, 8-bit/color RGBA, non-interlaced\012- data
Size 102 kB (102218 bytes)
Hash 3d9213b61c929fea022230f3ecef9d82
4c3e82498e4e31da8fdff3c63fd582e7c028c5ff
6f341064c61001ba5a6a48b091ac11f2785b6c24ccc2e215416e3436f027ce25
GET /-kuZwhbbIwww/WDpyxpDqUPI/AAAAAAAAiuY/3_oyDGyF30IU8cU_Yen3ypbTck2LheG3ACK4B/s1600/Doanhnhandoisong1.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Doanhnhandoisong1.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 102218
x-xss-protection: 0
date: Sun, 04 Dec 2022 22:12:46 GMT
expires: Fri, 02 Dec 2022 12:06:00 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8ae8"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.googleusercontent.com/-nexgnZnZ_E0/WAROKqE--QI/AAAAAAAAf8Q/lnBDN4qSnDYhgVgSIB1nJ37vCP8z7iT-QCLcB/s1600/home-icon.png
200 OK 534 B URL HTTP/2 lh4.googleusercontent.com/-nexgnZnZ_E0/WAROKqE--QI/AAAAAAAAf8Q/lnBDN4qSnDYhgVgSIB1nJ37vCP8z7iT-QCLcB/s1600/home-icon.png
IP
File type PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 35bed90460823adca17c19b39ffc13fe
d024b12fd77c3c8ee139734e8da137a851088859
a964ed48a0253110e9db27cf6e9fda29bb795b6e6dee3779681af64d768d6d0f
GET /-nexgnZnZ_E0/WAROKqE--QI/AAAAAAAAf8Q/lnBDN4qSnDYhgVgSIB1nJ37vCP8z7iT-QCLcB/s1600/home-icon.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="home-icon.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 534
x-xss-protection: 0
date: Sun, 04 Dec 2022 22:12:46 GMT
expires: Fri, 02 Dec 2022 12:06:00 GMT
cache-control: public, max-age=86400, no-transform
etag: "v7fc6"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 33002e87ed87cec83ec76bdfe55cb33a
a2dafcefab949833412ab20508096c9974b9e359
f73d30247eb325d9dc9531381224e8942b39b56c264ade1618855f1fad9eda2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2788
Cache-Control: max-age=138882
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Etag: "638c8bfc-1d7"
Expires: Tue, 06 Dec 2022 12:47:28 GMT
Last-Modified: Sun, 04 Dec 2022 12:01:00 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.doanhnhandoisong.vn/favicon.ico
200 OK 596 B URL HTTP/2 www.doanhnhandoisong.vn/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 41ac8126436bbda6fd49818ffcd5d31d
48018b1400fc70f978ac91e079cc36a690500b3a
4a69116ba830ef41788ca043f443ae67bb07abf95674d4e25c865469b0e58a26
GET /favicon.ico HTTP/1.1
Host: www.doanhnhandoisong.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/2022/11/manulife-viet-nam-ra-mat-chien-dich.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Sun, 04 Dec 2022 22:12:46 GMT
date: Sun, 04 Dec 2022 22:12:46 GMT
cache-control: private, max-age=86400
last-modified: Sun, 04 Dec 2022 18:35:33 GMT
etag: W/"e96994d7370d3715adcbeba67607f97c5d1742004bbd9a64e68195a076ccc1cf"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 596
server: GSE
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Sun, 04 Dec 2022 10:13:40 GMT
expires: Sun, 18 Dec 2022 10:13:40 GMT
cache-control: public, max-age=1209600
age: 43146
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 64eb3a8f7cc11324c6f4c77e1c11f7ee
8ad889db020018b726362929a9477872a6808f0a
481082e2478f937b15faec7128ab1a60bf1157b417bfa63022472f434ae240fd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/vi_VN/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/vi_VN/all.js
IP
File type ASCII text, with very long lines (1957)
Hash 5cea0fdeeb6e10a5e5c44ad288acb253
f6898b30cfb9dab22db90ddc0449c493d56afb28
2c06f0dea900544f26ac62a2552ee2ecac155d4158fa48699e7418c763820d35
GET /vi_VN/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: e4f9070142cdd998466e4331bc56937e
etag: "968526a97415231425d31011c1502768"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 04 Dec 2022 22:26:47 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: XOoP3utuEKXlxErSiKyyUw==
x-fb-debug: z5RWX1yh+SnRQlbnRdlVVUmR+TxKWSyHNPUqF2tu0ArClhRdQH075ognFQWYO7uCdqBQx8iIgIuqIQrGH8G3Gw==
content-length: 1687
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 33002e87ed87cec83ec76bdfe55cb33a
a2dafcefab949833412ab20508096c9974b9e359
f73d30247eb325d9dc9531381224e8942b39b56c264ade1618855f1fad9eda2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2788
Cache-Control: max-age=138882
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 22:12:46 GMT
Etag: "638c8bfc-1d7"
Expires: Tue, 06 Dec 2022 12:47:28 GMT
Last-Modified: Sun, 04 Dec 2022 12:01:00 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 351783338d5a9eda116642ba959ae61f
3eb8b8fab097021e2e78dc83c870197f00e6112e
d3cd3468d4f95e5ef27bcc8bdb0f890415347f6fb62685a133976ab723654b63
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 04 Dec 2022 22:12:46 GMT
Last-Modified: Sun, 04 Dec 2022 22:09:10 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: G92Qw27RE4jtzfxZpT9fOdz9d-Gu1aRs3GYGMiZc1PQXcovslnSk2Q==
Age: 216
l.sharethis.com/pview?event=pview&version=buttons.js&lang=en&sessionID=1670191961314.65447&hostname=www.doanhnhandoisong.vn&location=%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&product=widget&fcmp=false&fcmpv2=false&publisher=fba550d6-c9c1-41e3-9335-bb4f6e5f3fa5&url=https%3A%2F%2Fwww.doanhnhandoisong.vn%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&title=Manulife%20Vi%E1%BB%87t%20Nam%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%9CB%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%9D%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20b%E1%BA%A3o%20hi%E1%BB%83m%20-%20Doanh%20nh%C3%A2n%20%26%20%C4%90%E1%BB%9Di%20s%E1%BB%91ng&sop=false&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&version=buttons.js&lang=en&sessionID=1670191961314.65447&hostname=www.doanhnhandoisong.vn&location=%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&product=widget&fcmp=false&fcmpv2=false&publisher=fba550d6-c9c