r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11358
Expires: Tue, 06 Sep 2022 15:08:35 GMT
Date: Tue, 06 Sep 2022 11:59:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 06 Sep 2022 11:04:17 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ixcSsOJfH_UYOrW5ZjoWUjhyIwYJTUkWupY956FBeI5BhWHXXWpAAA==
Age: 3300
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 06 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oqPJfk18l9JKjelOu4lLRB0Dkgklvp3A5JhD2BqSuqeN8hqgoXnmFw==
age: 38640
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Sep 2022 11:59:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/
302 Found 214 B IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b3c0ba593c82eab1a2babd3103ac0d18
1aa298038b103370b28d4034ea22251badcecc06
beae3eeca352da2dd6d61c7094e0cb22a08754186f2741dff21bbbec63412fab
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 06 Sep 2022 11:59:15 GMT
Server: Apache
Location: https://bunquayphuquoc.com.vn/
Content-Length: 214
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 06 Sep 2022 11:38:18 GMT
Cache-Control: max-age=3600
Expires: Tue, 06 Sep 2022 12:38:18 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lGbk9rqpu-milIcgb9vEtagJ2VBCV0htN27BO0EKfcZEF29mQsZfWw==
Age: 1260
ocsp.digicert.com/
200 OK 471 B IP
Hash e8952752ad4a452a575522a7eb737217
c5554fa2af05d7a7117032b0f99352de08988346
8c182bed7bbd843774a2136823b30a4cb707e2a5386f71d01640aa3558888bf7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3935
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:18 GMT
Last-Modified: Tue, 06 Sep 2022 10:53:43 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: enzfYkObFAPP6tgKEsALCw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uj0A4xalHu1dOZbcVXzGUAXaxPc=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-115930386-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-115930386-1
IP
File type ASCII text, with very long lines (1615)
Hash 98b4e3b96f872ff306c9ab716a745917
91594dc2bd22e0c210a3fa283b748173eb8375b5
24fc4f65af47b935544c03da098fad97263c5027a743ad45d34040fbf47ae0d0
GET /gtag/js?id=UA-115930386-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Sep 2022 11:59:19 GMT
expires: Tue, 06 Sep 2022 11:59:19 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Sep 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41848
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f41565238dc856269109dcc30c34c535
28517f51eb3b6cd08981afbf878446d635430741
9e314961a8fca836481ea022db365cc463bcef3b5003c63ccece611b8ff77fe6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bcbb9bf29f1e0acaa7ac6d6566381370
dec1bea642dffbc11ebd6d65c94f87d6db95703a
b2bf22379151923244cbb9bd62499ded7b6f313a7db77914383bc1e704dd65de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bunquayphuquoc.com.vn/css/swipebox.min.css
200 OK 4.3 kB URL HTTP/2 bunquayphuquoc.com.vn/css/swipebox.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (4308), with no line terminators
Hash 7c51c795aa0d12bee95b7dbdb4fbd500
22f76fc2b16236fbb17d49c635789b70b97dcb80
e4a465b7796cdf1572bb416feccea1bc31f4c020ea1eb6b29a3881b4e0216595
GET /css/swipebox.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:30 GMT
accept-ranges: bytes
content-length: 4308
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/flexslider.min.css
200 OK 4.3 kB URL HTTP/2 bunquayphuquoc.com.vn/css/flexslider.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (4294), with no line terminators
Hash 9376fa06203aa370679ff42c1e7a7c7c
485425a1005ae2d1072a8f23ee674705d74252ef
7a736e74c7dd618ba52146dcf5077ad22b31e75d26af26b1c8f1b634d94334fe
GET /css/flexslider.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 4294
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
200 OK 1.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (3601)
Hash d4c78fcda598ce00a38b0effd649e200
e3334dd6c15dd4e6b074b719ac472c6ef0ab56e1
effdd1f8a303725a5f6f7437555bcb36a281bf82cf7d1c2f110291cc5be4db7f
GET /ajax/libs/jquery-easing/1.3/jquery.easing.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bunquayphuquoc.com.vn
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Sep 2022 11:59:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 1507
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-15b3"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7905979
expires: Sun, 27 Aug 2023 11:59:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1jScbI4AlCvPsKPdzJ0QtrLxi88yHawwGZx08BJj3uC8OuUGe6BnCjCqbo%2FpnOjYwn7Ua96elhNGYLOTIiwIdxB069TTiNfqpCZ0mGZqktv7g1mcrXTgN2oW6HYr2Y4tV3toRXyx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 746709b76f16fab4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11569
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 11:59:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11569
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 11:59:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11569
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 11:59:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11569
Expires: Tue, 06 Sep 2022 15:12:09 GMT
Date: Tue, 06 Sep 2022 11:59:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa58df54c-7833-44ce-9519-a44b50319614.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa58df54c-7833-44ce-9519-a44b50319614.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a87857b93f99eab3118aae97a1c9d22
3aea6a5aaf5ccda356d7e0941b33a7c2e2b13e80
97ce11c0e0efe83d6568f173f9235160157c52b4ab4299823d508c072f113ddc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa58df54c-7833-44ce-9519-a44b50319614.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5775
x-amzn-requestid: dc0a6d9c-5aec-44a3-be54-69cec17f9de1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAYfxE0noAMFz0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166dfe-6c8ec4b03fc761d81c988132;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:45:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: z3WamVQsZqAoYnfPZ0rgyYXGzs1jsv56D1oF4Wzva-H-T8a-xPU8mg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:00:00 GMT
age: 50360
etag: "3aea6a5aaf5ccda356d7e0941b33a7c2e2b13e80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c81f3df885bdee8cac46ea9495e6b63b
fc766bca874a352a4acb569577d4cf6527f4f074
e21473f88c613ca33ba6bbe1e0cab338274a06744cdcb088f14873c972445b36
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ad09c5e-a115-4ff7-9742-809e93046365.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4426
x-amzn-requestid: b5b68557-e46d-41cd-9b11-d996aabc0de7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzfYTHHFIAMFjFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631145ce-1d3504367cf6ef724a345564;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 23:52:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GSRJIWisH465dPqbKyPj1iZk1jAu3RGrgwj1CX3X8A397zv9Nt0cHA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 08:35:06 GMT
age: 12254
