r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8824
Expires: Sat, 26 Nov 2022 17:07:26 GMT
Date: Sat, 26 Nov 2022 14:40:22 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3857
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:22 GMT
Last-Modified: Sat, 26 Nov 2022 13:36:05 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 14:19:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1269
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2977
Expires: Sat, 26 Nov 2022 15:29:59 GMT
Date: Sat, 26 Nov 2022 14:40:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: IsuMCXYDS/V8a5n2p+J8OgTPT+fyjGZTsofzwikDYVhpHO5t7ZG8o0f+NH2ocrmNbsuYcAfRq70=
x-amz-request-id: N6YJ5FEYJY3VQS2K
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 13:44:15 GMT
age: 3367
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 14:40:22 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 14:11:12 GMT
cache-control: public,max-age=3600
age: 1751
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4536
Cache-Control: max-age=157324
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:22:27 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
cdn.jsdelivr.net/npm/sweetalert2@11
301 Moved Permanently 0 B URL HTTP/1.1 cdn.jsdelivr.net/npm/sweetalert2@11
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/sweetalert2@11 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://cdn.jsdelivr.net/npm/sweetalert2@11
Accept-Ranges: bytes
Date: Sat, 26 Nov 2022 14:40:23 GMT
X-Served-By: cache-bma1641-BMA
X-Cache: HIT
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css
200 OK 15 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css
IP
File type ASCII text, with very long lines (65317)
Hash eaa2e9825d0aa4108e5c61a9058f5434
2c855186ced95e99325836c2af8b9cc2e823848a
65b91a9d675a0b22b90132b403e14db1fe82496a45c2a077ddecb2452e929077
GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://via902.vn
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:23 GMT
content-type: text/css; charset=utf-8
content-length: 15248
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "620188b3-3b90"
last-modified: Mon, 07 Feb 2022 21:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8190201
expires: Thu, 16 Nov 2023 14:40:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VryHJCk5dsQ%2BuhmCWuzVGzO0XcGC9%2B3%2FKCeNFfeCobCY5bUPu%2FAoj1qJhaHH4WleHzYBxcpCWi0CyUsZt0F1n7woTVfKAb23r7A3fll%2BxoAkMKYzfR90QQ3XeoR0JiqT4TdPczZY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77036103dddeb4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.net/npm/sweetalert2@11
200 OK 18 kB URL HTTP/2 cdn.jsdelivr.net/npm/sweetalert2@11
IP
File type ASCII text, with very long lines (43295)
Hash d1c014750780316b0165f72b7c5dbdfa
f6304c0a6d279485b2729de0213500a9cbcd5b5a
bfa1a4e1470d6f6bb522befcef6c60098ecfae855c4dfe9157c5a81ebac45bc6
GET /npm/sweetalert2@11 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://via902.vn/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 11.6.14
x-jsd-version-type: version
etag: W/"fb49-+/dZCApQZmEeYYbR5fA6SnpuL68"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 26 Nov 2022 14:40:23 GMT
age: 9946
x-served-by: cache-fra-eddf8230057-FRA, cache-bma1646-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 18033
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-VNEDT5MHVY
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-VNEDT5MHVY
IP
File type ASCII text, with very long lines (21484)
Hash bcbdd4d16377c7c87608d598fefe9a06
eb6d6f3f24a0caef290322d809bbe4c98c713637
4a00884a011e060933dde5b6d10d50e0595612e40022d252f2b24a534f0d478a
GET /gtag/js?id=G-VNEDT5MHVY HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 14:40:23 GMT
expires: Sat, 26 Nov 2022 14:40:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76535
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash c0f4dbf9562ebaa8db41013beb08c50b
13e036230ed5499b6458723b8fcaa14f9c6ba878
4a2d5fdb392a9a61061942285736a4d93dcc1497e713ecff218d84f717c51bf2
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 26 Nov 2022 14:40:23 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "EE4889718662F828D77185DE84794ED153FA1ED8"
Expires: Sun, 27 Nov 2022 01:00:00 GMT
Last-Modified: Sat, 26 Nov 2022 13:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2186
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77036104892fb51d-OSL
www.googletagmanager.com/gtm.js?id=GTM-PJ8VFH2
200 OK 38 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PJ8VFH2
IP
File type ASCII text, with very long lines (1921)
Hash b7ac05a73b5b2ab2d965cd438966fa23
2a7b4a5d3783066e9da1ebb990ff841d2dfdc9fd
989eff4c4df186d91c0e9f4871797c1b1c77ec2d42d89939c5f8f2bafed5430f
GET /gtm.js?id=GTM-PJ8VFH2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 26 Nov 2022 14:40:23 GMT
expires: Sat, 26 Nov 2022 14:40:23 GMT
cache-control: private, max-age=900
last-modified: Sat, 26 Nov 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37776
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e388353a642bc503beff27c23339e2b5
7849301df8cbfa3f9c019b1d4033b66e0f44c4bd
5e595e9ce96c6147c3ff79ebba0068ddb0d997237a671936cb05d9575c59a424
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
via902.vn/
200 OK 18 kB IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2122), with CRLF, LF line terminators
Hash f531857da0557342c728db30a35002ad
f59565a09f704973f8e3dc55a0fbbec7e34a33b0
a3e8d9dafb84af69d81e981275a48b8a818b5eb05042d9b4f7291009363030b2
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; path=/
Upgrade: h2
Content-Encoding: gzip
polyfill.io/v3/polyfill.min.js?features=window.scroll
200 OK 94 B URL HTTP/2 polyfill.io/v3/polyfill.min.js?features=window.scroll
IP
Hash eb8b0ba88b3acfb11ea81d5c02be9108
4b7f14cc2db25abdbe25472934b7469b2488f9d4
7237f15a97fe102c6ed13eadc0f7980da03cd06a20dfb7c7b8050e60dada617d
GET /v3/polyfill.min.js?features=window.scroll HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Sat, 19 Nov 2022 11:32:21 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Sat, 26 Nov 2022 14:40:23 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1632, PASS, fastly;desc="Edge time";dur=16
content-length: 94
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: A5/q0xpKtLCJIM0nY/cJKg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VGpgDYN3VDkVkaw6GY9p3x3Bdv0=
via902.vn/public/falcon/assets/js/config.js
