{"report_id":"33e088ee-8abe-4c11-871a-3611411beea4","version":6,"status":"done","tags":[],"date":"2025-12-01T21:53:15Z","url":{"schema":"http","addr":"sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"title":"16 địa điểm du lịch Hạ Long “không đi tiếc cả đời” – sukhoedoisongedu.online","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-05T21:53:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-01T21:52:48Z","timestamp":1764625968,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.38","port":51352,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-01T21:52:48.248857+0000\",\"flow_id\":959656988484228,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.38\",\"src_port\":51352,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"aj0cv43o8.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":588,\"bytes_toclient\":116,\"start\":\"2025-12-01T21:51:35.434820+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-01T21:52:53Z","timestamp":1764625973,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.38","port":60736,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-01T21:52:53.530866+0000\",\"flow_id\":1103284990007156,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.38\",\"src_port\":60736,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"aj0cv43o8.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":588,\"bytes_toclient\":116,\"start\":\"2025-12-01T21:51:38.153460+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-01T21:53:02Z","timestamp":1764625982,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.38","port":51366,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-01T21:53:02.280291+0000\",\"flow_id\":2093944966427718,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.38\",\"src_port\":51366,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"aj0cv43o8.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":468,\"bytes_toclient\":116,\"start\":\"2025-12-01T21:51:35.668742+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-01T21:53:06Z","timestamp":1764625986,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.38","port":51428,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-12-01T21:53:06.312253+0000\",\"flow_id\":266419202168374,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.38\",\"src_port\":51428,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"aj0cv43o8.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":588,\"bytes_toclient\":116,\"start\":\"2025-12-01T21:51:36.792118+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2025-11-30T23:30:05.607588Z","alert_count":0,"request_count":1,"received_data":767,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sukhoedoisongedu.online","ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-28","domain_rank":0,"first_seen":"2025-08-28T10:48:03.677598Z","last_seen":"2025-11-25T04:35:58.881824Z","alert_count":0,"request_count":46,"received_data":2778761,"sent_data":25599,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"secure.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":16323,"first_seen":"2012-05-22T05:36:38Z","last_seen":"2025-12-01T00:53:49.560722Z","alert_count":0,"request_count":1,"received_data":2044,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bazaarvietnam.vn","ip":{"addr":"8.213.198.87","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Thailand","country_code":"TH"},"domain_registered":"unknown","domain_rank":182368,"first_seen":"2025-10-10T07:27:27.659733Z","last_seen":"2025-11-25T04:35:59.343563Z","alert_count":0,"request_count":3,"received_data":1662950,"sent_data":1548,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-11T15:03:07.813419Z","times_seen":811523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-05-11T15:04:30.85942Z","times_seen":71268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/js/slick.min.js?ver=1","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b53bdfc29e18f4d493d775a8023fbdc8","sha1":"e9fcbcc4fa70cba093b81d982a1b78509414cef7","sha256":"e02af7df9a190d88380e2dcec2050ecaa493ae2d23526dbeec67f6907df3a752","sha512":"027e1adc510cc91e416cef4245042a82c06c7318cceee34d99c71448448d56d5a7e77116c7907da0eed15673ef3c6e847187183e9d06bf78bf410e0a53307958","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsJ:X0tVUkkK1GPz6QrG1AJ","tlshash":"04139509d204372688eb12e57105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","size":41953,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-05-11T14:41:25.827167Z","times_seen":16115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/js/theme.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be8e2de89a460c2a21997aa57b85066d","sha1":"27b31e21bb4b3633aa93f37d99f4d2f6f8296471","sha256":"70980eb806390a12c56f11e1112be924822f1bfb32e6fc579613e7344df75567","sha512":"a916386a810991d842315b668d2a39b892adf5d303ccb9f76ec55bc438753564905aca55dc97ab6ae5b69bc48dd97360fb83c310019af2d9e136b88506472265","ssdeep":"192:n/LDa1Z7vP0cR8KDIlMlU7vN0cR8k4j7yX0cR2kesy7yc0cR2kkjh1f:nDDa1Z73tElN71/4j7iVdy7BVIh1f","tlshash":"5c524319b29855bb81bb12a9ba6e9504f5710baf54028e0b7c7cd6c80f72c6043b5fbd","size":13469,"data":"","first_seen":"2024-06-02T08:08:45Z","last_seen":"2026-04-29T05:35:52.673748Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-05-11T15:04:30.845737Z","times_seen":203577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://afd36e3c-6115-4459-8b56-4bb832c26172/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-05-11T15:01:29.940338Z","times_seen":170918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5fe95cf7788cbbfe52a914f042c79e1","sha1":"510ab7af72749a394908e650130105c7718ac17f","sha256":"7b4fdb9b7ed59693b1504b39ee92d613c71ca58e59c748c1d5a2f0b3b655ae8b","sha512":"e85fd33e4542af339376603cb03159d12eb7145c1c0d9a3fb411d973f272429806cbe61e926c3da6cd384f5d9ee2deee4662084bc785e599d8bc2054399c7757","ssdeep":"","tlshash":"6a61bb9e3775348732b604d16a2f4e07fb7248361a88d434cab9e7541cb1463d379d4a","size":3420,"data":"","first_seen":"2025-10-01T05:21:14.354827Z","last_seen":"2025-12-03T15:03:24.8402Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-11T14:54:31.769227Z","times_seen":750820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/js/custom.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35ba81659145ee0ca18ca15f13f0b9fb","sha1":"a3eb8ce286f406fc872c8d7981ed4e727e008907","sha256":"579f79956265e8d98afc74509e1b2b0f4cfea5d6db2c60b0939ca34f47790376","sha512":"06735c4881c1e44b3e35dbad1de29ee796e7db46e9d1f0cb476800f4a98f211bc6dc6a01a989c885c104804e6c5b4c5211547cc26676056d52846ea743e99e9a","ssdeep":"192:cimX7fCpo0wAm3/Mv92iwvPmgfBmbOC7ylm18rU:ci47apKx/Mv92iwvPmgfBmVy818rU","tlshash":"9672100cb52050a98a7b7b369f7aa548fb3a2767110087a7bdfe15940f307493291fed","size":16279,"data":"","first_seen":"2024-06-02T08:08:45Z","last_seen":"2026-04-29T05:35:52.722354Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/sdk.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-05-11T15:01:29.934545Z","times_seen":165589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/css/slick.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/css/slick.