etag: "fc766bca874a352a4acb569577d4cf6527f4f074"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ec466c0d472e43c11d36bf6fce068205
720d3624a76d060b8e2699e9aa7a320e3efd4878
5553fc24713aae808f5ab81671551b0ae719435f3ced9f25df97d8edf6bfe86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106059e1-95ed-4ffb-b6d2-7b4f160333ed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12683
x-amzn-requestid: 6127e5b6-72f6-40df-b400-41a1f147f6da
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8XmEe0IAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117430-2b27a2683d2d320172cef32e;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Mj_IT5g7hGu2AunKK7mvierv5BQ8cAxhnbGaUNsL6hRNu6MRAzIBDw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Sep 2022 04:31:02 GMT
age: 26898
etag: "720d3624a76d060b8e2699e9aa7a320e3efd4878"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 19b452d6541a6028e7d3f90529477077
1c16eb50bc2490b4ebff6775ef611fdcb282f9f9
f4763a0f464067991c2c484c384df4fe791d7df6e3d6ad15650a954db537249f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F228f042c-3a57-45c7-84c2-4aaaa1dd2f07.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10694
x-amzn-requestid: c3d2f71c-927d-41f6-93ab-bf041374a9f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAWsgHQOIAMFvSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166b1c-5d2efd595cdf300972f4fb79;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:33:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eikhT8BkN5e163S6QriQybdyPNTKDTf3BCsHifNwfBJfrWv7LqgL8Q==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 22:06:45 GMT
age: 49955
etag: "1c16eb50bc2490b4ebff6775ef611fdcb282f9f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 983e705542fa78b4d5c876e0c1eada7e
5fc951e5236edd282d4975853ca35dab2e55fb17
fa6e478fc213f6cb6c9f33c96c51105262c857bfe313b3d310755be30b1feeb3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1756524-f0d1-4149-aa44-603b827f87d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6656
x-amzn-requestid: 2703eaf4-1a5a-41a6-859b-47255865efb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YAX-3F2ZIAMFpLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63166d2b-6df026de5a9230ed429d08c1;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 21:42:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FIIvB2jeQ_PBDzi8XRN0jnNxze3OwDbz8TBaIcadRvmQd2EFhCwX7Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 21:44:33 GMT
age: 51287
etag: "5fc951e5236edd282d4975853ca35dab2e55fb17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c4b2d6a516e93799b54fe2bbd6630f86
b5a7380f294876dd308c7fde294f36a425c1be01
7463878d8967ff31d7ce20d5a4408c23ad59123032a990c21a47df0881edcb86
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F326e03cd-e1aa-45a4-8a6b-bdd21f21012c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5377
x-amzn-requestid: 2adc68e8-1889-4233-8ac4-e2a8d44ccbdd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X_4XzF1FoAMF3AA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63163a98-5918897d7de556f75bbfab34;Sampled=0
x-amzn-remapped-date: Mon, 05 Sep 2022 18:06:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DpNb6dBygeDbRbFWIkeXYVddcgxlSVuq4y73JvG315Xp-wkwiDhZyQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 18:06:16 GMT
age: 64384
etag: "b5a7380f294876dd308c7fde294f36a425c1be01"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/slick.min.css
200 OK 1.2 kB URL HTTP/2 bunquayphuquoc.com.vn/css/slick.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (1249), with no line terminators
Hash a99832be9a0b26dd120e71ce56ab98f5
3eb520c58e045ffe4811e0fa3f0bddeaeae4e901
5de565d97952e932b9b30eee2ac725abd876f166d73225d751e3047b53328721
GET /css/slick.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 1249
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/component.min.css
200 OK 1.3 kB URL HTTP/2 bunquayphuquoc.com.vn/css/component.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (1274), with no line terminators
Hash 9f9cb1e6623030b18e1496b52cb8b120
1177723bb896bec42e104d2a867a14597ffc93f3
a09f831050039578b7d63ce204e1c57a40a8d4dc9f6691a0b300660786096bd1
GET /css/component.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 1274
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/slick-theme.min.css
200 OK 2.3 kB URL HTTP/2 bunquayphuquoc.com.vn/css/slick-theme.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type Unicode text, UTF-8 text, with very long lines (1512)
Hash 8f8a1802a5323e5ac6bcac60fbad96ba
326d6fdd25113f6db9b2457aa6007e50d29fa76a
b85909c89117b5e42e230f9bdb9356f3886eca293826761740b3eea1c299f053
GET /css/slick-theme.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 2302
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/style.css
200 OK 1.6 kB URL HTTP/2 bunquayphuquoc.com.vn/css/style.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 6c1c3b5fd120f4436616ae45b1f81bce
12833557d034f733cce0ca19179cacbcfd25453d
1b36ad4ad8b1d4ab2d8e69852b2d83decd8ab87211738cb73ff79ebb8c54e510
GET /css/style.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 1609
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/bootstrap-datepicker.min.css
200 OK 16 kB URL HTTP/2 bunquayphuquoc.com.vn/css/bootstrap-datepicker.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (15543)
Hash e3aa3b513c03a91adf5474be7dc7734d
22d534b9acce55b8244e17549e3bf9b0c6128412
574361a38b23bd8b339c030155206ad98b9a43c0835efe0545da08cbe61fe339
GET /css/bootstrap-datepicker.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 15731
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/font-awesome.min.css
200 OK 31 kB URL HTTP/2 bunquayphuquoc.com.vn/css/font-awesome.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /css/font-awesome.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 31000
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/animate.min.css
200 OK 56 kB URL HTTP/2 bunquayphuquoc.com.vn/css/animate.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (55716)
Hash 64f80033a9fb285a50ad0df502e1f28c
b11ff0c4f6403ce340a9da8a8d27dbb062094f28
dae2e475ab3a9e593933485173c2cb41f4c4925e0d3cb24f34fa7e3781282abd
GET /css/animate.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 55906
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/bootstrap.min.css
200 OK 121 kB URL HTTP/2 bunquayphuquoc.com.vn/css/bootstrap.min.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (65371)
Size 121 kB (121200 bytes)
Hash ec3bb52a00e176a7181d454dffaea219
6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68
f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /css/bootstrap.min.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 121200
content-type: text/css
date: Tue, 06 Sep 2022 11:59:17 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/html5shiv.js
200 OK 2.4 kB URL HTTP/2 bunquayphuquoc.com.vn/js/html5shiv.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type HTML document, ASCII text, with very long lines (645)
Hash 0ce8f355891c26c28f057e195e97dcd5