200 OK 845 B URL HTTP/1.1 via902.vn/public/falcon/assets/js/config.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 5a64e10d34a1cf1ff6b7e6e27be2f3f0
886d8a431dd8d9c9df6897ea0278b8bcd43dc918
cfeb4fb9638617763a56861e314a4f91ece1444097d694d72a76e1ad516c9ac9
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/assets/js/config.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:23 GMT
Content-Type: application/javascript
Content-Length: 845
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "34d-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/public/falcon/assets/css/user-rtl.min.css
200 OK 46 B URL HTTP/1.1 via902.vn/public/falcon/assets/css/user-rtl.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash acfc0271614db3deb4956bfdbbc63e1d
4ea6ccd88e407b03cd10ed7da92269037e6c82eb
e13190e87bc3ef1e4662d5bae7d2ddc3b583cf98e27ba8e5ba7a415d9a820721
GET /public/falcon/assets/css/user-rtl.min.css HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: text/css
Content-Length: 46
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 18 Feb 2022 09:20:56 GMT
ETag: "2e-5d84766692e00"
Accept-Ranges: bytes
via902.vn/public/falcon/assets/css/user.min.css
200 OK 42 B URL HTTP/1.1 via902.vn/public/falcon/assets/css/user.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash cf6f5bfe8ef661a44a49a8f307832159
7c36517290d7608387f135a42ab2a50cd967e285
4cddc455c11aa4d8a0942ae8a78924249e9e69224a4713fde7f5e4a72f85ea76
GET /public/falcon/assets/css/user.min.css HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: text/css
Content-Length: 42
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 18 Feb 2022 09:20:56 GMT
ETag: "2a-5d84766692e00"
Accept-Ranges: bytes
via902.vn/public/cute-alert/style.css
200 OK 5.7 kB URL HTTP/1.1 via902.vn/public/cute-alert/style.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 66d4cec97bc5beba1c4fc36ae782cd6d
70b7ebcdf452ba2e2793fbdd5defc70e77518da8
cccef55ef7bf38bf8d0cf226e6e3c3bec27f9b1cc78476b6ace3d60bd93e84ce
GET /public/cute-alert/style.css HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: text/css
Content-Length: 5729
Connection: keep-alive
Upgrade: h2
Last-Modified: Sat, 07 Aug 2021 04:31:59 GMT
ETag: "1661-5c8f0a1fd6dc0"
Accept-Ranges: bytes
via902.vn/public/cute-alert/cute-alert.js
200 OK 4.2 kB URL HTTP/1.1 via902.vn/public/cute-alert/cute-alert.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash b8d086c5a30bb5e657ca34ae7738d2a2
b1fcca62de12e6a118701e7e39bc42de1e609300
09157ed9222cf4abc019f4bd7632e6883dc6f264a5969d4bc32f1e9bef98651d
Analyzer Verdict Alert fortinet Phishing
GET /public/cute-alert/cute-alert.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: application/javascript
Content-Length: 4205
Connection: keep-alive
Upgrade: h2
Last-Modified: Sat, 07 Aug 2021 04:31:59 GMT
ETag: "106d-5c8f0a1fd6dc0"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/overlayscrollbars/OverlayScrollbars.min.css
200 OK 20 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/overlayscrollbars/OverlayScrollbars.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (19782)
Hash 35f138a4df47405b346f885ffb7ecd4a
c4dea04ad659f49d14c1913fb89eb0ad6e8c34e0
049e2dc17a8284c5c1140795fd26abad33357be3ad012e71482a40c47e7d567b
GET /public/falcon/vendors/overlayscrollbars/OverlayScrollbars.min.css HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: text/css
Content-Length: 20009
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 18 Feb 2022 09:20:56 GMT
ETag: "4e29-5d84766692e00"
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11699
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 14:40:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11699
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 14:40:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11699
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 14:40:25 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11699
Expires: Sat, 26 Nov 2022 17:55:24 GMT
Date: Sat, 26 Nov 2022 14:40:25 GMT
Connection: keep-alive
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap
200 OK 4.7 kB URL HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap
IP
Hash 6307724e82a915e1249ddff041c2daae
aa04867cb3956e17c844f5efff9719aac00c2d99
c37c463a6979b0d440bc050d04acb67733fff5f7022008d2bc1d74f5cf9111d2
GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 14:40:23 GMT
date: Sat, 26 Nov 2022 14:40:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash abd79421a3c44a8df11ad2cc50083309
8665e5f3026f2c2b9505eb139c478f4d359851c3
3a66b00498fa1322730705b1c4502614b5a520ac3f884f494d65e27a5bb62c3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4366
x-amzn-requestid: ce25f5ab-0c92-431e-ae4e-618829594a74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNZFjHoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-6a3a8dff70e717011e3a0606;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 75AMMfa7oq0Y51YPEC_FEDOoNVc9cgfjg9bOSOXwikONPdhW7OG3uQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:10 GMT
age: 60735
etag: "8665e5f3026f2c2b9505eb139c478f4d359851c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 17ebe470d040a6ea8c57e9b9d4f4e828
1ac7a410cd4f3709f476c776dd5646dd982dcfa8
d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: HgiyaodE2vJx5JL8QfOiTersSAgAwq74gtsPkpHUhnQ3In2vZ-3rbQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:33:09 GMT
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
content-type: image/jpeg
age: 58036
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72e29c5-d9d3-43d5-8c71-f66a22a3f112.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72e29c5-d9d3-43d5-8c71-f66a22a3f112.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9bc7c4877bfa24d0c1bbb774cd906af1
75d9a14e98ffba5a71a6f710be721b593338ffdc
b0e1d9af095632e6d75bc7606bccfb0c1903f5173696cefb7e36c3d34a98358e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72e29c5-d9d3-43d5-8c71-f66a22a3f112.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6560
x-amzn-requestid: e8956a92-d016-41a2-99b4-631a6db3b8db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: byQzsFY3IAMF9iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63772e7d-2337148b0a824d134aaab9d7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 07:04:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nqv3cZb0_TFYs1XuLw1pCg4B1HmA87mj4S1Sjh3cgXyWd3GnweAY7w==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 05:14:37 GMT
age: 33948