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 1144\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EcEwUaFkdd%2FZv4XcJz8kCfFVPKLNCcww5CAhp%2FV4NcLkWcBrJre9GxswxKI2iQAoFr8eNVcPYI2xUGeWd1hYfU77w%2F3zxYMl2tbxg4ULN0w5kJTNEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073b879b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4927,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"1d3dfe6688280c752822831a2bda0a75","sha1":"dd30fb277f3c9241a4322918a3ec628841150ef6","sha256":"5c6238af0c3d35eb1cb4ce8e689991b9db7c5c7710872ddddcce9a2bb4db5485","sha512":"a43a57eeabd72a8fb1134b8d6c59b626e0cfebb48ca693f886508a32798840f90912702a47462fd6e57d428cd4a1b181b5de3d2cd48cc68425494529329b6a28","ssdeep":"96:iu5wLbfchB6p7bS8nRV8l7wSLsgvsmN9TS:iu5wLbfchB6p7bS8bm7wSLRvsmNtS","tlshash":"81a1f09846b39a460417c0982fd787286bdff0131929d8acfb95534dcfce1e8e9c535a","first_seen":"2024-06-02T08:08:49Z","last_seen":"2026-04-29T05:35:52.710798Z","times_seen":46,"resource_available":false,"data":null}},"time_used":3239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4678\r\nlast-modified: Fri, 09 Jun 2023 03:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZPYF906iTm3MvEw%2BIW9Q8N5eetYaH%2FTc5dG%2BmT%2BZqoXIM6R6O9I%2BRpYTfk1Mxv8XZtPJFAzAVuvr0aqC2nSrrqqfqh4TiFx7zpdy5dkGybNYcjWmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073d885b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-11T14:54:31.769227Z","times_seen":750820,"resource_available":true,"data":null}},"time_used":3235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3225,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/uploads/2025/06/Harpers-Bazaar-Trien-lam-Mac-Thom-cua-Faslink_01.jpg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Harpers-Bazaar-Trien-lam-Mac-Thom-cua-Faslink_01.jpg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243562\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Mon, 30 Jun 2025 02:01:27 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qY%2B55k0b0EVGaQUUbgqmaVwvHBEclsjffr5TCusuSGl4ddMRsjVSH9T3pXFGeFmniPqb8TtFZCbatPrOh7qG0h7r8fJvN%2B3ClYlGaADW042DN8xJiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d0742892b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":243562,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop 22.2 (Macintosh), datetime=2025:06:29 21:17:50], baseline, precision 8, 1000x750, components 3","md5":"2b36860557f18699ffe445b2f6af0e9c","sha1":"25aee81172afeaaa4065a51507e1ed2bf64dd4da","sha256":"cc3af12d2b89cc7bc0b553edb1896d33f1e0dab1e55ae0f44483c106a8df0990","sha512":"8dd98b0b565b525f10dd492db906ed05cc97193c580053f695510918b22bf74ef0b9a11133869b7bcf30a552bdf66d0b4ddee2323607d593e6c2c39eb35ef01d","ssdeep":"6144:Roosw8fVo/hmhxBz51+7UWxyxn5MECshzvl:6RlSmhxh5ehSnKEzZ","tlshash":"c034133660552d22dce0033681e4e7a48375de893d5719dabc6e7026ff90cf125b8bae","first_seen":"2025-10-01T05:21:14.342533Z","last_seen":"2025-12-03T15:03:24.817735Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3367,"receive":575,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21164\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhqyTJKMJKWkVD%2FmixxwqxkE5gjAdQaAoNUHcvEPxpok%2FuWccnnOvoE4eXIOvPb13j68sqv7NT9wMZmHPS6nnJRB4n6nMUjGTPHi0dVQdn1HDFvWuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a4b18b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21164,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21164, version 1.0","md5":"9bd1538829fdfca706def314696cd36c","sha1":"18fe91421bab8f4b3482527b82d52c4653fe71b9","sha256":"23f6a194aa459d6db6333993c324eecb57dc1ede07479fd55425a3cba40a3e82","sha512":"84cc9ba895343b5e573b79ca438b6c06fd4d582923e8a7a865ce21a09a745c4aa679de763f744e7582b71481410042f6df8daeb616992992bc10a28d45de0253","ssdeep":"384:L52cLmSbzd/vKnu0OsYTRgucPesVUZZPFQVpRXnN7kTs9kzTK/H34:L5xaS9/iBYTRmZ0QVpRXnN7QWK2PI","tlshash":"3392d0d68c69908db02d6a707db9d0b870f56697d7fc86832c9c48896e835380f0e2db","first_seen":"2023-05-10T16:37:29Z","last_seen":"2026-05-10T22:41:17.206952Z","times_seen":198,"resource_available":false,"data":null}},"time_used":1626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1445,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:58.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 8520\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftXDeffIrnmL4HIO5NejcYlyBDXj44nCdCGeEse4uEWEjfb7GHiXRAcCc65YyTY7O%2FaoVmCLoO1z%2BAW29EfF8Kvq4UzfBUQc9Yk7YgqyeW%2FO0772Jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a7b20b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8520, version 1.0","md5":"1e4b134b8940cd8de3cf60b701882d7a","sha1":"09e0f39351371fcb289bd82f798adf6488043322","sha256":"706fb724b0bd69b23fd6095ab2118d201ca02669052fde1fd441ca4f16384437","sha512":"d4a5d0fb5780dcbbbba0d786e20be1d3cc2daaa918dc30d8250a1107f48541a53e3b6414eb0ae05d21da56910d6a68c00289e6bfa2832734b4c76173414f62b7","ssdeep":"192:4aXk1kZeG6HEd3in6/MXCdOMaDeJep7KI97K97O+9FCBr1dzc2j2:pXk1kZeG8EJ1/MXCdOMa6JUKI9G9i6GY","tlshash":"7b02ae2ca75fe8a2e1a20232d02ed425c209b35ee30995649f80eb73cecbe1c5d9b544","first_seen":"2023-06-06T14:22:52Z","last_seen":"2026-04-16T23:43:06.439484Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1361,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.gravatar.com/avatar/01c22ab84687d4d9ab9df86892f3a068690acd8ed20c706a75ec97ed4015e71d?s=96\u0026d=mm\u0026r=g","fqdn":"secure.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:59.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 19:44:01 GMT","end":"Sat, 10 Jan 2026 19:44:00 GMT"},"fingerprint":{"sha1":"9A:AD:B4:0D:78:72:BD:79:3B:85:71:6E:98:21:AA:57:5D:FE:A1:D8","sha256":"23:BF:7F:44:90:FB:07:43:D0:6E:80:2E:C0:31:09:27:0E:4B:CA:85:DA:67:94:AE:FF:06:30:93:B6:78:DB:53"}}},"request":{"raw":"GET /avatar/01c22ab84687d4d9ab9df86892f3a068690acd8ed20c706a75ec97ed4015e71d?s=96\u0026d=mm\u0026r=g HTTP/1.1\r\nHost: secure.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1387\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/01c22ab84687d4d9ab9df86892f3a068690acd8ed20c706a75ec97ed4015e71d?s=96\u0026d=mm\u0026r=g\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"01c22ab84687d4d9ab9df86892f3a068690acd8ed20c706a75ec97ed4015e71d.jpg\"\r\naccept-ranges: bytes\r\nexpires: Mon, 01 Dec 2025 21:57:59 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 12\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 96x96, components 3","md5":"38d05c31efcc7acd24922c81ec7a5d4f","sha1":"9daf33b9473abafabe8c7c1825d57b180942d97e","sha256":"7eebb88caab2d1528e0af6d8d9cfb1ff3c48050b6aa163e5aee5b66d9e3f1586","sha512":"12262650b409f0bc0bbbaad682e3ab511155440ffc8f22b7d3277f5998e79e5c2701ad938b4655bde6d46293a229e89b83c72d1e403ab9594b98b22f6895a9ba","ssdeep":"","tlshash":"cb21b327d34243d07c3f886ba2473f8a80fe3e88b8d0108b19f046a2f332ad0494d198","first_seen":"2025-02-24T06:47:26.753159Z","last_seen":"2026-05-11T15:28:49.211107Z","times_seen":1700,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":28,"dns":28,"connect":9,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/css/themes.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/css/themes.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 39723\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuGbH1WQnDEtMSdNDQv0aDQwqDMjjG9m8Kl8H3G3RgQP86iMufqKIiBrXa4j3f%2FIG3QK7GiunpfSRgebNn83vfEEeKm0uHAm5a4Udz533%2B%2BuwCSJYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c87db4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207798,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"33b7ba6ed308e7f7bf0a8d54bf95091c","sha1":"e4632fe680e819fc315b4ae4154fc4140afb7328","sha256":"9b6172066cdd065520c5e4041cf0199fba4405481d59e22ac4972e8c4a1dcecd","sha512":"b031f649205464c6eb3a38aa776eb04daf5456cd94e7d301fc02847c53f681195adc1b5ab431ad37835b06bfd8bac29f87ccde81fd2c5128ecc6716ddf669158","ssdeep":"1536:4CvTv+Fc9AK+v/R9bMEdHN2O/bzwlT/4EKlL:BTv+Fc9AK+XMEdHwTLBG","tlshash":"1414758d5a1324429a335778abf3990dffd500a3ea0645debbed25824ff13a48553e8c","first_seen":"2024-06-02T08:08:50Z","last_seen":"2026-04-29T05:35:52.700089Z","times_seen":46,"resource_available":false,"data":null}},"time_used":3429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3419,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/css/responsive.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/css/responsive.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 888\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POwiQAfkLFuVcvxPQuC2FQ9pSmO1jtSzvL%2FlvXpCQmUgNlr6Fm7nAk%2FjkIf0KiGMJSNQkM%2BtwQk89ENXEMgHXtS3kgrkMa8OiB8VQHR2ltNkmRIK0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c880b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a9d6422b45ddc48b5c4b00a30e5c4d7c","sha1":"41e8c5cd986561f276c54bca4dd6f1222d491ca5","sha256":"4bb9d696e1aa5673c4cf6f0203344815341370b0217736c6625c055d0a2f776f","sha512":"24ef667f3e1c3ef7e105088476ed645cf2532cac68aaab6e7545b6f7bceb84a50c5d90415bfa7001025909616e1baea3d281f2615f1caf30aae236a306b744a3","ssdeep":"","tlshash":"dc71562cb201140ca7a69293bb708f75ad30a467b3e790f9e0659538d3d1f5e03f56da","first_seen":"2024-06-02T08:08:49Z","last_seen":"2026-04-29T05:35:52.708619Z","times_seen":48,"resource_available":false,"data":null}},"time_used":3206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/webfonts/ajax-loader.gif","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:58.