3c7b369485cadd585d24be44701e459c8aa54d60
8c7a9c0470563367ab00307b4fb9bb3052d0a27f0b94e63b9dc0bb8c369449cb
Analyzer Verdict Alert fortinet Malware
GET /js/html5shiv.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 2429
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/respond.min.js
200 OK 4.4 kB URL HTTP/2 bunquayphuquoc.com.vn/js/respond.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type HTML document, ASCII text, with very long lines (4204)
Hash afc1984a3d17110449dc90cf22de0c27
b5aba40d65b0d6f85859db47f757ea971a0efd30
83a8807ef669fa70d0d9375347f5552897f76c6ae8e2e6f97ef592595462d8d1
Analyzer Verdict Alert fortinet Malware
GET /js/respond.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 4377
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/widget.css
200 OK 6.5 kB URL HTTP/2 bunquayphuquoc.com.vn/css/widget.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 5732a695c57d1a2d23031c5110ebfa20
b5a9a5dda4e35d7e7bb35de1413531c289e704e5
1a37532edc1a37b6bd522978f90f84eed0376d66f52afad6c3af753aafa13516
GET /css/widget.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:30 GMT
accept-ranges: bytes
content-length: 6518
content-type: text/css
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/extra.css
200 OK 8.4 kB URL HTTP/2 bunquayphuquoc.com.vn/css/extra.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 8b00e12db675d031e2cd9759489e86b5
440f510b2f9cda5da39ea1dc5228c775332a7c5d
c5ecc07b0e114ff9b4f7f22e12d5c335ee251ef4b076233a3e90df0b4f0ba429
GET /css/extra.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 8412
content-type: text/css
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/modernizr.custom.js
200 OK 9.0 kB URL HTTP/2 bunquayphuquoc.com.vn/js/modernizr.custom.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type HTML document text\012- HTML document, ASCII text, with very long lines (8820)
Hash 7a9ad736fcbd8d99ac7cb282e48f492d
bc9582612f11bf96bc56f75347cf54138339778a
8bf0280a5588514ef4978f8099d859364ba6d44dcfb9ee8c59d90486e3ec1267
Analyzer Verdict Alert fortinet Malware
GET /js/modernizr.custom.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 9003
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/responsive.css
200 OK 22 kB URL HTTP/2 bunquayphuquoc.com.vn/css/responsive.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash bfdf726164112b39ac0b85d7cfff1f3d
cfb36284b729cb15a73b3c1b654163685ad745b8
ec801543f92271907d311ec7d763be04ceb8da24ef92ad2d3f55a1a1a9d7ac0d
GET /css/responsive.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:30 GMT
accept-ranges: bytes
content-length: 21721
content-type: text/css
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/layout.css
200 OK 40 kB URL HTTP/2 bunquayphuquoc.com.vn/css/layout.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 2888ff523b262d69a9ecf3f5cdfdb928
aabc3a09d496244650adb29656b70e95db726d1c
2b90f7c2659d3abdbf238358c42cf31c4ea348fdb9bbf95a9d3c036dfab98a0c
GET /css/layout.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 40078
content-type: text/css
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/snap.svg-min.js
200 OK 67 kB URL HTTP/2 bunquayphuquoc.com.vn/js/snap.svg-min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type Unicode text, UTF-8 text, with very long lines (32081)
Hash 411ff5f37248500c74c3ee48e01834db
4a727f18ae652ec49ca3d542b11b67df6dbd3cfd
3febd731867ee3bf9bd30b0b6ecca16e30179de101329318385cd7dd9a692ad9
Analyzer Verdict Alert fortinet Malware
GET /js/snap.svg-min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 66994
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/elements.css
200 OK 72 kB URL HTTP/2 bunquayphuquoc.com.vn/css/elements.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type assembler source, ASCII text, with very long lines (473)
Hash 71c7fd238ea1fb5804368764ac682e5d
36b698c8f521a8bb79068bc09704ffb26da1b383
ef3af712a8ad9ff04c27a538499ddd6fbb1e444b400b68148d18ee9e1dff790a
GET /css/elements.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 71717
content-type: text/css
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/colordefault.css
200 OK 110 kB URL HTTP/2 bunquayphuquoc.com.vn/css/colordefault.css
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (532)
Size 110 kB (110318 bytes)
Hash e850d6eb700a7b878a552038adf6149d
65ae019aa6701fbaa35d5d37d21e6996e9fb57d2
8321cb8244601857d32328957bdf40a33413186810fabe7537f7dea98e712475
GET /css/colordefault.css HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:29 GMT
accept-ranges: bytes
content-length: 110318
content-type: text/css
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/images/vietnam_flag.png
200 OK 1.4 kB URL HTTP/2 bunquayphuquoc.com.vn/images/vietnam_flag.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 37 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 44550101abfc013dc6e400b8829f0022
08a89de868e97fcb94061398b699a0968333d1e4
eb05de4b4e17c65ce6162d0f9241d784f8eac0703708966a93479e83d91535b4
GET /images/vietnam_flag.png HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:32 GMT
accept-ranges: bytes
content-length: 1391
content-type: image/png
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/images/english_flag.png
200 OK 2.3 kB URL HTTP/2 bunquayphuquoc.com.vn/images/english_flag.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 38 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 440fa3cb8057067c5e6bb95b260de3c0
1b5ce662c42e3928b239e74ef647c6ce3c362589
86378300628c43686028cd856da33b4b004b57e5c73620594662a37d866324d0
GET /images/english_flag.png HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:31 GMT
accept-ranges: bytes
content-length: 2277
content-type: image/png
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26100, version 1.0\012- data
Hash 312bcfa92b0b0a09c3f404b2c662a0b6
5398ff9ee3c10bffc54e3a9f7e5e7506a822b38a
979caf94add5b00ec59d8abde43d200523745c2f4b105c2906f4d9dda4afaeec
GET /s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bunquayphuquoc.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26100
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 18:22:32 GMT
expires: Thu, 31 Aug 2023 18:22:32 GMT
cache-control: public, max-age=31536000
age: 495408
last-modified: Fri, 24 Jun 2022 18:41:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvp9nsBXw.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvp9nsBXw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 13808, version 1.0\012- data
Hash b9cf0889911ac57ee24c7c6886e50070
13c5cea6cedf0ccb68abf357fabe33d5f5477d5f
4190f73db7190e7ec4fc39666881acd3920fa73ab44c12bf7e8a6e5a76191e44
GET /s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvp9nsBXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bunquayphuquoc.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13808
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 01:55:28 GMT
expires: Sun, 03 Sep 2023 01:55:28 GMT
cache-control: public, max-age=31536000
age: 295432