etag: "75d9a14e98ffba5a71a6f710be721b593338ffdc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OJZkZ18TlSgdBWsmSroQPIcYIvBFvz5-7hu9_GravTcz6zqxKXHZrg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:43:36 GMT
age: 61009
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b1c6878914466cfece680fa7cb73502
47fac81a2dd809df5c42ca1362f71d553572d2b1
6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7cJmhEGkKqLUQUMqGuYtWBeu_1nlEUAxgTMy4ABekPJYrJP95wE6Jg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:59:05 GMT
age: 60080
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
via902.vn/public/sweetalert2/sweetalert2.js
200 OK 73 kB URL HTTP/1.1 via902.vn/public/sweetalert2/sweetalert2.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (47965)
Hash 3df9db924d6864c2ffa2aa78db93e120
e7f351116f4492bcb2683f24f2a55881fb9fbc2c
4516fbe45141e1ba87a414d5684b9af90355a4a488e66e0706f40a818d44f12e
Analyzer Verdict Alert fortinet Phishing
GET /public/sweetalert2/sweetalert2.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: application/javascript
Content-Length: 72671
Connection: keep-alive
Upgrade: h2
Last-Modified: Sat, 07 Aug 2021 04:31:59 GMT
ETag: "11bdf-5c8f0a1fd6dc0"
Accept-Ranges: bytes
via902.vn/public/sweetalert2/default.css
200 OK 31 kB URL HTTP/1.1 via902.vn/public/sweetalert2/default.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (377)
Hash 415e39b1e9fe4c4575dfec2ab6cc1aca
8dc9bef6fb207e26ac0ffe165c9033fff939b6c1
0674acdafe257bea32d5b70615a83ecb4a6fb047d1433001f2f4d5feb2d683fc
GET /public/sweetalert2/default.css HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: text/css
Content-Length: 31175
Connection: keep-alive
Upgrade: h2
Last-Modified: Sat, 07 Aug 2021 04:31:59 GMT
ETag: "79c7-5c8f0a1fd6dc0"
Accept-Ranges: bytes
via902.vn/public/falcon/assets/css/theme-rtl.min.css
200 OK 599 kB URL HTTP/1.1 via902.vn/public/falcon/assets/css/theme-rtl.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size 599 kB (598651 bytes)
Hash f7a295e25c33da51e7df0f1b0d48d6a7
90630dfea767f06cc3a866987714e72976d05c78
e3c14b124e42227d17e564eacb0536a9c46fffd22383bd75d82d415dd3c8d2fb
GET /public/falcon/assets/css/theme-rtl.min.css HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:23 GMT
Content-Type: text/css
Content-Length: 598651
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 18 Feb 2022 09:20:56 GMT
ETag: "9227b-5d84766692e00"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/popper/popper.min.js
200 OK 19 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/popper/popper.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (18954)
Hash cb7cde3d9b3f5fa6ff77ea3b4c05305d
560aff457167e0bfa14e0ec69c2dac1fa3e190e9
4dbd7cd01b766fb4ba08dea5d0949613f9ea958a4126fc2d596f8ef8de034181
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/popper/popper.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:25 GMT
Content-Type: application/javascript
Content-Length: 19043
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "4a63-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/public/falcon/assets/css/theme.min.css
200 OK 598 kB URL HTTP/1.1 via902.vn/public/falcon/assets/css/theme.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size 598 kB (598527 bytes)
Hash 090d15dc33827323c87c5a6e93a7d97d
86208803e7ac26025844438adfa40bf19880bb4c
ae12d0b4a9557c4f5ded27512c122003b7553a9d15ab4a4e770539a9dc070743
GET /public/falcon/assets/css/theme.min.css HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: text/css
Content-Length: 598527
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 18 Feb 2022 09:20:56 GMT
ETag: "921ff-5d84766692e00"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/anchorjs/anchor.min.js
200 OK 6.0 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/anchorjs/anchor.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type Unicode text, UTF-8 text, with very long lines (5676)
Hash a58f4bdbf86e8ae057af9131b5b1bcfd
f51be2f0039e8c8062255efa7a798a4f0ea41470
d16319f4f1786f685317ae84825bfff47e55c24ea59ce1b801b982271a3de964
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/anchorjs/anchor.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:25 GMT
Content-Type: application/javascript
Content-Length: 6008
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "1778-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/is/is.min.js
200 OK 13 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/is/is.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (13132)
Hash 5c9dca2a19f05dc6d7b1afa3244a8f6b
4a8519b04be003f12a833e634ba5736a6634fa19
96725eba539addee483b61331ebf23289dc26d3f34301c244b96be9f6a2822be
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/is/is.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:25 GMT
Content-Type: application/javascript
Content-Length: 13181
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "337d-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/bootstrap/bootstrap.min.js
200 OK 60 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/bootstrap/bootstrap.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (59454)
Hash 53f7f752152ec85a9b53e66e807930aa
530ca54dfdb4d3e7f496fd782d87aaf0f1696946
fe11b1647190e7b7d72e9f8d0eeb0566c668fcf1b6d41a76fa15d85796bac3e8
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/bootstrap/bootstrap.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:25 GMT
Content-Type: application/javascript
Content-Length: 59733
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "e955-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/public/js/jquery-3.6.0.js
200 OK 289 kB URL HTTP/1.1 via902.vn/public/js/jquery-3.6.0.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Size 289 kB (288580 bytes)
Hash 2849239b95f5a9a2aea3f6ed9420bb88
af32f706407ab08f800c5e697cce92466e735847
1fe2bb5390a75e5d61e72c107cab528fc3c29a837d69aab7d200e1dbb5dcd239
Analyzer Verdict Alert fortinet Phishing
GET /public/js/jquery-3.6.0.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:24 GMT
Content-Type: application/javascript
Content-Length: 288580
Connection: keep-alive
Upgrade: h2
Last-Modified: Sat, 07 Aug 2021 04:31:59 GMT
ETag: "46744-5c8f0a1fd6dc0"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/overlayscrollbars/OverlayScrollbars.min.js
200 OK 54 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/overlayscrollbars/OverlayScrollbars.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (53541)