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/webfonts/ajax-loader.gif HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/css/slick.css?ver=6.8.3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4178\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRxRqpBh6MFEp4WX6OoukXFWte%2Fj%2FXBkK5vOXR%2FRM6fiTvJPYMCTZYmHBwbU0c%2FYVHI247aNSISB75l8ELboGEUP6VS%2Fgzd40U7ZyRQVu82wWHhltA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08c4b45b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4178,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-05-11T15:00:27.920984Z","times_seen":38770,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29744\r\nlast-modified: Mon, 28 Aug 2023 14:44:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H5D6jBBWAQ17i4Rrsnlv4jFe6sCIuQ4Tgu1Qncn1PJaMIZKGUV10lufwQ6iND508zjpdpKWkYaccUJrDwzih9h1dWynR91wByF9wNgI9k3s%2Fu7CMAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073d884b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-11T15:03:07.813419Z","times_seen":811523,"resource_available":true,"data":null}},"time_used":3375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3373,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/uploads/2025/06/rog07358.jpg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/rog07358.jpg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65867\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Mon, 30 Jun 2025 03:31:01 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wGDjySnQs7dmNhX%2FGMQk0gVlpDVUU340y2bQwybFirjL5mDD5zEckJNMMVL2RLsjIucr%2FvnRrl%2FpuTG6H7qbH%2BtsVRVPNffbYgcBKonbBOc44AUFAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d074188fb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=9, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 14.3.1 (Macintosh), datetime=2025:06:28 15:53:27], progressive, precision 8, 600x315, components 3","md5":"a030dd20c8b673df2913de977556810a","sha1":"44df0f12a3d989f912083fb9f273a9e12c862f31","sha256":"8826f1963bf345e8ef08dd33f024c79c2943cf3cea531c6873168a9cc995bf62","sha512":"18776655a62a6ff1039891daf9b353d598196fd21841f24def5325409125ed7fec0c42e77eb76359251e5f5ead9ca08e8ddc04725300f286b27fea2bf7066fd7","ssdeep":"1536:b1928QX7JJqg7lKcFQAgtggqka7rEFxQy5J7PpHdgnDgIWoQ:hU8I7JJqg7AVAI9fMIjQmzpHqDOr","tlshash":"bb53013b6f9aa121ec76de71e9712fb1d782da98eb70528b60f81a040d82ad4de4504d","first_seen":"2025-10-01T05:21:14.349734Z","last_seen":"2025-12-03T15:03:24.769425Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3366,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/uploads/2025/06/ai-my.jpg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/ai-my.jpg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48026\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Mon, 30 Jun 2025 01:27:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LI9rKsFHh3JFMIMK0qqjuZb0q7wtBYTuGh%2FIPjdazpMlyr%2B4YtTeNoYPi5iSOhMGcyjoeOeE1sf4TXfVLlcf9%2F5xo9TDbsqiUFpsmkfR1uZ8X8IjJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d0742893b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x315, components 3","md5":"99be6438b124d950c1ce7927185b1960","sha1":"07b6a978d5bbb2e8ce053aac065b6b76e03758f8","sha256":"0d2a359c43bc132f6fdcaaff0a861a4b9c206c79802dcbf245e78650218c588f","sha512":"1f3c77795c4a34be999a8d6c0691288494ddac4155040601c376c4bad430ce229ac70d59e89a27b2982f6ecac425d5d8427e59294c72d18d0f64b92209c743a2","ssdeep":"768:xuf9cQVmOzTBXaCQwAAAzSHdnc8n+re8AOz02Qj38iO3eKEoIQlL:xuV/z1KCTJTq8l8Aimj38Xf","tlshash":"f923014f06902b16b4b4b87e24b42e674355a2facd464f210b3d3fadb9dc8a12507bcc","first_seen":"2025-10-01T05:21:14.350764Z","last_seen":"2025-12-03T15:03:24.826563Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3393,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/uploads/2025/06/GAMA-Music-Racing-Festival-2025-3.jpg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/GAMA-Music-Racing-Festival-2025-3.jpg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 273264\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Mon, 30 Jun 2025 00:08:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wOHydF%2BPoqSV5iTXcsLiopCEA0WE%2By3Vz7dzW69Vo65Nagz9l%2Ft2dI0a5uorTF4SFpm4%2FxRnperiIgdrWzEu2Os10285g1IPIMnz5kseuqyGddJV8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d0742894b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":273264,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CC 2018 (Macintosh), datetime=2025:06:29 17:14:19], progressive, precision 8, 1000x750, components 3","md5":"6636b5d95fe979f270753df281a38254","sha1":"7689fa8bea74064c769fae72cb64aa8de6115a05","sha256":"ce357e26acb35b646c3ee9f7942f363731936af5933f4050817346a82dd8741e","sha512":"b077cbbb8b9c2be10ca9071821e9767ad82e00816225fc67f7f1642daec925e4b90cbf05c2dd21e87d1d5797f939ae2dcd986774d1e7616f6433684a8b12c9f8","ssdeep":"6144:FOO/VlaoUXWqQgKrlW+RN94+CZA0Wc5/4ZpgoT:Tdo7XWTW4Y9A0f9Gx","tlshash":"54442234b389dcb5f252923439e0d2411656cfdb75bb98b435ac2f4e37282f1918e487","first_seen":"2025-10-01T05:21:14.351716Z","last_seen":"2025-12-03T15:03:24.809216Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3365,"receive":583,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-01T21:52:52.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/ HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nx-pingback: https://sukhoedoisongedu.online/xmlrpc.php\r\nlink: \u003chttps://sukhoedoisongedu.online/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://sukhoedoisongedu.online/wp-json/wp/v2/posts/2997\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://sukhoedoisongedu.online/?p=2997\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERwkiJ6cVRo66YIRvlOmC4BfjJwddA%2B0XeqEzswUIsQ2NE2oOz0C7rCB99dzbucwY0aY7NolbHr%2BKiMxYlQ%2FWkPtSux%2FX4VrSJCANaghiXK%2B4kpaQ24F\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a75d06a8edbdfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Gravatar","description":"Gravatar is a service for providing globally unique avatars.","website":"https://gravatar.com","common_platform_enumeration":"","icon":"Gravatar.png","categories":["Miscellaneous"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":188647,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"1addca400c85032fb9626fd2ec9d5d12","sha1":"a1c8fd31e2520126f8f82e27327ba09c2e025d95","sha256":"a78f7d9df10d71c84e2102c3725973306f6f1377af8decddb6031cbade053d5b","sha512":"02d73dbadb4ae1346c9306fa399e1a9977f00d889b2091c492c8bc224c3edcc32e5466d4a8db672a82f63c31926996d1fd39d16725574c1020ac1902826e5955","ssdeep":"3072:M7s+vdMFR0QHwKB0QHw78MhXT8nttdIHBg3TWlPwwwwwwwwwwwwwwwwiqxsb3FBQ:HFZFp16Ikwwwwwwwwwwwwwwwwiqxsb38","tlshash":"c40475b35285212a475982cdd4213f1de68b44bfeb839d8df1eb18b3ee44bb2351158e","first_seen":"2025-12-01T21:53:24.605584Z","last_seen":"2025-12-01T21:53:24.605584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/style.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/style.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 1772\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bz%2FiLK1EiE70hFj6gAz37adTfkAdN%2FAViPtWDf4SdGrlOsJ1qY7erdUoTA5WF1SIfeo%2BpKdPl2ostOp5fNiLsCL2Ea6OtAVHaydx6Rs7Q%2BFxSFLhBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c883b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1089), with CRLF line terminators","md5":"d0f3e8ca4438c7f801b10dc8190db84c","sha1":"8c3e8e1d96c947e9dd36b18d799c3cefede0f321","sha256":"090b3d3a9b2d9a20401a2e8e79bad5a03743d7793ffba3d8c999aba1db60843c","sha512":"bc77c8c0040cd19e5057ab2f9a158882fc5423c7613a40cb6af097d01de2bdeac800b0c62290d61cafc0fd06ac2c0f67b3c4e374944a3c4d6e8a4c880a1e1380","ssdeep":"96:OleXf1/DSkF/shQbqUWWXK/WkvOfV4Fds+ZvWTI3O8PdEcgG1Vh:qet/GkF/shQbqUWyqvOfVoZUIe8hL","tlshash":"20d14159c3325ae212b74f7057a26582fae82093ab4343e5fac9d584279c5381bd1bcf","first_seen":"2024-08-19T21:02:10.242419Z","last_seen":"2025-12-03T15:03:24.835425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/webfonts/fa-regular-400.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/css/all.min.css?ver=6.8.