last-modified: Fri, 24 Jun 2022 18:41:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cabin/v26/u-4V0qWljRw-Pd815fNqc8T_wAFcX-c37MPiNYlWniJ2hJXHx_KVxUbv.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/cabin/v26/u-4V0qWljRw-Pd815fNqc8T_wAFcX-c37MPiNYlWniJ2hJXHx_KVxUbv.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16020, version 1.0\012- data
Hash 533f97bd00683d000f31959a7c014682
53aacb1f67cf050978ca44d63ca370214eb66687
358684a31d57626f70b914616659a76eca0d9d25da3c46d43bf961e2ef13b807
GET /s/cabin/v26/u-4V0qWljRw-Pd815fNqc8T_wAFcX-c37MPiNYlWniJ2hJXHx_KVxUbv.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bunquayphuquoc.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16020
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 16:24:42 GMT
expires: Tue, 05 Sep 2023 16:24:42 GMT
cache-control: public, max-age=31536000
age: 70478
last-modified: Fri, 24 Jun 2022 18:42:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/images/soup1.png
200 OK 104 kB URL HTTP/2 bunquayphuquoc.com.vn/images/soup1.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 296 x 275, 8-bit/color RGBA, non-interlaced\012- data
Size 104 kB (104128 bytes)
Hash fd8770fd3c3a84317decf63b6720561e
ebb23573546e089f23620a20b2a63d06d97234f4
8634cccdcdc0d6f32a7eacb02d27612a2210413ceb1f59996c447b90288f6e5e
GET /images/soup1.png HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:32 GMT
accept-ranges: bytes
content-length: 104128
content-type: image/png
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Cabin:400,400i,500,600,700|Dancing+Script:400,700|Great+Vibes|Josefin+Sans:400,400i,600,600i|Libre+Baskerville|Open+Sans:600,600i,700|Oswald:300,400,700|Yellowtail
200 OK 99 kB URL HTTP/2 fonts.googleapis.com/css?family=Cabin:400,400i,500,600,700|Dancing+Script:400,700|Great+Vibes|Josefin+Sans:400,400i,600,600i|Libre+Baskerville|Open+Sans:600,600i,700|Oswald:300,400,700|Yellowtail
IP
Hash bdaedac9319734fc38d0b5c3c9d811d7
6cde47322342432a26b288aeaac47969da489a6f
2cb9a0df61c13d71f2c33b795962115da1bf8309beed5232b9d5e95083892984
GET /css?family=Cabin:400,400i,500,600,700|Dancing+Script:400,700|Great+Vibes|Josefin+Sans:400,400i,600,600i|Libre+Baskerville|Open+Sans:600,600i,700|Oswald:300,400,700|Yellowtail HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Sep 2022 11:59:19 GMT
date: Tue, 06 Sep 2022 11:59:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-4-Pepsi.jpg&h=300&w=300&zc=1
200 OK 15 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-4-Pepsi.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 2a26d705efab85e421950f4c9378f914
628ef93cd46ad09d789380c421d6480e3a0a3202
62a3badf338a07c7c958260c52c9673e90caa9046de942716a609b4fde59d1e6
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-4-Pepsi.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 14772
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0b9528d0aa584b0e7b8b95f31ec1c4ed
79afabc0856f6fb3c3e5a9f5675cb0a40ee08e54
2604edd5743acd1487c25665444019555a972492010c10bf3bd6aefeab4661eb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-6-7up.jpg&h=300&w=300&zc=1
200 OK 15 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-6-7up.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash e2639379bc5568d10ce70c028f1a5ead
9f4f35082e94edb7e9918a28395667adcd8e8043
1fc4c81318a52ce75e664967ef9cd4ad2273eadc693e5befcaeb8696e47a0396
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-6-7up.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 14761
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-1-Mia.jpg&h=300&w=300&zc=1
200 OK 10 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-1-Mia.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 9d31e9520a348d24e95712d3ed2888e9
02d3cfed48711c7f604f189d0f9905dc0f95d036
6171755b9ca449bc8cc49acb007479ea9939966650ee681fea942f43f516e15a
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-1-Mia.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 10151
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
www.youtube.com/s/player/c16db54a/www-player.css
200 OK 49 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/www-player.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 666388d9ac2c812d3d9b0e511b1cfea0
4dfa524e6558a4aaf676578dd3275f544cb36625
a1532094c979ab2823b5baf7e5843d731e1c64765a8b8495f89bb56b7f7df117
GET /s/player/c16db54a/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/IY_MtenwPmU
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49081
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:42:16 GMT
expires: Sat, 02 Sep 2023 20:42:16 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/css
age: 314225
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 12:31:58 GMT
expires: Sun, 03 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 257243
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/c16db54a/www-embed-player.vflset/www-embed-player.js
200 OK 98 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/www-embed-player.vflset/www-embed-player.js
IP
File type ASCII text, with very long lines (592)
Hash 26b6e79984361d593bcf000927f559db
36dc3faef99c68636ed7d8a2d46783ccfc3be7ff
2795564d0f494ec4aed32d6708062dd699c22324d3df26588d5e2e2c2a956b36
GET /s/player/c16db54a/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/IY_MtenwPmU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 97590
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:42:16 GMT
expires: Sat, 02 Sep 2023 20:42:16 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/javascript
age: 314225
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 80f29cbbe260408ee1418a6fbce5a537
96cfe52bcf90cfdba5cba7907d49a91f44adc032
de264b42b7c59bdadf606387adaca04af680705a947096d048f288c3e5be8517
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.youtube.com/s/player/c16db54a/fetch-polyfill.vflset/fetch-polyfill.js
200 OK 2.8 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/fetch-polyfill.vflset/fetch-polyfill.js
IP
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (555)
Hash 80fe2d229007996c8397073b00755dc7
121f82c77bcf2a297a1085e3b092415c463fcafe
033dfa8941482c82d4f1aaa4a9172fb379b9e46a02d5b36297c5476bbbfdea2c
GET /s/player/c16db54a/fetch-polyfill.vflset/fetch-polyfill.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/IY_MtenwPmU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 2786
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:42:16 GMT
expires: Sat, 02 Sep 2023 20:42:16 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/javascript
age: 314225
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6XvptnsBXw.woff2
200 OK 4.9 kB URL HTTP/2 fonts.gstatic.com/s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6XvptnsBXw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 4904, version 1.0\012- data
Hash 2b16c580f03444f4279f04cd3ee07902
d44ba2e92b33247dde316471b4666ac054675423
26f805fed4ca852b8bef8219c929e6fce98cb72439ef33a9271aed16e3a67cbd