Hash 6c76d6bbcefd02e4ba592bf9f4e8c5dd
d16bb42cc8a6dce514f0d90a9c413778d905a5d4
ee61ec65bd3bc8cc949991393cfd5aca248620bc53e8ac94f9afe44c30961c0f
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/overlayscrollbars/OverlayScrollbars.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:25 GMT
Content-Type: application/javascript
Content-Length: 53768
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "d208-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/list.js/list.min.js
200 OK 20 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/list.js/list.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (19450)
Hash d1cdff6a106c934639d63f03f0e781ef
085b67a4fb85caff9574aba1e57427645b4f4181
34456f18d306a85bece9a7462d98e6e6c2e072e5fdac64e0d70946b40d5feccf
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/list.js/list.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:26 GMT
Content-Type: application/javascript
Content-Length: 19487
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "4c1f-5d6c8d0c61900"
Accept-Ranges: bytes
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-brands-400.woff2
200 OK 104 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-brands-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 104544, version 768.256\012- data
Size 104 kB (104544 bytes)
Hash a9afdb72826cde196ddf29eb8f9d0f8f
69fc982ace0b9fdd2cfa68c6628bcaad00f407fd
29bc44694c394921d1f00271128a2e4cd8293516216e24eac07a73fa821fc1f5
GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:26 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 104544
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "620188b3-19860"
last-modified: Mon, 07 Feb 2022 21:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 20369052
expires: Thu, 16 Nov 2023 14:40:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9gByiZ6uiBg%2FV7bQGhvMjLcaqxhcPcfAscQH5nYT18L7xHQMNId63TwalGSPZVOmVCfETPY4h%2BT5wkt0REn%2F1mHHgovnStq4qcMKK56NPQo1hWtPmAhVCkGnM%2BKtd4b4mbJJUXec"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 770361160b98b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 08:32:10 GMT
expires: Thu, 23 Nov 2023 08:32:10 GMT
cache-control: public, max-age=31536000
age: 281296
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/jyFZ-zzi-dk
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/jyFZ-zzi-dk
IP
Hash 94869c87783e061efccbc5de19a58b84
ace98ae0080454ef4ff06071072f02aed74ba80c
e223906092af78944c38b78d0d188f642fb604e15fce8dc10b0e06fab3867bcc
POST /s/gts1p5/jyFZ-zzi-dk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:26 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:42:51 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 205055
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2
200 OK 5.4 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 5384, version 1.0\012- data
Hash 96b6d54684daa94742f7bfd72a981213
72c3ac29b2fcceea390d3a51c7a892efde65e4d9
4ce2c84c474fb80b33e347ae6f356796021d6fd42e88a6352fc6e9ca0b22bd63
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5384
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:35:26 GMT
expires: Thu, 23 Nov 2023 19:35:26 GMT
cache-control: public, max-age=31536000
age: 241500
last-modified: Wed, 27 Apr 2022 16:11:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:30:59 GMT
expires: Thu, 23 Nov 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 241767
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7824, version 1.0\012- data
Hash af4d371a10271dafeb343f1eace762bc
6d11d743bc3cfb169d70bc86450f18351dc1a905
60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:50:37 GMT
expires: Thu, 23 Nov 2023 19:50:37 GMT
cache-control: public, max-age=31536000
age: 240589
last-modified: Wed, 27 Apr 2022 16:52:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJnecmNE.woff2
200 OK 5.5 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJnecmNE.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 5544, version 1.0\012- data
Hash 0ed299a4bb5262e17e2145783b2c18f1
65af2a037a5ef8a8d383d518377ea1f9f6837631
cb8bdeabc838774d9808eb7c4cfcea963b57855e34f84b54797076940c8e5986
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJnecmNE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5544
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:38:00 GMT
expires: Thu, 23 Nov 2023 19:38:00 GMT
cache-control: public, max-age=31536000
age: 241346
last-modified: Wed, 27 Apr 2022 17:03:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:48:50 GMT
expires: Thu, 23 Nov 2023 21:48:50 GMT
cache-control: public, max-age=31536000
age: 233496
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 14:43:52 GMT
expires: Wed, 22 Nov 2023 14:43:52 GMT
cache-control: public, max-age=31536000
age: 345394
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Hash 3fe71527811fbfedd2c07962e1bc49e7
f63e158a0480c5d711b5e268db0e75e57d87a8a5
24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:57:58 GMT
expires: Tue, 21 Nov 2023 18:57:58 GMT
cache-control: public, max-age=31536000
age: 416548
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2
200 OK 5.5 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 5512, version 1.0\012- data
Hash 72b3ae37567ee5efdf2254b657c36ba9
3a4cf2dc2cabd33b5b2c7cef3221131520f618a0
9c15f7b06458075c69b40e79f03e62d43017ecf4c618487add407ee47e438684
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5512
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 20:56:11 GMT
expires: Thu, 23 Nov 2023 20:56:11 GMT
cache-control: public, max-age=31536000
age: 236655
last-modified: Wed, 27 Apr 2022 16:59:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2
200 OK 5.5 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 5452, version 1.0\012- data
Hash a6ff41d10fa89e7f8fec937c243d7428
334853f61ceb1fb096818740cc62d5840fbbae46
5f9d6298f5edc6d2b57a6f3a30f87f1c93c84b7aad7c5e9bf9d3a2c9384403fa
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5452
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:38:12 GMT
expires: Thu, 23 Nov 2023 19:38:12 GMT
cache-control: public, max-age=31536000
age: 241334
last-modified: Wed, 27 Apr 2022 16:10:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14040, version 1.0\012- data
Hash eadd44d829d43ddf48870c2073f1a7ca
fc04b04f37e0988001c81be96bca33c4d866450f
84197a92671b7b7c8715220cea35354699c6221113c0ff531ff087ab8a8aa9e6
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:11:28 GMT