1-41e3-9335-bb4f6e5f3fa5&url=https%3A%2F%2Fwww.doanhnhandoisong.vn%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&title=Manulife%20Vi%E1%BB%87t%20Nam%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%9CB%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%9D%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20b%E1%BA%A3o%20hi%E1%BB%83m%20-%20Doanh%20nh%C3%A2n%20%26%20%C4%90%E1%BB%9Di%20s%E1%BB%91ng&sop=false&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&version=buttons.js&lang=en&sessionID=1670191961314.65447&hostname=www.doanhnhandoisong.vn&location=%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&product=widget&fcmp=false&fcmpv2=false&publisher=fba550d6-c9c1-41e3-9335-bb4f6e5f3fa5&url=https%3A%2F%2Fwww.doanhnhandoisong.vn%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&title=Manulife%20Vi%E1%BB%87t%20Nam%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%9CB%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%9D%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20b%E1%BA%A3o%20hi%E1%BB%83m%20-%20Doanh%20nh%C3%A2n%20%26%20%C4%90%E1%BB%9Di%20s%E1%BB%91ng&sop=false&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro... HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.doanhnhandoisong.vn
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: https://www.doanhnhandoisong.vn
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Sun, 04 Dec 2022 22:12:46 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
l.sharethis.com/pview?event=pview&version=buttons.js&lang=en&sessionID=1670191961314.65447&hostname=www.doanhnhandoisong.vn&location=%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&product=widget&fcmp=false&fcmpv2=false&publisher=fba550d6-c9c1-41e3-9335-bb4f6e5f3fa5&url=https%3A%2F%2Fwww.doanhnhandoisong.vn%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&title=Manulife%20Vi%E1%BB%87t%20Nam%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%9CB%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%9D%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20b%E1%BA%A3o%20hi%E1%BB%83m%20-%20Doanh%20nh%C3%A2n%20%26%20%C4%90%E1%BB%9Di%20s%E1%BB%91ng&sop=false&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...&img_pview=true
204 No Content 0 B URL HTTP/1.1 l.sharethis.com/pview?event=pview&version=buttons.js&lang=en&sessionID=1670191961314.65447&hostname=www.doanhnhandoisong.vn&location=%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&product=widget&fcmp=false&fcmpv2=false&publisher=fba550d6-c9c1-41e3-9335-bb4f6e5f3fa5&url=https%3A%2F%2Fwww.doanhnhandoisong.vn%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&title=Manulife%20Vi%E1%BB%87t%20Nam%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%9CB%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%9D%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20b%E1%BA%A3o%20hi%E1%BB%83m%20-%20Doanh%20nh%C3%A2n%20%26%20%C4%90%E1%BB%9Di%20s%E1%BB%91ng&sop=false&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...&img_pview=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pview?event=pview&version=buttons.js&lang=en&sessionID=1670191961314.65447&hostname=www.doanhnhandoisong.vn&location=%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&product=widget&fcmp=false&fcmpv2=false&publisher=fba550d6-c9c1-41e3-9335-bb4f6e5f3fa5&url=https%3A%2F%2Fwww.doanhnhandoisong.vn%2F2022%2F11%2Fmanulife-viet-nam-ra-mat-chien-dich.html&title=Manulife%20Vi%E1%BB%87t%20Nam%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%9CB%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%9D%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20b%E1%BA%A3o%20hi%E1%BB%83m%20-%20Doanh%20nh%C3%A2n%20%26%20%C4%90%E1%BB%9Di%20s%E1%BB%91ng&sop=false&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...&description=Ng%C3%A0y%2022%2F11%2F2022%2C%20Manulife%20Vi%E1%BB%87t%20Nam%20c%C3%B4ng%20b%E1%BB%91%20ra%20m%E1%BA%AFt%20chi%E1%BA%BFn%20d%E1%BB%8Bch%20%E2%80%98B%C6%B0%E1%BB%9Bc%20%C4%91%E1%BA%BFn%20H%E1%BA%A1nh%20ph%C3%BAc%E2%80%99%2C%20nh%E1%BA%B1m%20n%C3%A2ng%20cao%20nh%E1%BA%ADn%20th%E1%BB%A9c%20v%E1%BB%81%20s%E1%BB%B1%20%E2%80%9Cthi%E1%BA%BFu%20h%E1%BB%A5t%20b%E1%BA%A3o%20v%E1%BB%87%E2%80%9D.%20M%E1%BB%99t%20tro...&img_pview=true HTTP/1.1
Host: l.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: *
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: stid
Access-Control-Max-Age: 1728000
Cache-Control: no-cache, no-store, must-revalidate
Date: Sun, 04 Dec 2022 22:12:46 GMT
Strict-Transport-Security: max-age=63072000; includeSubDomains;
Connection: keep-alive
connect.facebook.net/vi_VN/all.js?hash=ff4ccc403d994e3233d0d372b9235279
200 OK 88 kB URL HTTP/2 connect.facebook.net/vi_VN/all.js?hash=ff4ccc403d994e3233d0d372b9235279
IP
File type ASCII text, with very long lines (18605)
Hash 63c75b55bd519faaab18e7f30e4a0a66
10ed9a3f12a87899f0a130c526c8fa15bc632de0
6a218eea44a8b838b5aa7c12c7e953bb09548276719bbeec10696aad7d2f8b85
GET /vi_VN/all.js?hash=ff4ccc403d994e3233d0d372b9235279 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.doanhnhandoisong.vn
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: a3082f96b397e9ff6ccf920c5bebf774
etag: "ecc435f74c0a7da8818a84d03fe5717e"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 04 Dec 2023 22:01:00 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Y8dbVb1Rn6qrGOfzDkoKZg==
x-fb-debug: sIsHyrjzB028qSkoZy1k8smro9Mdib6upKr039PIASQRdLBoB4Uaoy1vtBB0UNxb1cUVVeeWMDxDYxVwpmGPcg==
priority: u=3,i
content-length: 88364
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2NnTUvtiI7Cxypw4AE8tQe7x1ysYiBzlUxcmoyNK2ePWI8igeIRfTrZcekONjqc70_pRvHhXGvncoSMgY8L2Q7ZVKSEM1ZvnEvbR7dyZVIfYedX7bCN4y-pubSryfxKZVRlbv4xUerddjzZLUXzfSlDlkD4YL2_3cJfFq1WXN0C8GNLfhdpofKb4l/s72-c/7.jpg