GET /s/cabin/v26/u-4i0qWljRw-PfU81xCKCpdpbgZJl6XvptnsBXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bunquayphuquoc.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 4904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Sep 2022 19:30:57 GMT
expires: Sun, 03 Sep 2023 19:30:57 GMT
cache-control: public, max-age=31536000
age: 232104
last-modified: Fri, 24 Jun 2022 18:41:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.youtube.com/s/player/c16db54a/player_ias.vflset/en_US/base.js
200 OK 587 kB URL HTTP/2 www.youtube.com/s/player/c16db54a/player_ias.vflset/en_US/base.js
IP
File type ASCII text, with very long lines (596)
Size 587 kB (586778 bytes)
Hash da3059ae3f2d892ccddf5832ff6f7a5a
df25b539e3bc115ff39343862807b32cfce2b4bc
abe75b67d443e17494a271925559be75c8a07e454c645153dac3e4f3a82947c4
GET /s/player/c16db54a/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/embed/IY_MtenwPmU
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding, Origin
content-encoding: br
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 586778
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 20:50:27 GMT
expires: Sat, 02 Sep 2023 20:50:27 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Sep 2022 18:46:29 GMT
content-type: text/javascript
age: 313734
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_1Ca.jpg&h=300&w=300&zc=1
200 OK 30 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_1Ca.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash cf66fc497835b0700bb0198493e92fe7
428c3b36073dd62a8cb0488078f05c2d14bf48cc
e3b5da22fc5bd6e63ffbab9356c077a4b4a73572d731e18532c7d0e5ff998741
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_1Ca.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 30306
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-3-Coca.jpg&h=300&w=300&zc=1
200 OK 21 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-3-Coca.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 01dd5299e79c5a28b5ab34c37c7eefde
c03b3c0bdfcff54c0eec2f0683ab325629b82731
817392ad1060c260190482d63e450adb3198160a3ec9dec7ab7e7120f130de91
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-3-Coca.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 20711
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-7-Trada2.jpg&h=300&w=300&zc=1
200 OK 28 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-7-Trada2.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 7a7f6d8b746c55d4f4f9368a17b28620
1d1c16c565aa85f01ce5f8ae2e0fb893e341e7f8
a6c12021a7318a030a73b7ae9e3e06c3f12b5419976f746b70d1b8afa5ec0abe
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-7-Trada2.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 28013
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-5-Redbull.jpg&h=300&w=300&zc=1
200 OK 19 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-5-Redbull.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 92fe13d93a7b58e021246c71b78f71f1
72c74c5a08414a05a8b8688face8a4a5cd0b97ae
cac1e53c552e1b7f3e3370ab370e719336a0d886a64a02ea89e34123f6328574
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-5-Redbull.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 19011
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-2-Loc.jpg&h=300&w=300&zc=1
200 OK 21 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-2-Loc.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a1f613207afe43534a395845a1e40ff3
ef5577bdd3039ed937b7ab7190c40c91eaff6024
6a371aa5dde949d76bca144072b17ab65788ec278ec33daefcb639739c0cfcd4
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-2-Loc.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 20818
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_6Tom-Bo.jpg&h=300&w=300&zc=1
200 OK 38 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_6Tom-Bo.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash c02f6c90235d066b031b5a44cbff1231
e00f216bd9b8822b9a7c9429241a7b676ad0a952
409de731d28f44c11e179283b0e788ed9accb7496503550a6ffe75e7ae9fafca
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_6Tom-Bo.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 38248
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/upload/images/Logo_Dau_trang(PNG).png
200 OK 39 kB URL HTTP/2 bunquayphuquoc.com.vn/upload/images/Logo_Dau_trang(PNG).png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 408 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d05337dc5be06386f7a2815d14f2751
b35f4ec7dd3041d59034ee2172ba7119f50b1481
a6c193becb4a1c1370056a268db8664426a0613e597bb268d55431225a4e1667
GET /upload/images/Logo_Dau_trang(PNG).png HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Jan 2021 15:05:04 GMT
accept-ranges: bytes
content-length: 39309
content-type: image/png
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_4Tom-Muc-Bo.jpg&h=300&w=300&zc=1
200 OK 41 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_4Tom-Muc-Bo.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 113747df6dace9a142881bf4a95f5a98
97e5704de4d076f894a855c9430726665005c667
5a1fe4c9c66239baff328a2655193fa570a077cde0afc0a8779fd60202dc1e8e
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_4Tom-Muc-Bo.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 40927
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_1Ca-Tom-Muc.jpg&h=300&w=300&zc=1
200 OK 41 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_1Ca-Tom-Muc.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a89d5d5ebc87c5c4dc5b114e20fb35c9
beef0d2a7dec0053440dc377c96e1a413a668eeb
320ada248e1a7965a42c7f97096e7f8d8341f16adb3411e7afad933f54ca5317
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_1Ca-Tom-Muc.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 40926
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/5_1ThapCam.jpg&h=300&w=300&zc=1
200 OK 46 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/5_1ThapCam.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 62cefa2da1345815ba16b3b77cde87ac
394b696a98b71cce4cce7d92d94ac6a9308891a2
0e6759c2bc8a8dc64f5446356a4b58113f4515d8eaeb6fdcdb5e8e6e2431d42a
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/5_1ThapCam.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 45710
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_3Muc.jpg&h=300&w=300&zc=1
200 OK 44 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_3Muc.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 5004d46eb635ce669c4957a76b8d8a2a
59c2431422d81893659c20502948c5ae25bb83ff
bec6b0d15f645efa27aa2aa3ad748be532b72c2995e0d15a2783d75fdffd09dc
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_3Muc.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 43521
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/upload/images/Pic_Anh_Nho_Home/Facebook_Page(500JPG).jpg
200 OK 250 kB URL HTTP/2 bunquayphuquoc.com.vn/upload/images/Pic_Anh_Nho_Home/Facebook_Page(500JPG).jpg
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 590x655, components 3\012- data
Size 250 kB (250284 bytes)
Hash cf6775a293f8ec9cfd2392c10832d401
aa1108b13296f001dd100a699451231a094c2882