expires: Fri, 24 Nov 2023 21:11:28 GMT
cache-control: public, max-age=31536000
age: 149338
last-modified: Mon, 15 Aug 2022 18:14:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
via902.vn/assets/storage/flags/flag_English.png
200 OK 66 kB URL HTTP/1.1 via902.vn/assets/storage/flags/flag_English.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=UK Flag,United Kingdom Flag Illustration Vector\377\341\005Yhttp://ns.adobe.com/xap/1.0/], baseline, precision 8, 509x339, components 3\012- data
Hash 5d94b281cf61dbc72c6a9a0800b5fa4a
c1b03d25e19c14748efbc74d01b871b7e7dc76d6
514da93a30cc0334f426147cb1b99d454ac7c7b1735112eece64b34272c185ea
GET /assets/storage/flags/flag_English.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:26 GMT
Content-Type: image/png
Content-Length: 66064
Connection: keep-alive
Upgrade: h2
Last-Modified: Sat, 20 Nov 2021 00:09:13 GMT
ETag: "10210-5d12d3399bc40"
Accept-Ranges: bytes
ocsp.pki.goog/s/gts1p5/jyFZ-zzi-dk
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/jyFZ-zzi-dk
IP
Hash 94869c87783e061efccbc5de19a58b84
ace98ae0080454ef4ff06071072f02aed74ba80c
e223906092af78944c38b78d0d188f642fb604e15fce8dc10b0e06fab3867bcc
POST /s/gts1p5/jyFZ-zzi-dk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:26 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
via902.vn/public/falcon/vendors/lodash/lodash.min.js
200 OK 73 kB URL HTTP/1.1 via902.vn/public/falcon/vendors/lodash/lodash.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (4143)
Hash 9becc40fb1d85d21d0ca38e2f7069511
ae854b04025db8b7f48fdd6dedf41e77eae44394
a9705dfc47c0763380d851ab1801be6f76019f6b67e40e9b873f8b4a0603f7a9
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/lodash/lodash.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:26 GMT
Content-Type: application/javascript
Content-Length: 73015
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "11d37-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/assets/storage/flags/flag_Vietnamese.png
200 OK 1.4 kB URL HTTP/1.1 via902.vn/assets/storage/flags/flag_Vietnamese.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 400 x 267, 8-bit colormap, non-interlaced\012- data
Hash bcc62c5e8de11334cc848ecd20310766
0019a6492042947f9988ebea11d78f0039c0ff1c
901efedf28cf34edab5c893f4a28798ad77c0d948076882fb21b860a438c6121
GET /assets/storage/flags/flag_Vietnamese.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:26 GMT
Content-Type: image/png
Content-Length: 1398
Connection: keep-alive
Upgrade: h2
Last-Modified: Tue, 16 Nov 2021 18:49:21 GMT
ETag: "576-5d0ec6224ee40"
Accept-Ranges: bytes
region1.google-analytics.com/g/collect?v=2&tid=G-VNEDT5MHVY>m=2oeb90&_p=806747933&cid=771724968.1669473627&ul=en-us&sr=1280x1024&_s=1&sid=1669473626&sct=1&seg=0&dl=http%3A%2F%2Fvia902.vn%2F&dt=H%E1%BB%87%20Th%E1%BB%91ng%20Mua%20Via%20%2C%20Bm%20%2C%20Page%20%2C%20Live%20Sub%20%2C%20Ph%C3%B4i%20Kh%C3%A1ng%20%7C%20VIA902.VN&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-VNEDT5MHVY>m=2oeb90&_p=806747933&cid=771724968.1669473627&ul=en-us&sr=1280x1024&_s=1&sid=1669473626&sct=1&seg=0&dl=http%3A%2F%2Fvia902.vn%2F&dt=H%E1%BB%87%20Th%E1%BB%91ng%20Mua%20Via%20%2C%20Bm%20%2C%20Page%20%2C%20Live%20Sub%20%2C%20Ph%C3%B4i%20Kh%C3%A1ng%20%7C%20VIA902.VN&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VNEDT5MHVY>m=2oeb90&_p=806747933&cid=771724968.1669473627&ul=en-us&sr=1280x1024&_s=1&sid=1669473626&sct=1&seg=0&dl=http%3A%2F%2Fvia902.vn%2F&dt=H%E1%BB%87%20Th%E1%BB%91ng%20Mua%20Via%20%2C%20Bm%20%2C%20Page%20%2C%20Live%20Sub%20%2C%20Ph%C3%B4i%20Kh%C3%A1ng%20%7C%20VIA902.VN&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://via902.vn
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://via902.vn
date: Sat, 26 Nov 2022 14:40:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
via902.vn/public/falcon/assets/img/team/3-thumb.png
200 OK 7.2 kB URL HTTP/1.1 via902.vn/public/falcon/assets/img/team/3-thumb.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 912491b50a31a570206613bc8f34eba7
d5aeaa3864493e8d99290e164f4fedf59af1acd5
51f2966e364e81801dc13d18d7af8f41b4bfa58381dbe33d9e253ba874eb0f19
GET /public/falcon/assets/img/team/3-thumb.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:27 GMT
Content-Type: image/png
Content-Length: 7246
Connection: keep-alive
Upgrade: h2
Last-Modified: Thu, 06 Oct 2022 13:33:30 GMT
ETag: "1c4e-5ea5dbd291e80"
Accept-Ranges: bytes
via902.vn/public/falcon/assets/js/theme.js
200 OK 323 kB URL HTTP/1.1 via902.vn/public/falcon/assets/js/theme.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (1004)
Size 323 kB (323069 bytes)
Hash 3f36814583477c5fd337e02f87b56bb7
4abf0082adc95acada2f53506fa6559eb0f449cc
f95b79985dca112ef7403f4e0d2cc75c85ce8532cc666f83751070638abac2e8
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/assets/js/theme.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:27 GMT
Content-Type: application/javascript
Content-Length: 323069
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "4edfd-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/assets/storage/images/favicon_G2W.png
200 OK 12 kB URL HTTP/1.1 via902.vn/assets/storage/images/favicon_G2W.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 257x199, components 3\012- data
Hash 9dbe65309a6d6316ca2c91fa7204db20
7479924c07e5451e13a4df985a003ee4ac2292a6
01bea812c3d72f0ef5904afdfc5c670f94d689597bc538f342e03ec89edb3054
GET /assets/storage/images/favicon_G2W.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:29 GMT
Content-Type: image/png
Content-Length: 12234
Connection: keep-alive
Upgrade: h2
Last-Modified: Tue, 24 May 2022 22:34:36 GMT
ETag: "2fca-5dfc98fb55700"
Accept-Ranges: bytes
via902.vn/public/falcon/vendors/fontawesome/all.min.js
200 OK 1.2 MB URL HTTP/1.1 via902.vn/public/falcon/vendors/fontawesome/all.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (65350)
Size 1.2 MB (1196706 bytes)
Hash 5e29440867fdb02a48dffded02338c31
c8bfbbfca7eb327e2e98caf637d6de05e5ee737a
812ab0e46f86b2ce98ab2425ab2224b90d0845952a1ac0d5abd734b6217e98bf
Analyzer Verdict Alert fortinet Phishing
GET /public/falcon/vendors/fontawesome/all.min.js HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:26 GMT
Content-Type: application/javascript
Content-Length: 1196706
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 30 Jan 2022 08:54:28 GMT
ETag: "1242a2-5d6c8d0c61900"
Accept-Ranges: bytes
via902.vn/ajaxs/client/loadGiftBox.php?_=1669473626485