200 OK 5.6 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2NnTUvtiI7Cxypw4AE8tQe7x1ysYiBzlUxcmoyNK2ePWI8igeIRfTrZcekONjqc70_pRvHhXGvncoSMgY8L2Q7ZVKSEM1ZvnEvbR7dyZVIfYedX7bCN4y-pubSryfxKZVRlbv4xUerddjzZLUXzfSlDlkD4YL2_3cJfFq1WXN0C8GNLfhdpofKb4l/s72-c/7.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 03bd1e1d318fbc415a18b1ecdd1e4749
bbd73ee12c8ddc1e258a259f8786fa018c2ea7cd
40e392a09da01f28f9b5fcda74786c404b0f399c3e71f87f14d4ed1e1fd7ec08
GET /img/b/R29vZ2xl/AVvXsEi2NnTUvtiI7Cxypw4AE8tQe7x1ysYiBzlUxcmoyNK2ePWI8igeIRfTrZcekONjqc70_pRvHhXGvncoSMgY8L2Q7ZVKSEM1ZvnEvbR7dyZVIfYedX7bCN4y-pubSryfxKZVRlbv4xUerddjzZLUXzfSlDlkD4YL2_3cJfFq1WXN0C8GNLfhdpofKb4l/s72-c/7.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7d2d"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="7.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 5554
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4zyJgjFBoobvJLbsgy-VafiUAVaH2832BXCRV2m5OlBSWJWSL5XbtvDSvSYBbdBjjNyTxAmTixGY38H0aUXpFGVMNh_-3MSg120hlZaG9fGh6pVk0fp5aHYunuXv_SyKlodiwpui0loiOJPGl0bgSq7rpxUUz1PR4Jly9l7hsV-uUDEJjEIsqs11t/s72-c/1.jpg
200 OK 4.1 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4zyJgjFBoobvJLbsgy-VafiUAVaH2832BXCRV2m5OlBSWJWSL5XbtvDSvSYBbdBjjNyTxAmTixGY38H0aUXpFGVMNh_-3MSg120hlZaG9fGh6pVk0fp5aHYunuXv_SyKlodiwpui0loiOJPGl0bgSq7rpxUUz1PR4Jly9l7hsV-uUDEJjEIsqs11t/s72-c/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google, copyright=Copyright (c) 2020 Ground Picture/Shutterstock. No use without permission.], baseline, precision 8, 72x72, components 3\012- data
Hash d3ddd50763e3b927ea5bf390c1b35424
5d33b0bd430afd4f0980b831fe0e2c164cec64ac
955b82a0da55fd93aa50ae4fd39e14233a38f97c1c6872e652fef5b865b5116b
GET /img/b/R29vZ2xl/AVvXsEi4zyJgjFBoobvJLbsgy-VafiUAVaH2832BXCRV2m5OlBSWJWSL5XbtvDSvSYBbdBjjNyTxAmTixGY38H0aUXpFGVMNh_-3MSg120hlZaG9fGh6pVk0fp5aHYunuXv_SyKlodiwpui0loiOJPGl0bgSq7rpxUUz1PR4Jly9l7hsV-uUDEJjEIsqs11t/s72-c/1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7b3a"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 4057
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdA240-NBGDEhpIwNQLlVghFU0Js5GvCyQpPIQy6kjQlEzBkr9oBK7D8-Rv5lh4EJn5VTQX4P_PZhc2y0yHBpw6V0x2gY_lqmKxpGgWSfw9UOhELHhkGZppz__SA6le9znRQGVlp_skPCtTFdwUvINKww8vn6EIq6mZjmd8nnY62k5Q5e-FmsVJ5u-/s72-c/1.png
200 OK 10 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdA240-NBGDEhpIwNQLlVghFU0Js5GvCyQpPIQy6kjQlEzBkr9oBK7D8-Rv5lh4EJn5VTQX4P_PZhc2y0yHBpw6V0x2gY_lqmKxpGgWSfw9UOhELHhkGZppz__SA6le9znRQGVlp_skPCtTFdwUvINKww8vn6EIq6mZjmd8nnY62k5Q5e-FmsVJ5u-/s72-c/1.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 6cb53a232a761379abe6f7a459abb6ab
63dd689d69b5c8bbda200626c3c333e1a7e1f669
f3526c3f8dcb903655f220d001f6b89d110b0b1747b55bfc539f9209bd8b78d6
GET /img/b/R29vZ2xl/AVvXsEjdA240-NBGDEhpIwNQLlVghFU0Js5GvCyQpPIQy6kjQlEzBkr9oBK7D8-Rv5lh4EJn5VTQX4P_PZhc2y0yHBpw6V0x2gY_lqmKxpGgWSfw9UOhELHhkGZppz__SA6le9znRQGVlp_skPCtTFdwUvINKww8vn6EIq6mZjmd8nnY62k5Q5e-FmsVJ5u-/s72-c/1.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7cec"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 10201
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNUiReP7ufUSpiIFnc557wGxVhxba1Ol79fXqlaVdQPFe6kuwASjpHOd98thFit0XzVkDv7AEzLjClTd05vVQbn1HAr7VQBhHYn3fHGALdKiENiUq-95f592nrVMP7ykGw1dXqGTh_FSpV5bsnkMPSjgeCgIyzt2635B0VimWJzl3v6hUShgd9QKVP/s16000/1.png
200 OK 266 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNUiReP7ufUSpiIFnc557wGxVhxba1Ol79fXqlaVdQPFe6kuwASjpHOd98thFit0XzVkDv7AEzLjClTd05vVQbn1HAr7VQBhHYn3fHGALdKiENiUq-95f592nrVMP7ykGw1dXqGTh_FSpV5bsnkMPSjgeCgIyzt2635B0VimWJzl3v6hUShgd9QKVP/s16000/1.png
IP
File type PNG image data, 600 x 878, 8-bit/color RGB, non-interlaced\012- data
Size 266 kB (265803 bytes)
Hash 6a6b372a69f6fff5cb4a221d9b28f18a
78518a21121ff2a2d8b2bb1e00569ddd765e9a41
abce8c8714e1d42a950a5852a3d50502011da3e85ebbc17a5871e790cd1fa1ca
GET /img/b/R29vZ2xl/AVvXsEiNUiReP7ufUSpiIFnc557wGxVhxba1Ol79fXqlaVdQPFe6kuwASjpHOd98thFit0XzVkDv7AEzLjClTd05vVQbn1HAr7VQBhHYn3fHGALdKiENiUq-95f592nrVMP7ykGw1dXqGTh_FSpV5bsnkMPSjgeCgIyzt2635B0VimWJzl3v6hUShgd9QKVP/s16000/1.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7cf0"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 265803
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHTdX3Skcoolsw7yvgty7gO8-F-ic5DA5VFWCm1Lsy0HdJkr1gSa4MRLfvtl3GtdDc8t2c-fc5_oUVtPGt_9g2QaUEvJG9WYxrTfkTOeyMXPJClSYDlaE0xs2nRgfETsbcs3nvwk492mKuAzojT5nUHoQ4CK7suWgNE7qJzMgfyldxIxjvvY4BlILg/s72-c/1.jpg
200 OK 4.5 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHTdX3Skcoolsw7yvgty7gO8-F-ic5DA5VFWCm1Lsy0HdJkr1gSa4MRLfvtl3GtdDc8t2c-fc5_oUVtPGt_9g2QaUEvJG9WYxrTfkTOeyMXPJClSYDlaE0xs2nRgfETsbcs3nvwk492mKuAzojT5nUHoQ4CK7suWgNE7qJzMgfyldxIxjvvY4BlILg/s72-c/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 33999d91de66eeaab7d2202d84f5146b
fef63ceacfb1dccf249fc795b630f0896fb1feb7
e7395c53352bc1973464de4c189906941e1d342de049720b8c7f95f44abdae0e
GET /img/b/R29vZ2xl/AVvXsEiHTdX3Skcoolsw7yvgty7gO8-F-ic5DA5VFWCm1Lsy0HdJkr1gSa4MRLfvtl3GtdDc8t2c-fc5_oUVtPGt_9g2QaUEvJG9WYxrTfkTOeyMXPJClSYDlaE0xs2nRgfETsbcs3nvwk492mKuAzojT5nUHoQ4CK7suWgNE7qJzMgfyldxIxjvvY4BlILg/s72-c/1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7cd4"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 4524
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimICUgXP-DnzMtTm9M2LXV97XN324f5xNjYO9x39Y6ZK5V23l5TPj-COplFwsD0jP7NneiRQ9DwYKw0FFSObfiEBjyfPaaBT31Njf9sRVAAZwtqL4RIinPCHb2LijW11blxG5Cbc5nRpFmslIHtiXCIndTLdPktdpdg490DpzddBQd4gKHfN0yr9z9/s72-c/4.JPG
200 OK 4.8 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimICUgXP-DnzMtTm9M2LXV97XN324f5xNjYO9x39Y6ZK5V23l5TPj-COplFwsD0jP7NneiRQ9DwYKw0FFSObfiEBjyfPaaBT31Njf9sRVAAZwtqL4RIinPCHb2LijW11blxG5Cbc5nRpFmslIHtiXCIndTLdPktdpdg490DpzddBQd4gKHfN0yr9z9/s72-c/4.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d9d4ec14df62c7c99890bfa203c7b589