c2ba285f352a5d3039cfbed031ee7bc21e87fd953ca712ccb83b0bafc545780f
GET /upload/images/Pic_Anh_Nho_Home/Facebook_Page(500JPG).jpg HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:22:51 GMT
accept-ranges: bytes
content-length: 250284
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/upload/images/Pic_Anh_Nho_Home/Zalo_Page(500JPG).jpg
200 OK 400 kB URL HTTP/2 bunquayphuquoc.com.vn/upload/images/Pic_Anh_Nho_Home/Zalo_Page(500JPG).jpg
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 590x655, components 3\012- data
Size 400 kB (400428 bytes)
Hash 756880db450fc318c34adc26888b695c
d95c8c1a755b7faab04823a2df8bd480170fe870
11b00dd4d96255dedba0efa2a9514dab019700cd6ae63770077aeeffa6595aff
GET /upload/images/Pic_Anh_Nho_Home/Zalo_Page(500JPG).jpg HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:22:53 GMT
accept-ranges: bytes
content-length: 400428
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/jquery.appear.min.js
200 OK 858 B URL HTTP/2 bunquayphuquoc.com.vn/js/jquery.appear.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (858), with no line terminators
Hash 5e9cd4c205ea426b4ca253b3c7b97abc
61f7d8bc4694621f86953a688574fc6468c8f065
cc0668b095aba1e7d46e7fa211d3e9bd60854cc91cfcf332663fade635b030bb
Analyzer Verdict Alert fortinet Malware
GET /js/jquery.appear.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 858
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_3Ca-Muc-Bo.jpg&h=300&w=300&zc=1
200 OK 40 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_3Ca-Muc-Bo.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 42d72899ff4f81c9ca708636ce85bee2
0bda83bdce91d7802a9c15202597accadb593655
3ad422a1a09b26373e75eb268d1769d6883b2a5317717e6179771b599d0a7186
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_3Ca-Muc-Bo.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 39947
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/jquery.countTo.min.js
200 OK 2.0 kB URL HTTP/2 bunquayphuquoc.com.vn/js/jquery.countTo.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (2001), with no line terminators
Hash ae97ad03100b30fd0a7ef6665c73d6c4
be3ee108c4522c9150d0582778d8a8bc6813a9b0
f5703f9f32f4faf29171106117f18ebebdea3189a59ea2f58e1004166d5a6bdf
Analyzer Verdict Alert fortinet Malware
GET /js/jquery.countTo.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 2001
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/parallax.min.js
200 OK 6.7 kB URL HTTP/2 bunquayphuquoc.com.vn/js/parallax.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (6478)
Hash 5f32e40e3b17454c4517bf6fbdcc885f
c52476c9451fc0d754510a19a131fd05dfa21527
fd328906f8967003ff0d0d7024d8afca13fc4097dcc54495dbaf591e44414bdb
Analyzer Verdict Alert fortinet Malware
GET /js/parallax.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 6661
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_5Ca-Bo.jpg&h=300&w=300&zc=1
200 OK 37 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_5Ca-Bo.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 3c1c0bcd4e4d02534e2a55605dc95abc
64751db470c7bb06f88de1e6fcf545d61ce427ec
a3a73be8c06ccf0b50633ea98d7ccd5f8b7ca786a5e627cb004ee6c0f11a76c5
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_5Ca-Bo.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 37116
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_4Bo.jpg&h=300&w=300&zc=1
200 OK 43 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_4Bo.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 97804740b77d9ba03dbc222abc019765
2451338866e6ae5fbe74043c87f9c12a84dae2ec
524ee89c76d905d967f5d27980de1e60c66756375a742c1426a8eafe8cdbb755
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_4Bo.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 42847
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_2Tom.jpg&h=300&w=300&zc=1
200 OK 33 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_2Tom.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash bd40b41e11f1074762f229eedbb10f0e
ae5ea0d939ab6b6f71687f8a7a8811a58673d849
84072038b37a09e2ef698a01c3f67670f881f1f1039414794e4abe7808fecd9a
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/1_2Tom.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 33324
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/jquery.swipebox.min.js
200 OK 13 kB URL HTTP/2 bunquayphuquoc.com.vn/js/jquery.swipebox.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (12859)
Hash 045b07c05600ecce9d709ad9f17889a2
7468def91f6375ff4ffca1160f6089f45d9c4d59
61cf86c139e55b3a6e43a82b0ca393ebb500f1dd4ce05c77dc990da97dca7b9d
Analyzer Verdict Alert fortinet Malware
GET /js/jquery.swipebox.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 12959
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/wow.min.js
200 OK 8.4 kB URL HTTP/2 bunquayphuquoc.com.vn/js/wow.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (8385)
Hash 36050285bfeeb7395752f0f9bbc08273
5924f7bbbf1dfa3f0926851d01f782f23a59e805
0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69
Analyzer Verdict Alert fortinet Malware
GET /js/wow.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 8415
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/layout.js
200 OK 12 kB URL HTTP/2 bunquayphuquoc.com.vn/js/layout.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash d2c2bbfb436c732985e537e1522226b8
00efb6b253876db94208c7610b148ac2b755bc46
a671440b4001aea16d86d116b1b4f883010e08a83c172828493aae6a6dee6870
Analyzer Verdict Alert fortinet Malware
GET /js/layout.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 11663
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/jquery-1.10.2.min.js
200 OK 93 kB URL HTTP/2 bunquayphuquoc.com.vn/js/jquery-1.10.2.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (32072)
Hash 628072e7212db1e8cdacb22b21752cda
0511abe9863c2ea7084efa7e24d1d86c5b3974f1
0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988
Analyzer Verdict Alert fortinet Malware
GET /js/jquery-1.10.2.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 93107
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/classie.min.js
200 OK 613 B URL HTTP/2 bunquayphuquoc.com.vn/js/classie.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (613), with no line terminators
Hash 6c7014610636ede3486fd4f59ad8a258
165cb02558a4097d900be8999d38a205c9fc6763
ac981d20f84ff2a390bf36893aa56318c75c2e794fb99b61d30c1deea165cfb7
Analyzer Verdict Alert fortinet Malware
GET /js/classie.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 613
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/
200 OK 68 kB IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (20309), with CRLF, LF line terminators
Hash 220161eb5282e79e04b144baab66e2b5
fb6e6a0a2c1e2f26f9c35397f497137741d78efe
082d58b66511a0aaa324e9b50f33b204bf4a029f0a9d3ebc4ddcaebf733ca01f
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1; path=/
content-type: text/html
date: Tue, 06 Sep 2022 11:59:16 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/slick.min.js