200 OK 0 B URL HTTP/1.1 via902.vn/ajaxs/client/loadGiftBox.php?_=1669473626485
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajaxs/client/loadGiftBox.php?_=1669473626485 HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:29 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Upgrade: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 407ca8387c360d434a53812c03688310
90e74fa4928adcf8ae410f2eea7956b6ae7f687b
5690f667c20ba6c6daf71668a7c02c6d50383b585521e6f3e7a0ddcf895358d3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3395
Cache-Control: max-age=142503
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:29 GMT
Etag: "6381a1c1-1d7"
Expires: Mon, 28 Nov 2022 06:15:32 GMT
Last-Modified: Sat, 26 Nov 2022 05:18:57 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/vi_VN/sdk/xfbml.customerchat.js
200 OK 91 kB URL HTTP/2 connect.facebook.net/vi_VN/sdk/xfbml.customerchat.js
IP
File type ASCII text, with very long lines (18734)
Hash 14ec790ebeb71760bfde304e9307c5ea
3ca417ec0d9476ec6a5f0d33c4b78bbe21121f06
518de7140a31f6bebdc3af769d98749488831644e0feea72a7fe85c0c0b26b00
GET /vi_VN/sdk/xfbml.customerchat.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: b50bda9fb64db9b23ecc71806e58fc31
etag: "8a1db3c15af5e63f0ccedd7195d1e744"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 26 Nov 2022 14:43:46 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: FOx5Dr63F2C/3jBOkwfF6g==
x-fb-debug: nnfoTsCKN2qFrfwFBlVUF/s3jM8F99tZmk1/KPSEpyNRxd6N0Iff9mtBa/xVFv0kG5ah6dl0I0gbWXXgnTm9zQ==
priority: u=3,i
content-length: 91059
x-fb-trip-id: 1904183273
date: Sat, 26 Nov 2022 14:40:29 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
via902.vn/ajaxs/client/showProductCustom.php
200 OK 13 kB URL HTTP/1.1 via902.vn/ajaxs/client/showProductCustom.php
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type HTML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 63a513bff4363b602c0547be201202a1
b1bcddb786f40f6255042652cd4ab1b2d3b1cf0f
6ccb3e29ea63f04288e5bd4c647d49d835d6d64e5b6b9a01326fef8f91f52f28
Analyzer Verdict Alert fortinet Phishing
POST /ajaxs/client/showProductCustom.php HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 4
Origin: http://via902.vn
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Upgrade: h2
Content-Encoding: gzip
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-regular-400.woff2
200 OK 24 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-regular-400.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23900, version 768.256\012- data
Hash f817938f131b0cabee81e59a96f9c2a6
0cc8fd9cdd79bbba4081de567a7e25975f142819
fa79fc4f2559112ff3dd27cf5be216d9b5f88066ceef728264f5a3a1a195fc1e
GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 23900
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "620188b3-5d5c"
last-modified: Mon, 07 Feb 2022 21:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8187928
expires: Thu, 16 Nov 2023 14:40:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RFq7Mp%2BzjL2l%2F59QB9y%2FqAIF8MaQNI%2FOgzTw5LIeKiWXqxMYPAqf22GK35lv8cubR7s3gDLXS2JAO%2F5%2BV8rqDNWhyiPWMmLMGIDVRGd0QA59msVeJ4Tw%2FmkT%2B6m24Pvk%2Bs%2FocPdY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7703612d0f17b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash dcf6e8834435d0ebccbed9e0fb1e75ec
2ac7dde8006281d30bfdf60b6dadb682836cc88a
e57654e9a32db53aead0fde57a7cb9797e9f0deae339c10cdd7562f47b5f688e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2041
Cache-Control: max-age=167095
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:30 GMT
Etag: "6382071c-117"
Expires: Mon, 28 Nov 2022 13:05:25 GMT
Last-Modified: Sat, 26 Nov 2022 12:31:24 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash dcf6e8834435d0ebccbed9e0fb1e75ec
2ac7dde8006281d30bfdf60b6dadb682836cc88a
e57654e9a32db53aead0fde57a7cb9797e9f0deae339c10cdd7562f47b5f688e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2041
Cache-Control: max-age=167095
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:30 GMT
Etag: "6382071c-117"
Expires: Mon, 28 Nov 2022 13:05:25 GMT
Last-Modified: Sat, 26 Nov 2022 12:31:24 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash dcf6e8834435d0ebccbed9e0fb1e75ec
2ac7dde8006281d30bfdf60b6dadb682836cc88a
e57654e9a32db53aead0fde57a7cb9797e9f0deae339c10cdd7562f47b5f688e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3266
Cache-Control: max-age=168320
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:30 GMT
Etag: "6382071c-117"
Expires: Mon, 28 Nov 2022 13:25:50 GMT
Last-Modified: Sat, 26 Nov 2022 12:31:24 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash dcf6e8834435d0ebccbed9e0fb1e75ec
2ac7dde8006281d30bfdf60b6dadb682836cc88a
e57654e9a32db53aead0fde57a7cb9797e9f0deae339c10cdd7562f47b5f688e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2041
Cache-Control: max-age=167095
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:30 GMT
Etag: "6382071c-117"
Expires: Mon, 28 Nov 2022 13:05:25 GMT
Last-Modified: Sat, 26 Nov 2022 12:31:24 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
flagcdn.com/24x18/eu.png
200 OK 711 B IP
File type PNG image data, 24 x 18, 8-bit colormap, non-interlaced\012- data
Hash 1f614927878948f873cdfa770844a04d
93b2399283937582b73880459a8e4df6d607b838
feebe711d97272af27a7e99b1710494b00af0953912e40ee3652ff01d2cab7e6
GET /24x18/eu.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: image/png
content-length: 711
last-modified: Thu, 19 Nov 2020 12:03:05 GMT
etag: "5fb65ef9-2c7"
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4328
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tZw%2BlXHD4GvRDKtAsPpSDnFIMXLVO3VSGlg3jsvBOuWpNzCtDp3B0aevvv%2BCl4ssZc4Y1q3bcEiG52%2F5pSFMXP9P9LA3VM8Ibxa%2FSWTGW7YgQOqRuHNrppSkwuEkyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7703612d3b95b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/24x18/id.png
200 OK 506 B IP
File type PNG image data, 24 x 18, 8-bit colormap, non-interlaced\012- data
Hash f4e05ffeb18a50f36117dc2f4977c7b6
53b76a38950835f4762b8d912c71df7f7bc13ea5
cf466fdc335b87d51912c20768ccd00a0c0d1599b5c3f24e1bdc197e4d790728
GET /24x18/id.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: image/png
content-length: 506
last-modified: Thu, 19 Nov 2020 12:03:32 GMT
etag: "5fb65f14-1fa"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 1787935