db1e3ea8f3c290648ff8fa58bd2a12d6eb48ab02
ac0c3f2ae072808ed98b5fb94fc4452c9823d672b65a98da5dcd1998f910ab11
GET /img/b/R29vZ2xl/AVvXsEimICUgXP-DnzMtTm9M2LXV97XN324f5xNjYO9x39Y6ZK5V23l5TPj-COplFwsD0jP7NneiRQ9DwYKw0FFSObfiEBjyfPaaBT31Njf9sRVAAZwtqL4RIinPCHb2LijW11blxG5Cbc5nRpFmslIHtiXCIndTLdPktdpdg490DpzddBQd4gKHfN0yr9z9/s72-c/4.JPG HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7d05"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="4.JPG"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 4772
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjv-RNksCLA-VGduXHATtHpgf1-t_aC4OlHl4a0QQZG62P2u6tziuPqMo8dgskx63wFdvLeVBVQlE2eQiGaLaAINyhOo1tjkyl31EiKRSSHxM33iYkD7ULlRrEeUV5U9yyUffV6AcwLRYfrAIb0Lx3zyMW8Oahc1Vbq1zadz2uy-ov_WzVaz6y_tSeW/s72-c/7.jpg
200 OK 5.0 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjv-RNksCLA-VGduXHATtHpgf1-t_aC4OlHl4a0QQZG62P2u6tziuPqMo8dgskx63wFdvLeVBVQlE2eQiGaLaAINyhOo1tjkyl31EiKRSSHxM33iYkD7ULlRrEeUV5U9yyUffV6AcwLRYfrAIb0Lx3zyMW8Oahc1Vbq1zadz2uy-ov_WzVaz6y_tSeW/s72-c/7.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2d235316ca4035babc06e6282bbec4f7
4191b1cd41258aa6460e15028e98db2bd6570690
a35e955a8acd9c077d0804ba0e6f613ad6cc95206fcb6a2d62ca201e4bd26147
GET /img/b/R29vZ2xl/AVvXsEjv-RNksCLA-VGduXHATtHpgf1-t_aC4OlHl4a0QQZG62P2u6tziuPqMo8dgskx63wFdvLeVBVQlE2eQiGaLaAINyhOo1tjkyl31EiKRSSHxM33iYkD7ULlRrEeUV5U9yyUffV6AcwLRYfrAIb0Lx3zyMW8Oahc1Vbq1zadz2uy-ov_WzVaz6y_tSeW/s72-c/7.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7920"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="7.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 5012
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjj3lPCpDFMgCVFYMMpwfvekHWnR9GSD4CVRxyAEvmR_hwbGh0lolm3bZT6CXgdzA-v1HPQHy76IKdy403xYk5xYhbZRCiDNBnD203sU1kKfUoFOhljOfyORtfPiED5qaz-7_fMlLnwrSogE8-6_hyM4aHPXhrTpGfuMrmcTsPijOy5NlnmOc-JJvEp/s72-c/WZ8A9469-Recovered.jpg
200 OK 4.1 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjj3lPCpDFMgCVFYMMpwfvekHWnR9GSD4CVRxyAEvmR_hwbGh0lolm3bZT6CXgdzA-v1HPQHy76IKdy403xYk5xYhbZRCiDNBnD203sU1kKfUoFOhljOfyORtfPiED5qaz-7_fMlLnwrSogE8-6_hyM4aHPXhrTpGfuMrmcTsPijOy5NlnmOc-JJvEp/s72-c/WZ8A9469-Recovered.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 82fea493277a10d8d8d20d5d008f0831
bcad0425a831dc3f3c9d5db0fa5dee48fb0c2a9d
4f578e568be96b77b58a490c3aea68479c43a0d7078fb66ec1d11b50bbf3715b
GET /img/b/R29vZ2xl/AVvXsEjj3lPCpDFMgCVFYMMpwfvekHWnR9GSD4CVRxyAEvmR_hwbGh0lolm3bZT6CXgdzA-v1HPQHy76IKdy403xYk5xYhbZRCiDNBnD203sU1kKfUoFOhljOfyORtfPiED5qaz-7_fMlLnwrSogE8-6_hyM4aHPXhrTpGfuMrmcTsPijOy5NlnmOc-JJvEp/s72-c/WZ8A9469-Recovered.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7d09"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="WZ8A9469-Recovered.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 4075
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEtII5M7Si4YRk7Q9-_Ec7H2NrlEHXTrAPVjaH-K3oxlXLlazSO_JnbCiLRA242z50jbmWjIBg5bFBzziyp86uQkww-HO-OY5NVe1VuczbRQFYqYnhRXHDLoxb6LMO07G6pJ7FPkextL7aIbt8jR7BVKPx4UAoWTpisIiW4BkIvcSAmJ-ZYsqrbHMR/s72-c/1HD.jpg
200 OK 5.2 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEtII5M7Si4YRk7Q9-_Ec7H2NrlEHXTrAPVjaH-K3oxlXLlazSO_JnbCiLRA242z50jbmWjIBg5bFBzziyp86uQkww-HO-OY5NVe1VuczbRQFYqYnhRXHDLoxb6LMO07G6pJ7FPkextL7aIbt8jR7BVKPx4UAoWTpisIiW4BkIvcSAmJ-ZYsqrbHMR/s72-c/1HD.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 98d530ccf7321e77d6b2458d09c9e825
5ec3faa4a42b9535b96d962537f034fed3f0955d
39650c6923f74f7b1fc393d75223871e13901b623f22ce880280b34213bca56e
GET /img/b/R29vZ2xl/AVvXsEhEtII5M7Si4YRk7Q9-_Ec7H2NrlEHXTrAPVjaH-K3oxlXLlazSO_JnbCiLRA242z50jbmWjIBg5bFBzziyp86uQkww-HO-OY5NVe1VuczbRQFYqYnhRXHDLoxb6LMO07G6pJ7FPkextL7aIbt8jR7BVKPx4UAoWTpisIiW4BkIvcSAmJ-ZYsqrbHMR/s72-c/1HD.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7867"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1HD.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 5186
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/bvyMnG2PuRq.css?_nc_x=Ij3Wp8lg5Kz
200 OK 3.9 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/bvyMnG2PuRq.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (3040)
Hash 2cf41794fe048a5af6961438ebed12ff
fc17dbad34e10271759351eb9b3f85b06fe3a53a
18ffb1c388bcc706f5b7d62d21f0e5b44882197f5c7407ea0d6866619681202e
GET /rsrc.php/v3/yb/l/0,cross/bvyMnG2PuRq.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 04 Dec 2023 18:37:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: LPQXlP4Eilr2lhQ46+0S/w==
x-fb-debug: 82mHtrJit1tNTal3TGbanD91Jy0vww1exB1GfCUfdZrEuKDNTO+8sunSBPLjH0GTRIpUJ3LpZlPP4oblR/cylQ==
priority: u=3,i
content-length: 3869
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
200 OK 830 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (724)
Hash d63a02ce87c07ffcfa869fef7fc5f233
cae745fef84088abe3525bb77f75c55cd1d4cc2c
bf9d4d71541a0a1f31b10be351add847ee935da6de355756314c8ca96512444d
GET /rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 24 Nov 2023 01:47:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 1joCzofAf/z6hp/vf8XyMw==
x-fb-debug: QpWw9J1em+FO9UhctOYannI4HPxGhguqgLak5z4EHlMhF3JtqOs+cM96vWYlAQuNg8MnUAR9or2E5B8yeWHoZw==
priority: u=3,i
content-length: 830
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yX/l/0,cross/Z_UF7SZiaeh.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yX/l/0,cross/Z_UF7SZiaeh.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash 9a4a913e3d53a081c665a94ee6ba96a5
344343288f6508007f822f5892befb6f977f7267
93a3c3c302193c6254e85a0661ff275bb5969c6f7e6e499cb25d5080c8a8bea9