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24840\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfY2BkPjID2kxOxKoxcsIyTpMF9oWO0czyPg%2Fqur%2FUpoI%2FcuXjyJPOgA47sjb8MgqcqWdAmrubaE5bn%2FUXtNPq6fvXjVxnohNIgGh0S1MYGI6BGh9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a6b1eb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24840, version 771.256","md5":"3f505ed834ca9466cf7efc2806b86604","sha1":"66085d2542ab75f524179a14f6ecd36a3f6f851b","sha256":"7ba24c4138c4c3cfe694a8fc8943b8ce21b9bfbb14edcb290b8654fcaa365d6b","sha512":"215b16999ee473bedb6fb91df667e15e5793a6ab5416aa6d46f7697078f6619ede65cf61a8ef761d321b9df13901d978d2b5838fa2daae9de6eb1aac2f8d6c23","ssdeep":"384:rBxhH7C2VqPTmk6foXVqb8r7r3qxcJu/x9pr42KYgtWDTilV2ZKByZmBYHBWnXjO:rDg2VQTmS/r3qbpHk2KYgeiQlmeWTO","tlshash":"b7b2d0216d7e070cbac50630b389d74c528c99361e36edac5c6a2251e6dfc8a9b307f1","first_seen":"2023-04-13T08:20:21Z","last_seen":"2026-05-10T20:06:20.009381Z","times_seen":778,"resource_available":false,"data":null}},"time_used":1586,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1407,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:58.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4769\r\nlast-modified: Tue, 15 Jul 2025 20:58:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMsNmO1mr9r3QVDGmcj%2FHOGoJqkSZX1wJoR9RAkA7CvZKsU2eCBC%2B2fz6a4LCfF%2B12plxrGJ8%2F4hTU%2BFtL1WSeNPPx8rkA9wV6GY4H06tiLjFUQxOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a75d08b2b2bb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-05-11T15:04:30.845737Z","times_seen":203577,"resource_available":true,"data":null}},"time_used":1159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/css/animate.min.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/css/animate.min.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 4828\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8yIiIckRiWRpqumUpeMCYK6rKMRYHoKyPM%2FenA4n77gCuSQvLYPCjm%2Boz6GfGnkJXsqJ0%2BVNrxzWUNdBZEoMKWr78mcDUqvWT18clS12GCRV3jbXMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073b87bb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-05-11T14:17:30.832285Z","times_seen":27856,"resource_available":false,"data":null}},"time_used":3219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28600\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thLGhD0oQVSkRGeRUJA75L4Ck5vZ74dWsj1SLHJWQzcNKV37t30w4yfeL7Ps7P6ppmxKXtCFlQMznEIrks%2ByrK%2FHE0CEWFB4nsa4qKlXbRPadnXAiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a3b15b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28600, version 1.0","md5":"de104ab8acb1088aebea1aae24724a91","sha1":"b613f95c303c539ef3fe4fe65db0fbc5e5a55fe1","sha256":"c94f080a550a1f2d4fe07d371969b7a40c01606bd5624e8c03c976cbf5e06058","sha512":"344c715eb0c1b94e5b21c42fb5f985780a82b46cf060176fac3fdd0044bbf692c304c41dfe2ba87603c0b9e5877fd91dcbf14d070fb2689235ef5f1549ff5ea0","ssdeep":"768:ghn4BbkaiWnFKO3QFUB1ECEDGtqOGVA9wk1auZ:O4rcOAUL7UOGW2r2","tlshash":"54d2f1a43e3c381e4445cb3a67646f32071559fd4db274c950a2e2e70d4a7ad8dafb01","first_seen":"2023-05-03T04:10:43Z","last_seen":"2026-05-11T08:21:02.701236Z","times_seen":3049,"resource_available":false,"data":null}},"time_used":1584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1582,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsdaily/assets/images/ad-900.png","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsdaily/assets/images/ad-900.png HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 59970\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGAVPAOouw8YYFzO5vy%2BZNWIxotg%2FYD5ZG57E8cjGOuXeWGT64ewSM27yxjSJZLCvTNDxp9XI5Vub7eR5vfh64lNp7DaU3xPDGJlZ7PtVonRQlGF6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d073d887b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1240 x 152, 8-bit colormap, non-interlaced","md5":"665126baa791b03342bbc86c976a9dca","sha1":"d3b8f2e4593ee805bca230d2d57a7e79803d776e","sha256":"4f52609eb865dbaee50edb3ae35e29db68c857d4853024ecff3d0a51458e8beb","sha512":"4d535dd5bb8078ab98b07f9051bd87d91fadb15dd3206042f6ee111b4a7efaafea7c0d6d5cfb2983ca619c3aa43650e3f89c7aa921d535d0cb1f18a6cbde4416","ssdeep":"1536:DcpDoKCbeGiDlExaTlF+D7x5oesTiSKNdydcZ42y2K:DcpvQeGclExIlF+55oesTilN3lK","tlshash":"95430291a49dcd9bf5e5a3d41f2a26408d26837329164ade421f00f7075dfc9ebe6a30","first_seen":"2024-10-04T11:18:23.272465Z","last_seen":"2026-02-14T08:54:54.669215Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3412,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/css/all.min.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/css/all.min.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 21841\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5H6N9tY1tcJ1v1%2FNk1L69XCffgNLVWRMA7hR9A54N2FnRr%2Fd%2BjVhi56ZX%2Bfvyiwgd10QOb0S8QPJf75zV7ghSYLMvcmTSETI1zuIFGwhp%2Bd2ttVutg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073b87ab4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52269), with CRLF line terminators","md5":"c6bca9fab0cd36f7276e76d44ab53ec4","sha1":"c97b08182a72fbedb92ed3d49cf6c9730cdaf027","sha256":"faa6616fa47d604e36227abce1bd1f61dddfa8c151ea8372f6506e42c64c13b8","sha512":"98ed1df3496836cbf99c2ccf9d78e84473005bcddf5e4986041411595ae0c76f86f5918ca75529628a83fb0c0f9a2742c29b51c83a295e13f145b59179cd2e24","ssdeep":"1536:DjMCMPMCMjMCM4MCMwMCM3sVM7709gbPMfjSFOTyPGu0prfZCl:C709gMGFiyPGu0pfZCl","tlshash":"12a3b7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-05-09T03:48:48Z","last_seen":"2026-05-11T04:35:18.50847Z","times_seen":161,"resource_available":false,"data":null}},"time_used":3435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3434,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:58.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28600\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZbzaVsTLeQlAt0teG0L71hPGm6XhDaAqy0LfFfA2nrZG6ZjV%2BdatB%2FhPSZJUJ9dNPRhClBAC5%2BGG7IJmtdHTDWqHRrE4e7H2E%2B7ymziSyuCRctqO2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a8b22b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28600, version 1.0","md5":"de104ab8acb1088aebea1aae24724a91","sha1":"b613f95c303c539ef3fe4fe65db0fbc5e5a55fe1","sha256":"c94f080a550a1f2d4fe07d371969b7a40c01606bd5624e8c03c976cbf5e06058","sha512":"344c715eb0c1b94e5b21c42fb5f985780a82b46cf060176fac3fdd0044bbf692c304c41dfe2ba87603c0b9e5877fd91dcbf14d070fb2689235ef5f1549ff5ea0","ssdeep":"768:ghn4BbkaiWnFKO3QFUB1ECEDGtqOGVA9wk1auZ:O4rcOAUL7UOGW2r2","tlshash":"54d2f1a43e3c381e4445cb3a67646f32071559fd4db274c950a2e2e70d4a7ad8dafb01","first_seen":"2023-05-03T04:10:43Z","last_seen":"2026-05-11T08:21:02.701236Z","times_seen":3049,"resource_available":false,"data":null}},"time_used":1536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1530,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/favicon.ico","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:59.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 01 Dec 2025 21:53:00 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Djfb1ggKNDRT%2F8Tj%2F0f7nR4Qohy%2BsrL2lBiPTruBVMGedgCZ06%2BzEcB6Wbovn9sl3mNAARxGHbwt52qomyTMM%2BfY2uDiG7wDW6ncn5wlA3UCpyZ0w%3D%3D\"}]}\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d095bbd5b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-05-11T15:02:44.470546Z","times_seen":126067,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/uploads/2025/04/harper-bazaar-cac-dia-diem-du-lich-ha-long-bai-tho.jpg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/harper-bazaar-cac-dia-diem-du-lich-ha-long-bai-tho.jpg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://sukhoedoisongedu.online/wp-json/\u003e; rel=\"https://api.w.org/\"\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iA4ADW3ULq2z%2BvaClldrvIzMIGV7%2B4V6Olx3IswhIlSLe%2FT52YiYACyPQ2HALGoOEx5Ewf%2BC%2BJWqW8tTgb%2BpyY3G2PobL%2FL8NGpgw%2BDrz9aM1qb9qw%3D%3D\"}]}\r\ncf-ray: 9a75d074188bb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114716,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19585), with CRLF, LF line terminators","md5":"31b7230d086cbdb4109bf3ae1ae944bc","sha1":"b072fa00beda7266352ba79c5f10b4f3fdea381d","sha256":"d54cd5aae8dc3d42b931092a97b6fa1a2be874c549b343d1f86f54a677681ee9","sha512":"3aea06cea44721d46c51bc182e4cdc5ad3572b786fe759615616fed2f58d84e5e11eae02eda54051d4d3e574d5b2e143d8abc9e2581e8ddcaea12eb02fce5394","ssdeep":"3072:Y78vdxF2IrZWEK8IrZWE5WlPwwwwwwwwwwwwwwwwiqxsb3FBopoVx1Z:xFpuj+wwwwwwwwwwwwwwwwiqxsb3FBoW","tlshash":"12b36373a089212a031e87cdd2113b1e969b447fcf52ed5af1ff2c63ae50fa5345258a","first_seen":"2025-12-01T21:53:24.619401Z","last_seen":"2025-12-01T21:53:24.619401Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3535,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/icons/icons.svg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/icons/icons.svg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1784\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:58 