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gq5FIqzfVdGX8oyA5FasqqQLM3WPi0Rf6wogSyFAUVa65wGYYtczb5Y1Ld0P9%2F4u%2BVAGWsVdF3qgq7THvmwDG2XlTwwhYnRx878vXlGngXPQn%2FhteagZ%2B%2BXjPeKcMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7703612d4ba4b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/24x18/us.png
200 OK 1.1 kB IP
File type PNG image data, 24 x 18, 8-bit colormap, non-interlaced\012- data
Hash 2ab350d1d1fa5b69214df26558fa1654
63e3b90be67a9f59caec2783d163a4288652f828
c3a33583e68983ff2b6e20eaaa679662d94664baf745c950125bf45a5deb346d
GET /24x18/us.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: image/png
content-length: 1064
last-modified: Thu, 19 Nov 2020 12:03:32 GMT
etag: "5fb65f14-428"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 1437074
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qyH%2BBW6%2BJharNApEfEPYz3e%2Fhlu7%2F%2FdLVOhVLXiWxgHSrM282wZcVsLW%2B172O9uAj6n5W66TqMkUlHNiVGAjfjAknD0rucpxk5KO1QLvrcKPuYeHnzUAqv1efJHcrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7703612d3b90b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/24x18/vn.png
200 OK 678 B IP
File type PNG image data, 24 x 18, 8-bit colormap, non-interlaced\012- data
Hash bda6d6d2eaf0ae7f2c0e6f8f3f2e9488
8fd9e1a1503689d9dd082806a0ff3323e5afda24
7bf04a81da132742c47bfc58c62d251fe759ed6b4e8754336bb29a887df0809e
GET /24x18/vn.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: image/png
content-length: 678
last-modified: Thu, 19 Nov 2020 12:03:32 GMT
etag: "5fb65f14-2a6"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 1524159
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGnHm%2BqmiywjSylEmyyCI%2F7DBYVls6VNy9b5%2BzXT0SmxYj%2Bz2O4dvBmdkZreLxZRjsY%2BBysAa4CP4%2B9%2BAiq3YGx%2Fo7W06JB1Z%2BnYaXhLjSXlfaJ74U2KcDvAVE4sgA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7703612d4bacb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash dcf6e8834435d0ebccbed9e0fb1e75ec
2ac7dde8006281d30bfdf60b6dadb682836cc88a
e57654e9a32db53aead0fde57a7cb9797e9f0deae339c10cdd7562f47b5f688e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3266
Cache-Control: max-age=168320
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:30 GMT
Etag: "6382071c-117"
Expires: Mon, 28 Nov 2022 13:25:50 GMT
Last-Modified: Sat, 26 Nov 2022 12:31:24 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
flagcdn.com/24x18/th.png
200 OK 795 B IP
File type PNG image data, 24 x 18, 8-bit colormap, non-interlaced\012- data
Hash 085ed4f1c161e2720144b4f5241fb3cc
65d0f6cc809ccf84a2bfc52ac4ee4e4c1d23fe48
10cf6cd5a6ad9673b05b88cfaed97a0580212f73c2659cf37806732621974a0c
GET /24x18/th.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: image/png
content-length: 795
last-modified: Thu, 19 Nov 2020 12:03:32 GMT
etag: "5fb65f14-31b"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 1522905
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=47GvOIYOP7hZnl%2B63r9Nfg8Gp1kTGPZANysQZH2vXD1bsqT3CFWXDiWSSStsMjTxAJUxWyI0FWg5XZQqlSXme6lR3qKM0YhfZk0NOCDHi09pTAtDo3yGHa4iZSH%2BFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7703612d6bd4b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash dcf6e8834435d0ebccbed9e0fb1e75ec
2ac7dde8006281d30bfdf60b6dadb682836cc88a
e57654e9a32db53aead0fde57a7cb9797e9f0deae339c10cdd7562f47b5f688e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3266
Cache-Control: max-age=168320
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 14:40:30 GMT
Etag: "6382071c-117"
Expires: Mon, 28 Nov 2022 13:25:50 GMT
Last-Modified: Sat, 26 Nov 2022 12:31:24 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279
flagcdn.com/24x18/ph.png
200 OK 826 B IP
File type PNG image data, 24 x 18, 8-bit colormap, non-interlaced\012- data
Hash 6fe5e712e326a5c00b41b6292f34a5ac
79b04074974d6930d1c7ff657fb8b6bcfde179ef
9255438992b52ca46cbf998e19cc7f995149066916cf72d39d69eece76b3c833
GET /24x18/ph.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: image/png
content-length: 826
last-modified: Thu, 19 Nov 2020 12:03:32 GMT
etag: "5fb65f14-33a"
access-control-allow-origin: *
cache-control: public, max-age=2678400, s-maxage=2678400
cf-cache-status: HIT
age: 1525387
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MPY4Ifoy3%2B84U9FGbu355MduGjpU4ELCfvQS5nTEOor%2BLula6lOJe5xpkZVpQ51wif771JTvqtiLhaseDkr7u7paxj06Te32W5I1MVDTdty9zhg61eahyilTA4YOiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7703612d6bdbb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
flagcdn.com/24x18/un.png
200 OK 720 B IP
File type PNG image data, 24 x 18, 8-bit colormap, non-interlaced\012- data
Hash 916c893cc684846c0234695d13f95d58
85c80094361478de23f5be92d4c2777a898e8a90
04848cf140598928bf2738fb756bc6877db7c2901c4b1f92c489b21463482c2a
GET /24x18/un.png HTTP/1.1
Host: flagcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:30 GMT
content-type: image/png
content-length: 720
last-modified: Thu, 19 Nov 2020 12:03:05 GMT
etag: "5fb65ef9-2d0"
x-content-type-options: nosniff
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AEYIYXJUgmhFc0CBsu6XnRzW5WMk3%2BIHUoFFgjZwbqV%2B%2BZtmoF0Jcxdn7znYCgl9JlFC8MlM1LtHuMp8NQW0tcjz4yPeW7n8TjQDiIqoFqyyzp3yxMiS86wCxEgnYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7703612d5bbeb52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
via902.vn/assets/storage/images/categoryWXPG.png
200 OK 17 kB URL HTTP/1.1 via902.vn/assets/storage/images/categoryWXPG.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 4aee6772d4e03012b78f5b99c97ba859
54aeaf9210da66819b10b691d7484556885c860c
3523cdd07ff4dd25aa3b7e766636ce310a49fab51e6255e29ba813fa50ba55a2
GET /assets/storage/images/categoryWXPG.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: image/png
Content-Length: 17003
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 07 Aug 2022 05:41:50 GMT
ETag: "426b-5e5a027dee380"
Accept-Ranges: bytes
via902.vn/assets/storage/images/category7HSM.png
200 OK 12 kB URL HTTP/1.1 via902.vn/assets/storage/images/category7HSM.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced\012- data
Hash ab978e004624aedf08839f25c629149f
2b910c8469c701b976a96ea5ada17844c1a14b55
f24cd97d272d8bfcc0af5d6fb011b4b023d598a90d343f71f2b0a297021c9247
GET /assets/storage/images/category7HSM.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: image/png
Content-Length: 11750
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 09 Sep 2022 08:08:15 GMT
ETag: "2de6-5e83a0c42b9c0"
Accept-Ranges: bytes
via902.vn/assets/storage/images/category47L.png