200 OK 42 kB URL HTTP/2 bunquayphuquoc.com.vn/js/slick.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (32076)
Hash b53bdfc29e18f4d493d775a8023fbdc8
e9fcbcc4fa70cba093b81d982a1b78509414cef7
e02af7df9a190d88380e2dcec2050ecaa493ae2d23526dbeec67f6907df3a752
Analyzer Verdict Alert fortinet Malware
GET /js/slick.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 41953
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/widget.js
200 OK 396 B URL HTTP/2 bunquayphuquoc.com.vn/js/widget.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 82c744d5ed1d3a819a73dab2b50d085e
934e438be6b5442066a2e336b51b2318d812502c
4c3247f1b4c05b086937d0996bf801464748b143dd7fe571b6775713aca6eada
Analyzer Verdict Alert fortinet Malware
GET /js/widget.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 396
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/audio.min.js
200 OK 16 kB URL HTTP/2 bunquayphuquoc.com.vn/js/audio.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (3925)
Hash cfc727b1bd11a91d1284ae69ecdf0f38
50a26308435693a378079042c5cb9e32578af887
a92209555ee2bf22e3339c9c6635fd0b73a30e053d0fc13339b8c4de7ab61cba
Analyzer Verdict Alert fortinet Malware
GET /js/audio.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 15980
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_2Ca-Tom-Bo.jpg&h=300&w=300&zc=1
200 OK 40 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_2Ca-Tom-Bo.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 7ba3378d3aed1cbc0dbef11720bc3a8b
4f3735f99b43d04a77f6f080cdcc1ff2103a9a2c
627b99918f45aaed8afe5162c0e2e746803ec708d7f332b2009bdcba52f15bc3
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/3_2Ca-Tom-Bo.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 40279
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/svgLoader.min.js
200 OK 1.7 kB URL HTTP/2 bunquayphuquoc.com.vn/js/svgLoader.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (1677), with no line terminators
Hash 8f3bb54b6c88bd50cebf09e799cd9a43
cb66a761de3bbf58446d5fb7239b0f9dba4aa129
4c0ed48808defd6b25254570afb54c8e57dafc32eb1c005c4add4c64bf400d38
Analyzer Verdict Alert fortinet Malware
GET /js/svgLoader.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 1677
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/sidebarEffects.min.js
200 OK 2.9 kB URL HTTP/2 bunquayphuquoc.com.vn/js/sidebarEffects.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (2903), with no line terminators
Hash 013e2dd030618ae188a0599dc9e46dcb
abbee51706398a905028caa89e917dee805fa148
8a4f7e815912ce3d502a6e9b8c17d4146a1f65c1d0d4bab3d4eb457144016bab
Analyzer Verdict Alert fortinet Malware
GET /js/sidebarEffects.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 2903
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/upload/images/Logo_Chan_trang(PNG).png
200 OK 11 kB URL HTTP/2 bunquayphuquoc.com.vn/upload/images/Logo_Chan_trang(PNG).png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 453 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cdb651982306d46a9cff1bd00150437
ae5c1890d6c212078c79bdcddaf730beaf8ea86e
b1b37fec2c2603c7532db18f76cd727f0cffd2e5b0139a28dc1f447c3f66c008
GET /upload/images/Logo_Chan_trang(PNG).png HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 25 Jan 2021 15:05:08 GMT
accept-ranges: bytes
content-length: 11143
content-type: image/png
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/jquery.vide.min.js
200 OK 4.5 kB URL HTTP/2 bunquayphuquoc.com.vn/js/jquery.vide.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type ASCII text, with very long lines (4322)
Hash 901e2d8fd2af243d3d8dd68e38fa22da
a1cacad6d220f356b78ee695bc1b5d28aa63cc09
be3950dab42791bb50d60a09c80869ba8c86f7dab74eff23b91a365d0c710831
Analyzer Verdict Alert fortinet Malware
GET /js/jquery.vide.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 4489
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/s_bun.jpg&h=635&w=1600&zc=1
200 OK 215 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/s_bun.jpg&h=635&w=1600&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1500x635, components 3\012- data
Size 215 kB (215121 bytes)
Hash b1e71cd5198c325c8bd7388dfb752658
5784999ba00d776c0d590e4cceca0884b4d639b1
1a1bdc11d9c129ec71e047c6e6ff528ad07e1c14ce0ea13abea339d609696370
GET /timthumb.php?src=/upload/images/Slider2/s_bun.jpg&h=635&w=1600&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 215121
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/s_thapcam2.jpg&h=635&w=1600&zc=1
200 OK 306 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/s_thapcam2.jpg&h=635&w=1600&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1500x635, components 3\012- data
Size 306 kB (305558 bytes)
Hash 5a3494095ba38a13513475ad1f86454c
633825b610b0ac842c6b2ee92daca050dc861357
03fc2e53538cbb9b56fc039b30133d137e7b5e82afa4f9a69bf4dd475dd2c9f6
GET /timthumb.php?src=/upload/images/Slider2/s_thapcam2.jpg&h=635&w=1600&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 305558
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/BaiViet_TheoChan_2/0-1.jpg&h=300&w=300&zc=1
200 OK 43 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/BaiViet_TheoChan_2/0-1.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 46e30c847e06d900b5cc8869ec3c3008
08aba274089e78a1fa046e1219fa4b4cb8e8e3f9
2ebb57e26402682577525e3e3a59abf9a49f28d636edd4da65b78f35a2e81303
GET /timthumb.php?src=/upload/images/BaiViet_TheoChan_2/0-1.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 42885
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/fonts/icomoon.ttf?wxhsxi
200 OK 57 kB URL HTTP/2 bunquayphuquoc.com.vn/fonts/icomoon.ttf?wxhsxi
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash ff9a412179f674255346e5251e8214ba
d7fe9b3c0e27859ea7d2ad7c4bdc4a677879e081
3df5ff0653e114ec1c7d4228005e6f5b9ee3c4edaf19795f2d2f6fe2348fd8de
Analyzer Verdict Alert fortinet Malware
GET /fonts/icomoon.ttf?wxhsxi HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/style.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:31 GMT
accept-ranges: bytes
content-length: 57388
content-type: font/ttf
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/images/separator.jpg
200 OK 22 kB URL HTTP/2 bunquayphuquoc.com.vn/images/separator.jpg
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x20, components 3\012- data
Hash 399b38a30fa4774cb87f674db4279bb4
c8cbf7c2d9c1aade478b3a2873ad3f51c2c38353
6aa649fea921af65503922118a539d0cbb3e1ae5440b29b3dfc0e9e4ec843bbd
GET /images/separator.jpg HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/colordefault.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:32 GMT
accept-ranges: bytes
content-length: 21520
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/q10_1.jpg&h=635&w=1600&zc=1
200 OK 312 kB URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/q10_1.jpg&h=635&w=1600&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1500x635, components 3\012- data
Size 312 kB (312458 bytes)
Hash 2a224215e382208885fe65735485f287
72c0d6ab7f0e4a5151eeb765d4d78b527b15f04a