GET /rsrc.php/v3/yX/l/0,cross/Z_UF7SZiaeh.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 04 Dec 2023 18:37:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: mkqRPj1ToIHGZalO5rqWpQ==
x-fb-debug: jxTuxy2VNQgrSuZJ9PoAqLAd8TUIaTqPUGNh8Adx4+uZ6trIxM+Mv13CHi/RKjifQ4bZ/h4/W2CPQJFTrrOO4A==
priority: u=3,i
content-length: 5088
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yO/l/0,cross/BDREYxwOoE8.css?_nc_x=Ij3Wp8lg5Kz
200 OK 2.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yO/l/0,cross/BDREYxwOoE8.css?_nc_x=Ij3Wp8lg5Kz
IP
File type assembler source, ASCII text, with very long lines (2642)
Hash 4318b21a00fad389ef17d57df4f661ff
b3659603c31c406f54c6f755705ac9b801e49f54
95620e73193229f9126fd0e1a6eb3c9060a56f90f040802d0928749c9c2fe95f
GET /rsrc.php/v3/yO/l/0,cross/BDREYxwOoE8.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 28 Nov 2023 16:03:46 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: QxiyGgD604nvF9V99PZh/w==
x-fb-debug: 2iwqpWxwYT+WBAHCVAA6hweLTUgg4UtqAw6/KIBVAK1CIdVvl5y+njPpjObpbREJ/ezdH1P9xt/nPRWmqMw6kA==
content-length: 2617
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ya/l/0,cross/GRbco9cT0f5.css?_nc_x=Ij3Wp8lg5Kz
200 OK 3.9 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ya/l/0,cross/GRbco9cT0f5.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (10262)
Hash 98847f9951c42b7209b2e763cab3e061
33f54d64538b69d67b80c04da93f0a9244e75eb8
f4c3dac3e783454aaccdf4b633ea64aab892de593e08c67463bb6fa66c1fe3bf
GET /rsrc.php/v3/ya/l/0,cross/GRbco9cT0f5.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 02 Dec 2023 16:27:24 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: mIR/mVHEK3IJsudjyrPgYQ==
x-fb-debug: wKe4OkpwOR0F9WgnYGJypVJxS0xw0IpCQJW1FxXgyAlsVOAY7YmOv78FAaT9xsvC6C+Q+BczE32UoDtL+Oa2gA==
priority: u=3,i
content-length: 3927
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRIMN7oj12DpulNUqTdGBVFSkzxwR9Z8QrGYKDzvTKC_wvAMYRp5JhjhI3VARTfG_prQfGdRdTjtUYyannjLoKbBFfitPQUDwlXd6pFIeFqYNQGtJJ_eC-OGSrky_MVGibOjLDQLN3oSWYEhXCrDB9-fm7pmUyJnCBLVP1gcXxb8fsH_MsGC4xGVoF/s72-c/1A.JPG
200 OK 4.1 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRIMN7oj12DpulNUqTdGBVFSkzxwR9Z8QrGYKDzvTKC_wvAMYRp5JhjhI3VARTfG_prQfGdRdTjtUYyannjLoKbBFfitPQUDwlXd6pFIeFqYNQGtJJ_eC-OGSrky_MVGibOjLDQLN3oSWYEhXCrDB9-fm7pmUyJnCBLVP1gcXxb8fsH_MsGC4xGVoF/s72-c/1A.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 88ed2ae24935f328f7f4f5aca84daa6c
6ddc168033ebf947c11cf2804725d1f4f55e02c5
024efa566c48db665a481b06945d4427bd4b3833d4652fc573f20f56a9f13a91
GET /img/b/R29vZ2xl/AVvXsEgRIMN7oj12DpulNUqTdGBVFSkzxwR9Z8QrGYKDzvTKC_wvAMYRp5JhjhI3VARTfG_prQfGdRdTjtUYyannjLoKbBFfitPQUDwlXd6pFIeFqYNQGtJJ_eC-OGSrky_MVGibOjLDQLN3oSWYEhXCrDB9-fm7pmUyJnCBLVP1gcXxb8fsH_MsGC4xGVoF/s72-c/1A.JPG HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v785c"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1A.JPG"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 4123
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDHT1phcENfgyRJwwgucFujV7Rm4fOl3eDGScYr1gGNWQT3hNllx8KKwAtQMCcXvCDUyNx1QC3AR0W_Tib4gx22CAAjVG8LvZgWegsGmA1a0rYEPBfVqM34xsprK9EofKu-XEFzpDAQu2xt5Eueg22vkRpw2HL3SKCEsMaRyX0gRQYsffTo1CvoP_Z/s16000/1.jpg
200 OK 78 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDHT1phcENfgyRJwwgucFujV7Rm4fOl3eDGScYr1gGNWQT3hNllx8KKwAtQMCcXvCDUyNx1QC3AR0W_Tib4gx22CAAjVG8LvZgWegsGmA1a0rYEPBfVqM34xsprK9EofKu-XEFzpDAQu2xt5Eueg22vkRpw2HL3SKCEsMaRyX0gRQYsffTo1CvoP_Z/s16000/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x434, components 3\012- data
Hash 9b7df68ee3836496199832b7cf86f472
cd93f5654b44826c50eb6ccc8a3e90a049e716d8
6233f67362fd81d1ccc327d35632417f90886d028212130a539e33cd8b9182d5
GET /img/b/R29vZ2xl/AVvXsEhDHT1phcENfgyRJwwgucFujV7Rm4fOl3eDGScYr1gGNWQT3hNllx8KKwAtQMCcXvCDUyNx1QC3AR0W_Tib4gx22CAAjVG8LvZgWegsGmA1a0rYEPBfVqM34xsprK9EofKu-XEFzpDAQu2xt5Eueg22vkRpw2HL3SKCEsMaRyX0gRQYsffTo1CvoP_Z/s16000/1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7d69"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 78412
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y3/r/AvLFGBZGQ2z.js?_nc_x=Ij3Wp8lg5Kz
200 OK 84 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y3/r/AvLFGBZGQ2z.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18622)
Hash 9936d44f15182eb554d8d11b5da3e1a6
625685f0cdef4e3e8912a8b9be310f38907b0203
75bd2f3ef904a6c5513a57e2d19a7871a29fef838ae0b3764fcf5d4771e1e8ed
GET /rsrc.php/v3/y3/r/AvLFGBZGQ2z.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 04 Dec 2023 14:40:05 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: mTbUTxUYLrVU2NEbXaPhpg==
x-fb-debug: SrLUdBkSbwqDclxqnzBl+S+v59WaS30IlV5sG14hHzDdCLHgCIm9noL4p1LEj/Ey2SDugAaF4v99sYhXsjIxWg==
content-length: 84312
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5542)
Hash 1ad15afc034f310427c81b0759603a2b
e5efd1d029dccf5fa8128c84aadb6544a4ab60e0
fedf63f655f9eef24c517c3d6762fb07b142213ba623d4a0b06614fb5d9754bd
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 23 Nov 2023 08:34:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: GtFa/ANPMQQnyBsHWWA6Kw==
x-fb-debug: w9vtT6gvtAT+QIVLTIGEoTFRfQK+3n5dIEOZmlBMSGa3vjdodhS91iBj0GCmCWOrZfclOmcw5A8PdlBuNgA/sw==
priority: u=3,i
content-length: 12334
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (8741)
Hash c92ef94e30a2dd9473fd9fe533472b73
97049e47de026939c75a885df9e8bb0fb56515ba
f2981c7109e60cf9f5a9e846a25800dbec20a923db028f310b6feb79415650bb
GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 24 Nov 2023 08:19:45 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: yS75TjCi3ZRz/Z/lM0crcw==
x-fb-debug: AMSMwPjMhG1K+FgvhsOAUgBSuSwPaFs2nGKszmbnRCIAyVbCkJxpBnNtKHBCQ2xqklcsclnK1QOJML1p2Hsb0Q==
content-length: 16232
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEpO4/y_/l/en_US/sdLyto6-v_-.js?_nc_x=Ij3Wp8lg5Kz