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oF7aF2T3NTXzDP1B0EHsepid9rexEYjPc9SZpMmchqeoxLsiNSSLAGTw90muWoMXSmiA4tw9KxNivpsWYR5QLLubSMZiBCSaL2vw8ceAMvJB9EhJXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9a75d089cb0bb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1417512d100ccb4206d0099b4538f16d","sha1":"79ed9b2b83cdb6d19c796ad292041289a1318d4c","sha256":"d3b8d9d0671aaaf02a93dab028a340ce65ad35b8e49fb1b4323980d0707a8838","sha512":"cfe870515047c038c94ba457b1c3e770e82f5742bbd371e03df69b5bad48f0593bb3cbabd34ffffccc3e9983b3d73a9735088d5f0677514298aa5bc8bf72ba87","ssdeep":"96:+29F7IRZQCjt2Iimr8eX+QwsK5GbLkm24g5/:vnWZ35Ie6sK5Ag5/","tlshash":"7cb175e1c3b8a69c6417876adb3936d96b4f70afb58944e4301e0e62afb3dc4c443760","first_seen":"2024-06-02T08:08:50Z","last_seen":"2026-05-10T01:22:57.957518Z","times_seen":117,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 727\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSHjg8ICTupEwglK5U0WnaRiCO%2BEWFPVDVJDtnbW0LnHwvG14%2BZXlrg5Afx%2FtiMzZ6co%2BOrJvKu%2BW6%2FEAKZPP68X%2B0stumnB6mMsaKN0NHVkLQ37HQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c882b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5f7d8e8f52a078836636e7086998cc0f","sha1":"9ab1723b25640cff7e55a4164cd23018416cb685","sha256":"3c23183b0844d02f2a9a8b4a75623c157fc829bf0d0625987d7ceb83a443934b","sha512":"d40105bda4066f0b1355215043b6416366742f7e7a17c2ac23b22c83427c2666848adc950d5a577d3dc53eaef6123baa43cd089ba19115240c95eb87ee8cc655","ssdeep":"192:crq0+FEZ09FNg00FOH0bBjA6M3D3Gx23lKiY3lm3sEx51M3GJTzK:cKtYDwL3y2ST","tlshash":"ea42a090942f5244979f5dc2abcf7e22ad8db1096444d978dffe0c489deee24239078e","first_seen":"2025-10-01T05:21:14.322379Z","last_seen":"2025-12-03T15:03:24.813594Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/css/core.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/css/core.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 1870\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGNhopLToWkEPZCtmGPP7cMehgTjdpAULOwDCgGhKpSKS25mIYrugs9BGAd5mKy9DKJ%2B19PWgLkMRV780kDAX%2Fb%2FhQGAcmRN5TbqN2IoiXNt2L7p1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c87cb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7945,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6fd9529eaa3db0492e07cb4678ffb55f","sha1":"0f3a92300381d79fd137ed55ac004f6ba24bef9b","sha256":"b56b1e5ca32060409c4aab89bfc7a64692c22a4e2dfc4472abe8d481e074bfcf","sha512":"2025b9fdd8300bb1ef6cc01172c11e23e6abcd70c142bdc1b5936056998715b40427d231a8270137f2c9df63ae7f6a0a1bd951740f0903d9699c9549d52e822d","ssdeep":"192:9tk+cyESb1wtZ6nw8vwV7jOup+DnPeCskha1E:X+X+1wXWw+ld","tlshash":"e5f11d2896116049a3339b3ceff18175e9c522939f4252f4fecda2448fbca685571f8c","first_seen":"2024-06-02T08:08:49Z","last_seen":"2026-04-29T05:35:52.703017Z","times_seen":48,"resource_available":false,"data":null}},"time_used":3246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28600\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpdoftLzrHPT%2F%2Bo7WpKh%2F9xQzRs%2Bs0FzArC3Xsug1Z4nGrCXKenoCeFlSFtpo1OD3%2BIu63vTT0N0C4feXqe8IuuMQc2I%2FDK0ApvXfQBmYiWVRoivew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a4b16b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28600, version 1.0","md5":"de104ab8acb1088aebea1aae24724a91","sha1":"b613f95c303c539ef3fe4fe65db0fbc5e5a55fe1","sha256":"c94f080a550a1f2d4fe07d371969b7a40c01606bd5624e8c03c976cbf5e06058","sha512":"344c715eb0c1b94e5b21c42fb5f985780a82b46cf060176fac3fdd0044bbf692c304c41dfe2ba87603c0b9e5877fd91dcbf14d070fb2689235ef5f1549ff5ea0","ssdeep":"768:ghn4BbkaiWnFKO3QFUB1ECEDGtqOGVA9wk1auZ:O4rcOAUL7UOGW2r2","tlshash":"54d2f1a43e3c381e4445cb3a67646f32071559fd4db274c950a2e2e70d4a7ad8dafb01","first_seen":"2023-05-03T04:10:43Z","last_seen":"2026-05-11T08:21:02.701236Z","times_seen":3049,"resource_available":false,"data":null}},"time_used":1575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1574,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 14360\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Tue, 15 Jul 2025 20:58:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FcOyZA%2FXh1lUdtQViZmsAD0nU%2BZa%2Fb0KbJb62vAh1boXI9va%2F5Dic7PBPhyuKY1uCEP%2BWCbuGfa4c05boJtYNqqEYGt4M6bu51dZ4%2BdZnVICToOZ0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073b878b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-05-11T15:04:30.841767Z","times_seen":170539,"resource_available":false,"data":null}},"time_used":3442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3441,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/uploads/2025/06/lich-cat-toc-thang-7-2025-chau-bui-00-thumb.jpg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/lich-cat-toc-thang-7-2025-chau-bui-00-thumb.jpg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 177413\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Mon, 30 Jun 2025 03:01:39 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwUCba15OHGt%2BOCoU8qsukQnsZSvAWzcNYCMI3921aIWMHAGyOXIQ%2Bj2vd837cv40m5yw%2FfeiQYn6oK%2F3EzhBbloytWeidJTSiD7zXwrdC8szJPkGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d0741890b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":177413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1333x1000, components 3","md5":"53ecc44260165e765cab5da6fdfbc033","sha1":"40164c8c7cfd2825e0470bfaa87a18d8f278ab70","sha256":"6db90e857a13ab5a15181b4251d61f4af7f96936c5e0c5b7b0fe7e3336160e46","sha512":"422a860ea77bc3453a65a788e07e6c447d73ae3a3ebfc05d3a5ddecc1ead50489a08dbd46e10b03b63ac00cacaad676754f7e342ec6f9911a988cef07c0466e3","ssdeep":"3072:r/awAlAWA3JpheVCIJrz2LJovv4gjZg88pHLC1YjkOH2J5NjYHR9aLOJ8:r9WKpheTZ04vZjZl8pbjhHW5+648","tlshash":"8b04122a43c24bab88c29b51c00b36fa0f5b12e615d6def95ca14dff454e62e3d9cc58","first_seen":"2025-10-01T05:21:14.345334Z","last_seen":"2025-12-03T15:03:24.819274Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3356,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/webfonts/fa-brands-400.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/css/all.min.css?ver=6.8.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 108000\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsW45LrlQ6CmMedj8mYTVCDXEnjAU%2B2m9lMnDRYqdbkXmktMury2wLlK%2B%2B0NxoGbsRPz7aEP74BHxfVSK3BHcqvsEyFr8KSQDvCm7%2Bj9iN13UG3wkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a4b19b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":108000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 108000, version 771.256","md5":"83a42241ada98e0f959353ca0c3ee027","sha1":"f1234dff4095688c945513d40751012b70462c03","sha256":"f461742308b7791fee6e9698e1212aa6e8fd1d5e5b41795bfd68e93aa011073d","sha512":"ee0e9c9ebe49a00924f01c5d992f6d987cf5e579e7d593dbededb31b20eb16beb5c583229d476b38cd431c8bddbfe11e8bc62944caad890048e5685d479e9516","ssdeep":"3072:n1gbLdJ3FD1tq/bSfzUA8KdmDy2aoQDPx:0hFD1tq/bSryKdmTaosPx","tlshash":"5eb31208cc5d6bbfc84e468438c057a93c727e78a17272f318ffd5a454af3aba981845","first_seen":"2023-04-14T21:22:23Z","last_seen":"2026-05-11T14:47:18.670173Z","times_seen":1528,"resource_available":false,"data":null}},"time_used":1824,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1433,"receive":391,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21164\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BS9wbXMOQictu4wAa7QB1De5EoTHjYK6RWRExcftxVIPsUUlTc36rtkNzz5s8mHYIu0hGRjlT8ydc5i%2B6RuV6TydFOvWJTdpb%2BRcyEROrEref%2F97gQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a5b1bb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21164,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21164, version 1.0","md5":"9bd1538829fdfca706def314696cd36c","sha1":"18fe91421bab8f4b3482527b82d52c4653fe71b9","sha256":"23f6a194aa459d6db6333993c324eecb57dc1ede07479fd55425a3cba40a3e82","sha512":"84cc9ba895343b5e573b79ca438b6c06fd4d582923e8a7a865ce21a09a745c4aa679de763f744e7582b71481410042f6df8daeb616992992bc10a28d45de0253","ssdeep":"384:L52cLmSbzd/vKnu0OsYTRgucPesVUZZPFQVpRXnN7kTs9kzTK/H34:L5xaS9/iBYTRmZ0QVpRXnN7QWK2PI","tlshash":"3392d0d68c69908db02d6a707db9d0b870f56697d7fc86832c9c48896e835380f0e2db","first_seen":"2023-05-10T16:37:29Z","last_seen":"2026-05-10T22:41:17.206952Z","times_seen":198,"resource_available":false,"data":null}},"time_used":1608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1427,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 