200 OK 17 kB URL HTTP/1.1 via902.vn/assets/storage/images/category47L.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 4aee6772d4e03012b78f5b99c97ba859
54aeaf9210da66819b10b691d7484556885c860c
3523cdd07ff4dd25aa3b7e766636ce310a49fab51e6255e29ba813fa50ba55a2
GET /assets/storage/images/category47L.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: image/png
Content-Length: 17003
Connection: keep-alive
Upgrade: h2
Last-Modified: Tue, 08 Nov 2022 16:06:26 GMT
ETag: "426b-5ecf7b8db2480"
Accept-Ranges: bytes
via902.vn/assets/storage/images/categoryWS3H.png
200 OK 47 kB URL HTTP/1.1 via902.vn/assets/storage/images/categoryWS3H.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x640, components 3\012- data
Hash 553fb342c98d279f3b8f9972a2079042
48ef1279fd41d0159a4ac8941b7b07684932b5a9
60e395ff28967fe0d12445b608b79920ef427a97c69db7d30d0c70a966db384d
GET /assets/storage/images/categoryWS3H.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: image/png
Content-Length: 46931
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 03 Apr 2022 15:04:55 GMT
ETag: "b753-5dbc1559bd3c0"
Accept-Ranges: bytes
via902.vn/assets/storage/images/categoryNC3B.png
200 OK 5.3 kB URL HTTP/1.1 via902.vn/assets/storage/images/categoryNC3B.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash a688dd82eaefba94ddb1a6cb248699d7
253bdcd80f33b055b921d778d7b37c89c2693a25
39c93e38e7f812d047f16f47d81c9628a150c5ac19e8644c1e4d0300c86ad02d
GET /assets/storage/images/categoryNC3B.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: image/png
Content-Length: 5340
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 06 May 2022 13:47:40 GMT
ETag: "14dc-5de581a1ab700"
Accept-Ranges: bytes
via902.vn/public/datum/assets/images/favicon.ico
200 OK 209 kB URL HTTP/1.1 via902.vn/public/datum/assets/images/favicon.ico
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type MS Windows icon resource - 1 icon, 256x-58, 32 bits/pixel\012- data
Size 209 kB (209150 bytes)
Hash 15b665f459159c37092405f24cd9e544
55770799e2462fcc9f28911dadd8b60d9a5ee90c
d78ae992383b1649006625b697a06be47c8285edce3e95cd36c49ab1aebb4e52
GET /public/datum/assets/images/favicon.ico HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: image/x-icon
Content-Length: 209150
Connection: keep-alive
Upgrade: h2
Last-Modified: Tue, 24 May 2022 10:09:16 GMT
ETag: "330fe-5dfbf26304b00"
Accept-Ranges: bytes
via902.vn/ajaxs/client/loadGiftBox.php?_=1669473626486
200 OK 0 B URL HTTP/1.1 via902.vn/ajaxs/client/loadGiftBox.php?_=1669473626486
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ajaxs/client/loadGiftBox.php?_=1669473626486 HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Upgrade: h2
via902.vn/assets/storage/images/categoryWPD.png
200 OK 17 kB URL HTTP/1.1 via902.vn/assets/storage/images/categoryWPD.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 4aee6772d4e03012b78f5b99c97ba859
54aeaf9210da66819b10b691d7484556885c860c
3523cdd07ff4dd25aa3b7e766636ce310a49fab51e6255e29ba813fa50ba55a2
GET /assets/storage/images/categoryWPD.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:30 GMT
Content-Type: image/png
Content-Length: 17003
Connection: keep-alive
Upgrade: h2
Last-Modified: Fri, 26 Aug 2022 07:47:02 GMT
ETag: "426b-5e7201e9b0980"
Accept-Ranges: bytes
subgiare.vn/assets/images/svg/notification.svg
403 Forbidden 0 B URL HTTP/2 subgiare.vn/assets/images/svg/notification.svg
IP
Analyzer Verdict Alert fortinet Phishing
GET /assets/images/svg/notification.svg HTTP/1.1
Host: subgiare.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Sat, 26 Nov 2022 14:40:26 GMT
content-type: text/html; charset=UTF-8
cf-chl-bypass: 1
referrer-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DqX6OQQo2IKNuU6dk5N%2BRS35bsupJlIkn%2FLV06MvETwJEjA3xQNdOHG1wYSMkqr9X5rr0ltrgeDsWfScDex6V2MywSHhwGVUM%2F2sn%2FxAxhqquUwh8sqn8B8h8G1cyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77036116a8cc0b45-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=MuseoModerno:wght@100;200;300;400;500;600;700;800;900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=MuseoModerno:wght@100;200;300;400;500;600;700;800;900&display=swap
IP
GET /css2?family=MuseoModerno:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 14:40:23 GMT
date: Sat, 26 Nov 2022 14:40:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,500,600,700%7cPoppins:300,400,500,600,700,800,900&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,500,600,700%7cPoppins:300,400,500,600,700,800,900&display=swap
IP
GET /css?family=Open+Sans:300,400,500,600,700%7cPoppins:300,400,500,600,700,800,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://via902.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 14:40:23 GMT
date: Sat, 26 Nov 2022 14:40:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
via902.vn/assets/storage/images/gif_loadingSR4.png
200 OK 0 B URL HTTP/1.1 via902.vn/assets/storage/images/gif_loadingSR4.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
GET /assets/storage/images/gif_loadingSR4.png HTTP/1.1
Host: via902.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://via902.vn/
Cookie: PHPSESSID=d2jbl8iu0nv1e2p6e9guf5qq59; _ga_VNEDT5MHVY=GS1.1.1669473626.1.0.1669473626.0.0.0; _ga=GA1.1.771724968.1669473627
HTTP/1.1 200 OK
Server: nginx/1.19.1
Date: Sat, 26 Nov 2022 14:40:29 GMT
Content-Type: image/png
Content-Length: 267984
Connection: keep-alive
Upgrade: h2
Last-Modified: Sun, 03 Apr 2022 07:21:49 GMT
ETag: "416d0-5dbbadd6f1d40"
Accept-Ranges: bytes
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2
200 OK 0 B URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2
IP
GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://via902.vn
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 26 Nov 2022 14:40:26 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 126828
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "620188b3-1ef6c"
last-modified: Mon, 07 Feb 2022 21:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7205464
expires: Thu, 16 Nov 2023 14:40:26 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=etYNH1i7SjjvvAdamDtNkYiVPD25C3Nt7cZhCTAQjIzN2DYCVSoHE00fpkuMzaGN3H1VQXB%2FbUC%2FuYIwiLgnhf36zchA7glnikqd2Jv1U5F7JnDsKh%2FCf1mSBmmYI5MhSrHCj9MZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 770361162bc2b4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
103.90.227.45
34.102.187.140
23.36.76.226
93.184.220.29
151.101.85.229
104.17.24.14