200 OK 23 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEpO4/y_/l/en_US/sdLyto6-v_-.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (42048)
Hash 9f10283214e5d562030ceb63c4eb6a0f
50f6715b47ba90e71d8b0c44e7a2ede6cce9a5f4
3fd68dacfae75df4bd53de8a652e5a1863461c9223b7e7593d8a561c5baef69e
GET /rsrc.php/v3iEpO4/y_/l/en_US/sdLyto6-v_-.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 03 Dec 2023 15:46:52 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: nxAoMhTl1WIDDOtjxOtqDw==
x-fb-debug: VLv3FP5hjzqsIwZN3P2zr57+c9x1Lzc9sVuMZIJz+oquiPpbrH5qqdB2v6zu1fGVMlrETHuXyV9Zys3c6unuEQ==
content-length: 23366
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yH/r/att8vh4fKZW.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/r/att8vh4fKZW.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash 3eec5e9a11ba7da3a0f8cd0af8b4bdcb
462922ace2e24121fb02f42966abb8004b24c98c
92e829ebf854a5a759b0f718ea0f31b4870e1dbbd7f09e8c2e1cac0b21e6d69c
GET /rsrc.php/v3/yH/r/att8vh4fKZW.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 30 Nov 2023 16:10:58 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: PuxemhG6faOg+M0K+LS9yw==
x-fb-debug: TcjEsQTRTFYDX8vKzAd2DsyQtOWOyApwB7jIMVirGVV2qvg8raSDpsv52sRJEeO20ZyQv6gYKOuOrwYoCFbkcA==
content-length: 1847
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3BsLdjKeYfw0DgrA2qbJ7hP_TzkEvXgo0AS4LWgdTr5EjP7uE-evSt7AQPsEPwHk0KhMWuVfV5tnbZZrPu1nZCN29ll1iVrZt7MZXbZKTO_Jo=s0-d
200 OK 21 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3BsLdjKeYfw0DgrA2qbJ7hP_TzkEvXgo0AS4LWgdTr5EjP7uE-evSt7AQPsEPwHk0KhMWuVfV5tnbZZrPu1nZCN29ll1iVrZt7MZXbZKTO_Jo=s0-d
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 728x90, components 3\012- data
Hash 97b23370b1a566917a3c51a894825ede
8d4981b7bc8b6ba759fc1acb5bfa30811c36901d
5030adeeb87bbc448c3d1bf4d20a6e55726bc8e905304913fe9d996daed277f2
GET /blogger_img_proxy/ANbyha3BsLdjKeYfw0DgrA2qbJ7hP_TzkEvXgo0AS4LWgdTr5EjP7uE-evSt7AQPsEPwHk0KhMWuVfV5tnbZZrPu1nZCN29ll1iVrZt7MZXbZKTO_Jo=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Mon, 05 Dec 2022 22:12:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:47 GMT
server: fife
content-length: 20559
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBON0RXs0qca4pnMDIt1ebVwqUDxAk30W5WPPfp7vMG7hg44QUk0Pq9fZyaos3DIx1JXqu8ucUqTnWa_WE96r_xz1zg5khKSZKxnazSoNbt797iMvlvoX5YiQ2ZtU9QUI4dO6rLW7UkpCiyEmAKtv9jlSgF7O_PnQDzNSsVCPP3Eqkkr1WA0UXetOv/s72-c/1.jpg
200 OK 4.5 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBON0RXs0qca4pnMDIt1ebVwqUDxAk30W5WPPfp7vMG7hg44QUk0Pq9fZyaos3DIx1JXqu8ucUqTnWa_WE96r_xz1zg5khKSZKxnazSoNbt797iMvlvoX5YiQ2ZtU9QUI4dO6rLW7UkpCiyEmAKtv9jlSgF7O_PnQDzNSsVCPP3Eqkkr1WA0UXetOv/s72-c/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 154d20f18071763d7f12fdb10a7e7b36
74d77adac202930aacb1e9b94d8037003c4fb5a8
03f122baadde24783ff5d6402ee5b509eadf10365624f250c2fa70165c042c72
GET /img/b/R29vZ2xl/AVvXsEhBON0RXs0qca4pnMDIt1ebVwqUDxAk30W5WPPfp7vMG7hg44QUk0Pq9fZyaos3DIx1JXqu8ucUqTnWa_WE96r_xz1zg5khKSZKxnazSoNbt797iMvlvoX5YiQ2ZtU9QUI4dO6rLW7UkpCiyEmAKtv9jlSgF7O_PnQDzNSsVCPP3Eqkkr1WA0UXetOv/s72-c/1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7917"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 4466
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yh/r/6jPfy6C7QvZ.js?_nc_x=Ij3Wp8lg5Kz
200 OK 5.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yh/r/6jPfy6C7QvZ.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4488)
Hash 87945aa884ff4e98bc22c8b0989f0321
0cd322ee2998f279c9ab23c6ca59f04babf75fd8
691fc50a21c0f5d8aaa059171a7bb3b24fab06907740822595a02d1f6e3374f2
GET /rsrc.php/v3/yh/r/6jPfy6C7QvZ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 04 Dec 2023 16:04:27 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: h5RaqIT/Tpi8IsiwmJ8DIQ==
x-fb-debug: c5+96JaQQzG029EHeC3l4nO0EXgL1yT+ybXN0FMYxkAD3ZTFqd+AGx7rmnHwE3VtH0246+9COo0ByOAqOuaM+Q==
priority: u=3,i
content-length: 5646
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yz/r/lYejkzyV906.js?_nc_x=Ij3Wp8lg5Kz
200 OK 387 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yz/r/lYejkzyV906.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (704)
Hash 9da384d66f2d9936747d501836c4d188
f5f9590c061a3671074c91dde669f216961a4ed6
ba3450d149a56fe56034a67c51445ec1263065da39c31df73e02fd37d5abbb58
GET /rsrc.php/v3/yz/r/lYejkzyV906.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 27 Nov 2023 22:16:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: naOE1m8tmTZ0fVAYNsTRiA==
x-fb-debug: ZGbnuOG2mmZ+5/S8Mm2UVLX3OFrNvNga9lWudFIx2wfmH9afX6W1w8iCqSGrYP9+Suma99ShcWwpd532aP6xTg==
content-length: 387
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:46 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yX/r/JYOpIVwZVr3.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yX/r/JYOpIVwZVr3.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4057)
Hash 72ce84f8c50139151a20bf5471e26955
ddb1cf4f30d5935149c5eb1cd2ab799002bd9c73
abee72daf709c744bfa59f68193be9899d5a80eb72874965dfa3ec373c861973
GET /rsrc.php/v3/yX/r/JYOpIVwZVr3.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 29 Nov 2023 18:30:32 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: cs6E+MUBORUaIL9UceJpVQ==
x-fb-debug: WmQy9SeqgqpcDaPAdpqCiB+fYfWiFzXc8056BnS4Iq/uAwV8S6zIv6ep7ZzIufWJGGbdZ7n7UAKdmZ3F8qK17A==
content-length: 7183
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yq/r/6pd4iTcqYl_.js?_nc_x=Ij3Wp8lg5Kz
200 OK 5.0 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yq/r/6pd4iTcqYl_.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (10494)
Hash 8d2072d6624b51be56303ac9b3ff2e32
dcdfacb3375e65e9e8fb2e6888820b9a777b6e61
24aee0833249ea9efc50731ab81924cea2a1f6798698b7f2e294067bbdc3a0a3