8520\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkdrtGdR3rxzAjsRVYV6WxuLGloRvrrgdZlD9Jl64vcOa4jBLsmXUlAPMBC1E8VXrbGzfIbpU1uQGNhyTpQ8%2F3EkIrnjHNszn8BIO03ZWTUI%2BDrdTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a6b1db4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8520, version 1.0","md5":"1e4b134b8940cd8de3cf60b701882d7a","sha1":"09e0f39351371fcb289bd82f798adf6488043322","sha256":"706fb724b0bd69b23fd6095ab2118d201ca02669052fde1fd441ca4f16384437","sha512":"d4a5d0fb5780dcbbbba0d786e20be1d3cc2daaa918dc30d8250a1107f48541a53e3b6414eb0ae05d21da56910d6a68c00289e6bfa2832734b4c76173414f62b7","ssdeep":"192:4aXk1kZeG6HEd3in6/MXCdOMaDeJep7KI97K97O+9FCBr1dzc2j2:pXk1kZeG8EJ1/MXCdOMa6JUKI9G9i6GY","tlshash":"7b02ae2ca75fe8a2e1a20232d02ed425c209b35ee30995649f80eb73cecbe1c5d9b544","first_seen":"2023-06-06T14:22:52Z","last_seen":"2026-04-16T23:43:06.439484Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1247\r\nlast-modified: Tue, 14 Jan 2025 09:40:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QFw9YsBZg7Cl2TXVG3esFp7rLTcZuagm5SGsmLBReFYMtKpFnv5qssJs4Qbqdb255GpBoHkuL656vcVdsNhYE1y09ykgLJEXV13mVfnKXnz9oJUqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a75d074f8bfb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-05-11T15:04:30.85942Z","times_seen":71268,"resource_available":true,"data":null}},"time_used":3056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3056,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/webfonts/fa-solid-900.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/css/all.min.css?ver=6.8.3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 149908\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKaULw%2BS9Vk7HH4ZBd7WJJuFHdSq%2FfDsuG33uxoN5cTzAOMrAEPlH2eUeLht2DS5aMXuiL6GSDAKDmfCWJQdK48L0yVmgs7talKSUaV%2FEtfy8kcvrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a2b10b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149908,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 149908, version 771.256","md5":"44f8148f80e6c3d60fa6425b0cbb862a","sha1":"ec2f4e5f311462dce67b8f354e5bb9a68c12cf58","sha256":"e2c5cf547e2e8d74a17d05c5ad9f1f593ca526452e228124294fa983b908ff82","sha512":"07978f5827f0d5e9191b6970f0a01d10b88e33524c4aa3973d527ace295ee356f907c0374a430785eaabdd1ac06811c841b3da704066044f4d66fa4cc755ec8d","ssdeep":"3072:1q8xfiSXJLOvVpYQgUGUn9bymvMalSSb8S9glCb2XzMZm:A83ZLMVpYKrtPvQRSuzv","tlshash":"b9e312560a90854e7ad8c661360fef0fc28f33ea6ffff2a5e0c1fa8655dc94a2594450","first_seen":"2023-04-07T23:49:37Z","last_seen":"2026-05-11T13:47:25.440135Z","times_seen":2866,"resource_available":false,"data":null}},"time_used":1968,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1596,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazaarvietnam.vn/wp-content/uploads/2025/04/harper-bazaar-cac-dia-diem-du-lich-ha-long-bai-tho.jpg","fqdn":"bazaarvietnam.vn","domain":"bazaarvietnam.vn","tld":"vn"},"ip":{"addr":"8.213.198.87","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazaarvietnam.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 11:25:29 GMT","end":"Fri, 06 Feb 2026 11:25:28 GMT"},"fingerprint":{"sha1":"21:D8:C5:BC:50:B1:61:50:18:1B:16:5B:1B:63:3C:6B:2E:0C:7F:18","sha256":"7B:9D:A6:97:51:D5:7F:C4:DA:B2:D5:06:E4:AE:3B:56:9D:F8:3F:97:B4:CF:DF:1F:6D:DF:1F:55:8D:FB:AF:8D"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/harper-bazaar-cac-dia-diem-du-lich-ha-long-bai-tho.jpg HTTP/1.1\r\nHost: bazaarvietnam.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 01 Dec 2025 21:52:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 188833\r\nlast-modified: Thu, 10 Apr 2025 14:35:51 GMT\r\netag: \"67f7d747-2e1a1\"\r\nx-varnish: 165547485 161283648\r\nage: 3131\r\nvia: 1.1 varnish (Varnish/6.6)\r\nx-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":188833,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 1080x840, components 3","md5":"281b5761a10786f0beac780a42a63bdd","sha1":"1f981cdbc34f4274c8f10558c2ab7886eae086df","sha256":"9d7ee64aee2ec002779af6c58ea89504082e9475fbf3452755c1e3d282fe2550","sha512":"dcc7bb57889ee30631b5492e0efac24d4d0f2eb2ff1c8e74ff2750f80b975ad4bf5eefdb64c59caecc83eed973b81389f403713ef0f622c477cf6098c6bf82f9","ssdeep":"3072:WpT+q4d2V+CfWUwzSV/K9QZp+0YFtH07Bb43jdJbsIQqms4iEsL:Wp8sVNfHwzkK9Op+0eC76DbbQqmOEsL","tlshash":"8e041248955602f354cd9ae4cb1b22ee8b81db8af35dbedb502b2b60308ef971c15d4c","first_seen":"2025-12-01T21:53:24.627174Z","last_seen":"2025-12-01T21:53:24.627174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2980,"timings":{"blocked":878,"dns":322,"connect":280,"send":0,"wait":282,"receive":930,"ssl":285},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 8520\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2B4pr42uo1PHNhl3d38Iny3ipy6erGcOlAwVNW9WIIK8k45aNWGR6JhVwAf732ZbBd8uSbsvSYXMsl1FwP7ssaibOyOnDXaC6jCpEiaX43F%2FPD0XJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a4b17b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8520, version 1.0","md5":"1e4b134b8940cd8de3cf60b701882d7a","sha1":"09e0f39351371fcb289bd82f798adf6488043322","sha256":"706fb724b0bd69b23fd6095ab2118d201ca02669052fde1fd441ca4f16384437","sha512":"d4a5d0fb5780dcbbbba0d786e20be1d3cc2daaa918dc30d8250a1107f48541a53e3b6414eb0ae05d21da56910d6a68c00289e6bfa2832734b4c76173414f62b7","ssdeep":"192:4aXk1kZeG6HEd3in6/MXCdOMaDeJep7KI97K97O+9FCBr1dzc2j2:pXk1kZeG8EJ1/MXCdOMa6JUKI9G9i6GY","tlshash":"7b02ae2ca75fe8a2e1a20232d02ed425c209b35ee30995649f80eb73cecbe1c5d9b544","first_seen":"2023-06-06T14:22:52Z","last_seen":"2026-04-16T23:43:06.439484Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:58.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21164\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BG8ZEZM0e4RUWBJg1gehjZXmnv8TMXYRfT5BEzrmRn19Ir6rC2z9CIxdXheU1k6gWYY%2B5miJs%2FDEJWPOBZtAK8GhdsswhWPHFVt7oM4G7qh3osFrVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a8b21b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21164,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21164, version 1.0","md5":"9bd1538829fdfca706def314696cd36c","sha1":"18fe91421bab8f4b3482527b82d52c4653fe71b9","sha256":"23f6a194aa459d6db6333993c324eecb57dc1ede07479fd55425a3cba40a3e82","sha512":"84cc9ba895343b5e573b79ca438b6c06fd4d582923e8a7a865ce21a09a745c4aa679de763f744e7582b71481410042f6df8daeb616992992bc10a28d45de0253","ssdeep":"384:L52cLmSbzd/vKnu0OsYTRgucPesVUZZPFQVpRXnN7kTs9kzTK/H34:L5xaS9/iBYTRmZ0QVpRXnN7QWK2PI","tlshash":"3392d0d68c69908db02d6a707db9d0b870f56697d7fc86832c9c48896e835380f0e2db","first_seen":"2023-05-10T16:37:29Z","last_seen":"2026-05-10T22:41:17.206952Z","times_seen":198,"resource_available":false,"data":null}},"time_used":1584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1404,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:57.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28600\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:47 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bCsQozd3PuS%2FQWgb%2FEjweV31TG1TfGkfOGJEIopJ%2FNVNUFSGpB4B0jOt14e5AlAjX4TTIZ%2B9tVZaBE3EUkpgRyI7JsXKhnPMyFlUfp1urImRVNsFYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a5b1ab4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28600, version 1.0","md5":"de104ab8acb1088aebea1aae24724a91","sha1":"b613f95c303c539ef3fe4fe65db0fbc5e5a55fe1","sha256":"c94f080a550a1f2d4fe07d371969b7a40c01606bd5624e8c03c976cbf5e06058","sha512":"344c715eb0c1b94e5b21c42fb5f985780a82b46cf060176fac3fdd0044bbf692c304c41dfe2ba87603c0b9e5877fd91dcbf14d070fb2689235ef5f1549ff5ea0","ssdeep":"768:ghn4BbkaiWnFKO3QFUB1ECEDGtqOGVA9wk1auZ:O4rcOAUL7UOGW2r2","tlshash":"54d2f1a43e3c381e4445cb3a67646f32071559fd4db274c950a2e2e70d4a7ad8dafb01","first_seen":"2023-05-03T04:10:43Z","last_seen":"2026-05-11T08:21:02.701236Z","times_seen":3049,"resource_available":false,"data":null}},"time_used":1559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-01T21:52:51.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 01 Dec 2025 21:52:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nx-powered-by: PHP/7.4.33\r\nx-pingback: https://sukhoedoisongedu.online/xmlrpc.php\r\nx-redirect-by: WordPress\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSq0QHu3bMw1tR3LbYaE3LjHinS7fRuu3d%2By4%2BnAq5imusEipJxTJOHhAi42sG0AuO3Viv%2Bej2gWY2FlIzbo%2Fl3LA4yd4txJptWW4HdwaTlzbUc7VyD%2F\"}]}\r\ncf-ray: 9a75d0646da1dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":188647,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T15:03:04.78143Z","times_seen":15013264,"resource_available":true,"data":null}},"time_used":1147,"timings":{"blocked":86,"dns":67,"connect":1,"send":0,"wait":975,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/css/dark.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/css/dark.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 945\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wt8sOAdFm8FCSkvD5IltltoinMUzWjqourvH75rr1JQCMj9Gsg8PiEXPO%2FcffPI76jLDlV6j2dj23W03DueIlcBGrJk%2B8q6Z7i7O4wupP5FmyexYyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c87fb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5462,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"313ebea0d4dc6f84646c0379df16a9c1","sha1":"06db729e7a07abaf2ab8446ebf0ef036631762e6","sha256":"31b157a9336e1f46a80d3271274f402759608380b6b47bc72d0047718d8d3dd3","sha512":"7c7bc5616a6d063382b2b30cb7d9a9791a99b2b448b2dbb4aad10d77fd9e9632b8de2a610e14c7507a65d0b2e024e9f35295703e06d04705bb566e44449a4a26","ssdeep":"96:drAgyxyW9/vmDFcNV9Lp4U1Cq0Bm99o1/n:NkM8mDFgqHn","tlshash":"a6b1774860a27f92077247283e8d9c815e7e12b688180cff397e53f916e165802e7efd","first_seen":"2024-06-02T08:08:50Z","last_seen":"2026-04-29T05:35:52.730702Z","times_seen":48,"resource_available":false,"data":null}},"time_used":3198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/uploads/2025/06/cdnmedia.baotintuc.vn-upload-3qvxwvtnepp6wp9kkf77g-files-2025-06-30-_tbt-1.jpg","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cdnmedia.baotintuc.vn-upload-3qvxwvtnepp6wp9kkf77g-files-2025-06-30-_tbt-1.jpg HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50920\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Mon, 30 Jun 2025 02:52:59 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oshqkM6%2B4SqBHH77MZ9HE7BrK3N%2Bc279MxKWDoIo3h1xiVaT7VWRJuKSOMBLKYis6eWtGqGdEdsKiFH%2FjA1knO3wmT%2BZU9gVI8WJ6U3EVDe%2FBaLfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d0741891b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 600x315, components 3","md5":"61f3aa8b9dc82df3f05edfdbe89fd150","sha1":"67a17722236077099980bb3202d081203cba72be","sha256":"850ee785182c952449dff79f1a6230dabcc29b06e33a55bf009d0d6bda3f5a78","sha512":"c8167dae2263e4345700b99d8d44d19f899e14d2a42acb0099908be08a1a50b03da74a17f90902a36fcc8bae6976d9d1eeb31d6c6f7a3e3cf5da6ff4321ba32f","ssdeep":"768:8KelleHqeblyLq3w/3rjb4UyctbsJby0LkgOrT9mh11O71nj4139Ta:Zslj4+IY0LkDrT8rM49a","tlshash":"bc3302abe069b68b1f154c172534cb50f84c9ee18fe68b9734e506b0235ff882d95eb4","first_seen":"2025-10-01T05:21:14.343544Z","last_seen":"2025-12-03T15:03:24.824031Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3367,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/js/theme.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/js/theme.js?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2259\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DPk407%2BmQ%2BXFw5P%2BusW9EbEOSKeCxDzpa6T5Bvl7YTL0tog2YeMojumIkjbIy1OZ1GPjFNYtAzyYImyiTIKvzbIpgxCErs5cJsfazvyH%2F2Ira%2BqRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a75d074f8c0b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13469,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (473), with CRLF line terminators","md5":"be8e2de89a460c2a21997aa57b85066d","sha1":"27b31e21bb4b3633aa93f37d99f4d2f6f8296471","sha256":"70980eb806390a12c56f11e1112be924822f1bfb32e6fc579613e7344df75567","sha512":"a916386a810991d842315b668d2a39b892adf5d303ccb9f76ec55bc438753564905aca55dc97ab6ae5b69bc48dd97360fb83c310019af2d9e136b88506472265","ssdeep":"192:n/LDa1Z7vP0cR8KDIlMlU7vN0cR8k4j7yX0cR2kesy7yc0cR2kkjh1f:nDDa1Z73tElN71/4j7iVdy7BVIh1f","tlshash":"5c524319b29855bb81bb12a9ba6e9504f5710baf54028e0b7c7cd6c80f72c6043b5fbd","first_seen":"2024-06-02T08:08:45Z","last_seen":"2026-04-29T05:35:52.673748Z","times_seen":47,"resource_available":true,"data":null}},"time_used":3053,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":3052,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazaarvietnam.vn/wp-content/uploads/2022/08/harper-bazaar-nhung-noi-dep-nhat-the-gioi-7.jpg","fqdn":"bazaarvietnam.vn","domain":"bazaarvietnam.vn","tld":"vn"},"ip":{"addr":"8.213.198.87","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazaarvietnam.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 11:25:29 GMT","end":"Fri, 06 Feb 2026 11:25:28 GMT"},"fingerprint":{"sha1":"21:D8:C5:BC:50:B1:61:50:18:1B:16:5B:1B:63:3C:6B:2E:0C:7F:18","sha256":"7B:9D:A6:97:51:D5:7F:C4:DA:B2:D5:06:E4:AE:3B:56:9D:F8:3F:97:B4:CF:DF:1F:6D:DF:1F:55:8D:FB:AF:8D"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/harper-bazaar-nhung-noi-dep-nhat-the-gioi-7.jpg HTTP/1.1\r\nHost: bazaarvietnam.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 01 Dec 2025 21:52:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1087653\r\nlast-modified: Wed, 24 Aug 2022 12:04:08 GMT\r\netag: \"630613b8-1098a5\"\r\nx-varnish: 165547487 170134478\r\nage: 10\r\nvia: 1.1 varnish (Varnish/6.6)\r\nx-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1087653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x667, components 3","md5":"4c8f95343a997e1be0c628f13f87b121","sha1":"e56a4304e66b6836edbb20827bfb7938531e980b","sha256":"7d99cb045ed094f9bdd288ae49ea25c6b3e52f5dd5c636031b2ed52e2891aba6","sha512":"d210dce3a747e81043f4c6dc567a75ab02f8f15f2286a05d161e2d2de958c40fd4de435b2cd5b73a5f0be50b3b2e7a0d66a388b0bee4cd981f978d96a44efbc5","ssdeep":"24576:oG/GpojrfH2EUaPNU0VUVUnrVH5Rsa4aZ6rAk5gVIJpn:VGp8z2HeUZ2BZSjaorAk5gVIJF","tlshash":"c92533751ea498e7d4ad273b8423144cde4feca532a2d544e0f01babf7c931648ee279","first_seen":"2025-12-01T21:53:24.631262Z","last_seen":"2025-12-01T21:53:24.631262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4253,"timings":{"blocked":889,"dns":324,"connect":284,"send":0,"wait":1130,"receive":1332,"ssl":291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/js/custom.js?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/js/custom.js?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3195\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzNRhCGYQtCikEy%2FCxwsQZirLLQt4GDPoSUuoxM99gCRzXuIiWMEo2ACNpTlEZsTnZ5Ptb1fETSZJHPeEfQjLcF%2FQaBSUC04qcOnnEphV9LrHGsDKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9a75d074f8beb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"35ba81659145ee0ca18ca15f13f0b9fb","sha1":"a3eb8ce286f406fc872c8d7981ed4e727e008907","sha256":"579f79956265e8d98afc74509e1b2b0f4cfea5d6db2c60b0939ca34f47790376","sha512":"06735c4881c1e44b3e35dbad1de29ee796e7db46e9d1f0cb476800f4a98f211bc6dc6a01a989c885c104804e6c5b4c5211547cc26676056d52846ea743e99e9a","ssdeep":"192:cimX7fCpo0wAm3/Mv92iwvPmgfBmbOC7ylm18rU:ci47apKx/Mv92iwvPmgfBmVy818rU","tlshash":"9672100cb52050a98a7b7b369f7aa548fb3a2767110087a7bdfe15940f307493291fed","first_seen":"2024-06-02T08:08:45Z","last_seen":"2026-04-29T05:35:52.722354Z","times_seen":50,"resource_available":true,"data":null}},"time_used":3054,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3053,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsdaily/style.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsdaily/style.