GET /rsrc.php/v3/yq/r/6pd4iTcqYl_.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 30 Nov 2023 16:16:23 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: jSBy1mJLUb5WMDrJs/8uMg==
x-fb-debug: BqzfIE5Vse6OtQu13/PK63ViEdqShW4aJUmlpVYC1aeC+MJILZiCx44YBf8EeduMIxFkzNA3KuIEPnZI7WxRbA==
priority: u=3,i
content-length: 4980
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
200 OK 8.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (2905)
Hash 69e486cc855b05e1ef83518e57af55de
44f27786a30398501e9e4925004a15804fb945e9
f468a9ac1baf337dee981e479d9db4d1c6239ff4a0feea34854383aa9c76c345
GET /rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 26 Nov 2023 15:44:55 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: aeSGzIVbBeHvg1GOV69V3g==
x-fb-debug: V3dwefqzpvisLQKpDMAGFXZOEeBNAR2QN6PLvZ5+WgSap9w1Fj8FIx3ARQBBTQyuJlvHD05VL7Ne4RIxCpVIZg==
content-length: 8322
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yd/r/TOyyM9GPMph.js?_nc_x=Ij3Wp8lg5Kz
200 OK 8.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yd/r/TOyyM9GPMph.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (9885)
Hash bf5c1c27b38359befb58494c5374845d
89a0d1a2d793ce10bf04866f22621e1416ca83ec
840347555e38015cb8f48531f7ff0d9a964f1b1e9f91b5a69695e39ba9604d03
GET /rsrc.php/v3/yd/r/TOyyM9GPMph.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 02 Dec 2023 23:44:56 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: v1wcJ7ODWb77WElMU3SEXQ==
x-fb-debug: 448pxYUqr/ErCHMa8DrzJ/bptYsekj1VBS2BoF9Qt6mbP3tHZBU9hpZFatDl5Z1+yDCx41JyV+PKaUf6jYhZzA==
content-length: 8696
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
200 OK 293 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (327)
Hash 2f913d812811ef7e6fca30334c5972e2
d17caaa167443dc08696c672380f237e0db3fb02
ee8918a2f5d163099104b70f79065abc8fd309e69add57170546f2706956eef8
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 25 Nov 2023 05:06:59 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: L5E9gSgR735vyjAzTFly4g==
x-fb-debug: UNKDg3pOtoZiLNC9ZFdPEC0IzcyYd4pN9+ozvo95ytG4xEKwG4njnmILj6IxSuOs16T8qV80Tosyqodep0u7Og==
content-length: 293
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yD/r/u-BBUt81dFY.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yD/r/u-BBUt81dFY.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (15336)
Hash 8320dc1a97bbc7584dad18f7b64d90cd
0e5eca39be643c73100c5201f1a6bfb0a1fc6a05
24ecf9297145af623a0036898f65f7447bed2aa77f43e2010e33564ec9bdd169
GET /rsrc.php/v3/yD/r/u-BBUt81dFY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 01 Dec 2023 02:03:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: gyDcGpe7x1hNrRj3tk2QzQ==
x-fb-debug: yFg78M4jEOtHWjQh3B9bZbLR6uZQSWtGiq96T4SPDBOsZWTxnZS9+BiRNANOQXFS5a2vdqf2TyeY3XkM8qU7iQ==
priority: u=3,i
content-length: 16218
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1491)
Hash b95ec91a00eb9acc4ca4e48a770f98f5
a704edf62ce2d8a1508be31eb6c41aa2c1955a7e
b3624c76af91730fbcd365fdd8936512f4ea21a7dc1211cd12758e288821dd38
GET /rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: uV7JGgDrmsxMpOSKdw+Y9Q==
x-fb-debug: 2oc4EHv+IQ9vADmut0kRmYAxxA4rdDPIvYyzies5cAScL9ncVkqy/4xNB0GAqh1k2uYx2ohycF/k+nxJscFKQQ==
priority: u=3,i
content-length: 1243
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yJ/r/wXhbxYJbfst.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yJ/r/wXhbxYJbfst.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4643)
Hash 040c1d14747cd88a6e9bbab5a05345d3
482b865aba23d2c2a39aa015b4a7240fd76f2c7b
fb392ce1843dea65ec0de94fe7efbb82d66a359f0cd517033f5591e43cfb8bd8
GET /rsrc.php/v3/yJ/r/wXhbxYJbfst.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 01 Dec 2023 01:59:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: BAwdFHR82Ipum7q1oFNF0w==
x-fb-debug: l6Jxx7bpHFZN0jTTV4ZUJp3tY+CIioV683hrBSjXJJDkMAabiWcRwPJBM1JNUV8p4k06yvvQcYjF61tV0yPXlg==
content-length: 7826
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz
200 OK 6.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5962)
Hash 589508d468f2833fd5fd0d21e058da93
341dad237c22e7a0bcc2facdd9324f34636bf3bf
78f0d9e15af347a798e9bd5b7a677da0d72ca6c2c91b7c4d9d53a940420f791c
GET /rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 24 Nov 2023 23:20:46 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: WJUI1Gjygz/V/Q0h4Fjakw==
x-fb-debug: s/dR9kmY8II4x7jcc5FK5XXm23zVXGOPu46VJuZ2ZAChZQHEl5aDBaqKvPUJLAPQc93m6Iyeal+yFrCEA8c5sA==
content-length: 6710
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 22:12:47 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ws.sharethis.com/secure5x/index.html
200 OK 4.1 kB URL HTTP/2 ws.sharethis.com/secure5x/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (452)
Hash d359b835f361ce395cf1e1d23d6100f4
88013b75781073cf0d0103de6aaf32dd1b91a135
a8a78f8e2ee2c683adb5576b1f884d86d1e3e565a70dc4cc09d3b2b5567dcab2
GET /secure5x/index.html HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 4080
content-encoding: gzip
last-modified: Tue, 18 Oct 2022 21:20:21 GMT
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
date: Sun, 04 Dec 2022 17:26:11 GMT
etag: W/"634f1895-390f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _-qaqEehlednRt3TzUtFKK_fRLorhEDGnfvHx6c-CSJx30QMDTG5xw==
age: 17198
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ws.sharethis.com/secure5x/js/stcommon.1f60705adac788a51a8240cf535237b0.js
200 OK 5.6 kB URL HTTP/2 ws.sharethis.com/secure5x/js/stcommon.1f60705adac788a51a8240cf535237b0.js
IP
File type C source, ASCII text, with very long lines (16630), with no line terminators
Hash 94b39eb0a8fb0b06a11ad4d75b2e74b9
5d9f3beab6794398f43e43625b651cb16f6514ed
db64545fc1dedef33184fb39df6e927e83fb783555622cafe426dc83c87e17c1