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 2070\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZqvBkCBxQoJ5zZ1B6iZoi37macYiO9NxVJ8TcvSdQxC56xVDJ%2BIgAVHcD2vLv7xXSu5x%2FEamQtW%2FY5fNrDXpl8xu6QqQ0p9XL%2BFkaWB%2Br87oe%2BxSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c881b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7742,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1094), with CRLF line terminators","md5":"f084949705510fdb1f36f243c47a0792","sha1":"4787b32adb8fc6ddd476f4a66653cce0a8279e5c","sha256":"6c784076efd367157826ce3ba450ed7e69c1689ee236ac246aadb6487d45510d","sha512":"45fc1d789a33fb6c25c646d05fec4c55b3743503db006a10a12a2f2a0b4e207a7767eb13a7144e9aefe19ef7ef1a78f331f57cc8db94b0a358319926331a7809","ssdeep":"96:8neXf1/DgkF/shQbqUWWhk5ufht3JfH/yOfV4+sEc4f+ZvWTI3O8PdEcgG1Vh:Set/EkF/shQbqUWtOXd6OfVJsUIe8hL","tlshash":"ccf15254c3337ae202734f7867b2a541faf420939b4642a6fad9d5c42ba813856d1fcf","first_seen":"2025-10-01T05:21:14.353871Z","last_seen":"2025-12-03T15:03:24.795376Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/css/woo-styles.css?ver=6.8.3","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/css/woo-styles.css?ver=6.8.3 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 11327\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:57 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yGotZ%2FtRgYnYl8ttgMYmuL856VsGM6kZtDdId2gnMpy%2BqV4BDkjLbhFldPcJ5q4BdkdQ8%2BA16I9pcYc3yrtYJH1RR3JhQJ%2Bp6q%2Fu6RblRQIGR%2Fu5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073c87eb4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (339), with CRLF line terminators","md5":"3cf37a758e0278403b4ec93035bb2161","sha1":"cc170dba38bb4bdc832282f6c2754d89d57a9f35","sha256":"57f4cfa677a428dc2933260dfaeb28380ac77643f73b1e1db901a5e5735b3f4c","sha512":"aa528ce6676b80b0e0e7f130bb2bca0bad9f57fbc7627521a86c21e83c1280900d49b7f6aef7bcd38fad7a64ce2fcdcd14346eeba5478fbe8eb374b7b759aec6","ssdeep":"1536:pU3NcBRxqrY1gtXltrysP5lzZHiPpzkf3RwT33NVADfkIuohc8W80rnEHN8WH1Q8:GNcBRxqrY1gtXltrysP5lzZHiPpzkf3J","tlshash":"8f730fdfd630691133f9baa86fa529c1fd08507b67450274bd942b4c8bfa0da7222f4d","first_seen":"2024-06-02T08:08:50Z","last_seen":"2026-04-29T05:35:52.679416Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/themes/newsmash/assets/vendors/js/slick.min.js?ver=1","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/themes/newsmash/assets/vendors/js/slick.min.js?ver=1 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 10103\r\nlast-modified: Sun, 02 Jun 2024 12:57:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uVAzTJ3qWA1BxrYfvCQ2OeIfmVS01yRFBWWIUVAzQDGpx67gncw5t59RFvboFvAP71cxKJg0SklJ2KlqATOeWG7VEmMi5CZGir8jcJI%2FP%2BFv60Mfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9a75d073d886b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41953,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32076)","md5":"b53bdfc29e18f4d493d775a8023fbdc8","sha1":"e9fcbcc4fa70cba093b81d982a1b78509414cef7","sha256":"e02af7df9a190d88380e2dcec2050ecaa493ae2d23526dbeec67f6907df3a752","sha512":"027e1adc510cc91e416cef4245042a82c06c7318cceee34d99c71448448d56d5a7e77116c7907da0eed15673ef3c6e847187183e9d06bf78bf410e0a53307958","ssdeep":"768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsJ:X0tVUkkK1GPz6QrG1AJ","tlshash":"04139509d204372688eb12e57105c14ea3fbfababd12c0f076c987d6606d81d86e77f6","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-05-11T14:41:25.827167Z","times_seen":16115,"resource_available":true,"data":null}},"time_used":3221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3216,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bazaarvietnam.vn/wp-content/uploads/2025/04/harper-bazaar-cac-dia-diem-du-lich-ha-long-1-e1744295874283.jpeg","fqdn":"bazaarvietnam.vn","domain":"bazaarvietnam.vn","tld":"vn"},"ip":{"addr":"8.213.198.87","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:54.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bazaarvietnam.vn","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 11:25:29 GMT","end":"Fri, 06 Feb 2026 11:25:28 GMT"},"fingerprint":{"sha1":"21:D8:C5:BC:50:B1:61:50:18:1B:16:5B:1B:63:3C:6B:2E:0C:7F:18","sha256":"7B:9D:A6:97:51:D5:7F:C4:DA:B2:D5:06:E4:AE:3B:56:9D:F8:3F:97:B4:CF:DF:1F:6D:DF:1F:55:8D:FB:AF:8D"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/harper-bazaar-cac-dia-diem-du-lich-ha-long-1-e1744295874283.jpeg HTTP/1.1\r\nHost: bazaarvietnam.vn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 01 Dec 2025 21:52:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 384724\r\nlast-modified: Thu, 10 Apr 2025 14:37:54 GMT\r\netag: \"67f7d7c2-5ded4\"\r\nx-varnish: 168726562 170132706\r\nage: 3124\r\nvia: 1.1 varnish (Varnish/6.6)\r\nx-cache: HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Varnish:6.6","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":384724,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1802x1000, components 3","md5":"1f6f1bbb0be0bb34d5f644a34fa55852","sha1":"38a5019fe5d2f43ba3b8763120de68dfd09fca1d","sha256":"c6dd0705e5835f68b5ebaeb82c6f9fed9eda669742c622b44f0b8df48aad7dbf","sha512":"75cbcf6ca0c5a61815aa582b60b2a6167916c7056cdd8aa07c844fc58710fcdc6af00c1d8f3bbd247c38f0bd5bb3f9cdceb060b41f3e4630c8e767842e9c31a1","ssdeep":"6144:5ka1C8H0LHinQXGnpZu3R++496M+tvfn1LCtVa7CqZL48t9CM:r6Ay3RCcM+x0g4W9d","tlshash":"7f8423d38f1744f4cbe609b3d9575b9e2ea347376b089ca612bf18baa40c6913028775","first_seen":"2025-12-01T21:53:24.635402Z","last_seen":"2025-12-01T21:53:24.635402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4272,"timings":{"blocked":903,"dns":322,"connect":290,"send":0,"wait":1116,"receive":1339,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sukhoedoisongedu.online/wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2","fqdn":"sukhoedoisongedu.online","domain":"sukhoedoisongedu.online","tld":"online"},"ip":{"addr":"104.21.25.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:58.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sukhoedoisongedu.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 10:27:10 GMT","end":"Tue, 13 Jan 2026 11:25:56 GMT"},"fingerprint":{"sha1":"51:75:DC:5A:17:21:78:24:F8:D0:6B:C2:FA:DB:F9:FD:F8:88:63:2F","sha256":"20:91:80:EE:22:19:64:3D:0A:CB:D4:20:3A:6C:5C:A6:94:19:B7:82:51:1A:66:08:3B:43:E4:58:A2:04:77:0E"}}},"request":{"raw":"GET /wp-content/fonts/josefin-sans/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2 HTTP/1.1\r\nHost: sukhoedoisongedu.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/wp-content/fonts/4fb548b21afb8f60194ec0fab83ab898.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 8520\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 08 Dec 2025 21:52:59 GMT\r\nlast-modified: Sun, 02 Jun 2024 12:57:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEd3SDLg%2FJ8anrCgWGJvSBqiqS7iTKZIYNDu870xEfVXEOCCKL1EM8PoZsH17eCTqGGPIlXlxBsx3FsuVCI92ucPqEs7vAcLsLN%2FTyv3l8pBYHNe4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a75d08a8b23b4f9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8520, version 1.0","md5":"1e4b134b8940cd8de3cf60b701882d7a","sha1":"09e0f39351371fcb289bd82f798adf6488043322","sha256":"706fb724b0bd69b23fd6095ab2118d201ca02669052fde1fd441ca4f16384437","sha512":"d4a5d0fb5780dcbbbba0d786e20be1d3cc2daaa918dc30d8250a1107f48541a53e3b6414eb0ae05d21da56910d6a68c00289e6bfa2832734b4c76173414f62b7","ssdeep":"192:4aXk1kZeG6HEd3in6/MXCdOMaDeJep7KI97K97O+9FCBr1dzc2j2:pXk1kZeG8EJ1/MXCdOMa6JUKI9G9i6GY","tlshash":"7b02ae2ca75fe8a2e1a20232d02ed425c209b35ee30995649f80eb73cecbe1c5d9b544","first_seen":"2023-06-06T14:22:52Z","last_seen":"2026-04-16T23:43:06.439484Z","times_seen":26,"resource_available":false,"data":null}},"time_used":1353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/27a1.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sukhoedoisongedu.online/16-dia-diem-du-lich-ha-long-khong-di-tiec-ca-doi/","date":"2025-12-01T21:52:59.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 19:44:42 GMT","end":"Sat, 24 Jan 2026 19:44:41 GMT"},"fingerprint":{"sha1":"FD:D4:B7:E9:AC:7B:28:11:0D:96:A9:CC:26:88:07:21:A3:BD:51:DE","sha256":"E6:36:0F:D2:9B:17:E4:A8:11:A6:86:BE:23:8C:5A:3E:36:6A:2E:39:90:F1:28:C5:6D:5F:8B:4B:3E:FF:1B:12"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/27a1.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sukhoedoisongedu.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 21:52:59 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 242\r\nlast-modified: Mon, 26 May 2025 14:09:55 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"464b4ad3ec906581bdc288c42780b3c9","sha1":"7fd81bf366663e16e9f0a60216adc18561a4d50f","sha256":"8ab75b37e150efe65cdfd300029b88de8355d72c7bbb5d2055f902aeaec3c14d","sha512":"8ae9dedcc7761c46f6b093417764c9277cb0095bdd9faa163baa74a14481d0a545a8a7009b7329362fdc3150fe08ee4f36285a932923cffa1cb9fdecc29657aa","ssdeep":"","tlshash":"e3d02e94d0ace4c28600cae03e9932c129aa03b6208204aff0837b1c958a6de3642e68","first_seen":"2023-04-06T22:22:04Z","last_seen":"2026-05-11T15:28:49.213068Z","times_seen":679,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":26,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}