GET /secure5x/js/stcommon.1f60705adac788a51a8240cf535237b0.js HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ws.sharethis.com/secure5x/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 5630
cache-control: max-age=31536000
content-encoding: gzip
date: Thu, 25 Aug 2022 02:51:08 GMT
etag: W/"62bdf287-40f6"
expires: Fri, 25 Aug 2023 02:51:08 GMT
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5czz94JhnynHGPlTQ7jzGFCgFIUuxQpZlixgGgEMOGb2NM4bPUmNPQ==
age: 8796102
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
i.imgur.com/VDHN4og.png
200 OK 0 B IP
GET /VDHN4og.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Jul 2021 12:53:02 GMT
etag: "37144f9d83cdf67f37588079045e7312"
x-amz-storage-class: STANDARD_IA
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Sun, 04 Dec 2022 22:12:43 GMT
age: 2898282
x-served-by: cache-iad-kcgs7200056-IAD, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 223, 1
x-timer: S1670191963.496323,VS0,VE2
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 141528
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb3PFa4iffwh2g-sdeeT2grdap-xXytX6hxujHy_SmyEeulHy89c65SBpizcDHk0STxMbKpVjf2q8ZNgphfI8Sh8n_gmyvS4BCnHN_fn-9wTdAorAAm0DJY6mMRoK88arJmJhfr3BWxx0i6AGx6jPwGEZfznhrYdiHzrr_UFZ1V3cjiM15p8zAuDjO/s16000/2.png
200 OK 0 B URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb3PFa4iffwh2g-sdeeT2grdap-xXytX6hxujHy_SmyEeulHy89c65SBpizcDHk0STxMbKpVjf2q8ZNgphfI8Sh8n_gmyvS4BCnHN_fn-9wTdAorAAm0DJY6mMRoK88arJmJhfr3BWxx0i6AGx6jPwGEZfznhrYdiHzrr_UFZ1V3cjiM15p8zAuDjO/s16000/2.png
IP
GET /img/b/R29vZ2xl/AVvXsEgb3PFa4iffwh2g-sdeeT2grdap-xXytX6hxujHy_SmyEeulHy89c65SBpizcDHk0STxMbKpVjf2q8ZNgphfI8Sh8n_gmyvS4BCnHN_fn-9wTdAorAAm0DJY6mMRoK88arJmJhfr3BWxx0i6AGx6jPwGEZfznhrYdiHzrr_UFZ1V3cjiM15p8zAuDjO/s16000/2.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7ced"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 202375
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fdoanhnhandoisong&width=336&height=500&colorscheme=light&show_faces=true&border_color&stream=true&header=false&appId=123805747634945
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fdoanhnhandoisong&width=336&height=500&colorscheme=light&show_faces=true&border_color&stream=true&header=false&appId=123805747634945
IP
GET /plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2Fdoanhnhandoisong&width=336&height=500&colorscheme=light&show_faces=true&border_color&stream=true&header=false&appId=123805747634945 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":3600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}],"group":"network-errors"}
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
nel: {"report_to":"network-errors","max_age":3600,"failure_fraction":0.01}
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 2GaEJ4Cq8LjPJ9TI5F4i60Ic92FKvUBk3SuPOV0j7uo8YVICU3asQFx3RWr7Zcq/3jeOD6FGXO0X32g0G/S2Jw==
date: Sun, 04 Dec 2022 22:12:46 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdA240-NBGDEhpIwNQLlVghFU0Js5GvCyQpPIQy6kjQlEzBkr9oBK7D8-Rv5lh4EJn5VTQX4P_PZhc2y0yHBpw6V0x2gY_lqmKxpGgWSfw9UOhELHhkGZppz__SA6le9znRQGVlp_skPCtTFdwUvINKww8vn6EIq6mZjmd8nnY62k5Q5e-FmsVJ5u-/s16000/1.png
200 OK 0 B URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdA240-NBGDEhpIwNQLlVghFU0Js5GvCyQpPIQy6kjQlEzBkr9oBK7D8-Rv5lh4EJn5VTQX4P_PZhc2y0yHBpw6V0x2gY_lqmKxpGgWSfw9UOhELHhkGZppz__SA6le9znRQGVlp_skPCtTFdwUvINKww8vn6EIq6mZjmd8nnY62k5Q5e-FmsVJ5u-/s16000/1.png
IP
GET /img/b/R29vZ2xl/AVvXsEjdA240-NBGDEhpIwNQLlVghFU0Js5GvCyQpPIQy6kjQlEzBkr9oBK7D8-Rv5lh4EJn5VTQX4P_PZhc2y0yHBpw6V0x2gY_lqmKxpGgWSfw9UOhELHhkGZppz__SA6le9znRQGVlp_skPCtTFdwUvINKww8vn6EIq6mZjmd8nnY62k5Q5e-FmsVJ5u-/s16000/1.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7cec"
expires: Mon, 05 Dec 2022 22:12:47 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:47 GMT
server: fife
content-length: 351010
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5lS0efwJTRT9wQ6Gr9RZTowMDsJMjmxD5u78aP9_wOZeCiGYXEFw1gdT7XiH_eqh9WzzosgX9gXgNCLHr_VcqtvPljSL4jFh7L_o2RJ3YXLAAU3Czq3jvydzZHFXgN5N42b336qesz68d1jF-AZbvRJbjXhFkkpakaBH2A41yUzUHqMZoKCcndHIK/s16000/1a.png
200 OK 0 B URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5lS0efwJTRT9wQ6Gr9RZTowMDsJMjmxD5u78aP9_wOZeCiGYXEFw1gdT7XiH_eqh9WzzosgX9gXgNCLHr_VcqtvPljSL4jFh7L_o2RJ3YXLAAU3Czq3jvydzZHFXgN5N42b336qesz68d1jF-AZbvRJbjXhFkkpakaBH2A41yUzUHqMZoKCcndHIK/s16000/1a.png
IP
GET /img/b/R29vZ2xl/AVvXsEi5lS0efwJTRT9wQ6Gr9RZTowMDsJMjmxD5u78aP9_wOZeCiGYXEFw1gdT7XiH_eqh9WzzosgX9gXgNCLHr_VcqtvPljSL4jFh7L_o2RJ3YXLAAU3Czq3jvydzZHFXgN5N42b336qesz68d1jF-AZbvRJbjXhFkkpakaBH2A41yUzUHqMZoKCcndHIK/s16000/1a.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.doanhnhandoisong.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7d70"
expires: Mon, 05 Dec 2022 22:12:46 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1a.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 22:12:46 GMT
server: fife
content-length: 345958
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ws.sharethis.com/secure5x/js/st.e96255eb8fe81c93a11306efbce27be2.js
200 OK 0 B URL HTTP/2 ws.sharethis.com/secure5x/js/st.e96255eb8fe81c93a11306efbce27be2.js
IP
GET /secure5x/js/st.e96255eb8fe81c93a11306efbce27be2.js HTTP/1.1
Host: ws.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ws.sharethis.com/secure5x/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
cache-control: max-age=31536000
content-encoding: gzip
date: Tue, 18 Oct 2022 23:15:55 GMT
etag: W/"634f1895-211a0"
expires: Wed, 18 Oct 2023 23:15:55 GMT
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0-hRh2VTmz1yRxQAzC6nCWNta5OiNM5FS3D1Lf-NEyoKJ8jWKcsHig==
age: 4057015
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
172.217.21.179
23.33.119.27
93.184.220.29
3.126.95.118
151.101.244.193
0.0.0.0