fed0b4213ff810acc104fca975f9fac558280e08e1f61fa10f282cefe52dfab5
GET /timthumb.php?src=/upload/images/Slider2/q10_1.jpg&h=635&w=1600&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 312458
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 71 kB URL HTTP/2 bunquayphuquoc.com.vn/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type Web Open Font Format (Version 2), TrueType, length 70728, version 4.393\012- data
Hash 926c93d201fe51c8f351e858468980c3
977357f82830f57fbdac2492dd421e5dcce44a1a
d3ebb498192527b985939ae62cc4e5eb5c108efc1896184126b45d866868e73d
GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/font-awesome.min.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:30 GMT
accept-ranges: bytes
content-length: 70728
content-type: font/woff2
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/images/bg3.jpg
200 OK 47 kB URL HTTP/2 bunquayphuquoc.com.vn/images/bg3.jpg
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2018:01:10 14:26:28], progressive, precision 8, 250x190, components 3\012- data
Hash a5d83f8426983aebafd7e0df6d97924b
01255e3675da8954faf59758b2bac871e3b877a1
644158c67ed2c9e5aaf3a556914dede09717b6abf8a151111aa89a550074bfd7
GET /images/bg3.jpg HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/extra.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:31 GMT
accept-ranges: bytes
content-length: 47226
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/images/footer-bg.jpg
200 OK 190 kB URL HTTP/2 bunquayphuquoc.com.vn/images/footer-bg.jpg
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2018:01:09 14:54:13], progressive, precision 8, 1620x420, components 3\012- data
Size 190 kB (190313 bytes)
Hash 946a7d4561af96ff650dddf3bd3cf07e
eb91cbdc8e248812c58db91d3e70f682588a77a2
f1484c29b9a88f6d5db9d12c608e228741ea64abeef322678a87ec66b3ff8ddc
GET /images/footer-bg.jpg HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/colordefault.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:32 GMT
accept-ranges: bytes
content-length: 190313
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 917
Cache-Control: max-age=102528
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:21 GMT
Etag: "63162004-1d7"
Expires: Wed, 07 Sep 2022 16:28:09 GMT
Last-Modified: Mon, 05 Sep 2022 16:12:52 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/vi_VN/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/vi_VN/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 3cb63c6c39949b3afdcb25bc9181ba40
84159d74e2cf8bb9fd093ec1c3e25d03d95fc0e0
0d139225732607a3ddaba56148305758822c148b39cd764f867eaf4a872d5956
GET /vi_VN/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: f55ed319399f65d39ca4a5eb84733ca7
etag: "f55cd19c3efa9d2cfc0b75d1fe031f66"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Tue, 06 Sep 2022 12:11:19 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: PLY8bDmUmzr9yyW8kYG6QA==
x-fb-debug: 94wSMBW+vxHBjb+gJzgkcVCMe5NV7J57u0kWBPkWF4yzO9i5cdM8r48scUP+GVqDfEjBGtrBTQGLibqYi+IzjA==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Tue, 06 Sep 2022 11:59:21 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 07869ddc8aa688fe8a93876ef1264055
636614db9c01c03fcc2d10f5f949b513e1a338c9
ab8f4fcf2e21b2e44d69d6e4a6478a7eb6cf8e451202c7dc2854ef68b8e91b2b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 917
Cache-Control: max-age=102528
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:21 GMT
Etag: "63162004-1d7"
Expires: Wed, 07 Sep 2022 16:28:09 GMT
Last-Modified: Mon, 05 Sep 2022 16:12:52 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bunquayphuquoc.com.vn/js/js.cookie.js
200 OK 29 B URL HTTP/2 bunquayphuquoc.com.vn/js/js.cookie.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
Analyzer Verdict Alert fortinet Malware
GET /js/js.cookie.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 3872
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Tue, 06 Sep 2022 11:59:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 31abc7fe976dbf9a68d45fb57e0c86c5
a1f6f5404850df3149a769dc685f5c795bc08435
0859eece0557d6b1b48ed8f04c2eb55bdc2ca3fb4633e52a193b206fdefbb5d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3df811ac19fde08f49ef246c29cef161
e1c8d54b357adaf32e80427028cc884fa35959e0
e2749178e0bf0c4045a96388a58029ddd92d13a866021737864cd68e11317292
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 06 Sep 2022 11:59:22 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76c6ad39ad355f829170427e9076311a
26a82c7dd26986900a4964464e43d9837dfef1f8
40c6ca74d92e002befb684bce24ba4714c260ba30918cc4e9a4bb02ed4f809dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/97z2yBxPcYiv6eioOAzftW1739b5eZ3I_zVAeb-vK4k.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/97z2yBxPcYiv6eioOAzftW1739b5eZ3I_zVAeb-vK4k.js
IP
File type ASCII text, with very long lines (36079)
Hash 72692ad1b05fd9a02ff85f1c3ca30a46
520a2098d9be492a862bab96f6653393205e00e9
1c17c960446cf9498b1f6703a553a7e59f005816bb9991b97c5718524c5fa4d5
GET /js/th/97z2yBxPcYiv6eioOAzftW1739b5eZ3I_zVAeb-vK4k.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14243
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 05:03:20 GMT
expires: Thu, 31 Aug 2023 05:03:20 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 29 Aug 2022 11:00:00 GMT
content-type: text/javascript
age: 543362
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash cb2577fd1484b57597eecc779f25c5e2
81b23f457d706304352b8e08750c388c7367bd67
d9f590bf7fde01c2c80d9079cd41ad96e3c64daa92cf594944b868e5084bd04c
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 06 Sep 2022 11:59:22 GMT
server: ESF
cache-control: private
content-length: 30633
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 8b3fc7b78a1c498440023dbb6004e984
688d8686e183a4e84577e0f70550350622796e2e
ac1f7b3d1c5bfc1888f50aa3a8e0498c11f7cce672e6de5c048bf31d4d3370c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bunquayphuquoc.com.vn/images/favicon.png
200 OK 5.2 kB URL HTTP/2 bunquayphuquoc.com.vn/images/favicon.png
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash ca59d9311a9470546fc21501e60dc434
2145a84353730eaf47c3a4bc5600af7ceb8b60cf
8f6343533e6c4bfe2b4f8d28dc4cb28b2c4bbc4114735226086549257b8d887b
GET /images/favicon.png HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:31:27 GMT
accept-ranges: bytes
content-length: 5207
content-type: image/png
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 982044cca5f664004f3f5acc3f7e4df9
980ca862cb773284f743959ed25b192d79aa7451
729a17e21e378f4e2ef50157a360eb70b82cc9270c46c9868b3469ed2fae2420
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/IY_MtenwPmU/sddefault.webp
200 OK 58 kB URL HTTP/2 i.ytimg.com/vi_webp/IY_MtenwPmU/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3b13c23a85d846a5a8c12f5a1ea3376e
8fa7ca3c278c17626973b974ad2143ef6aba5505
fae8c4c945267c564c02afcb0864322ea9111e7a3b4eac66498bdb542c551e3d
GET /vi_webp/IY_MtenwPmU/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 57700
date: Tue, 06 Sep 2022 11:59:22 GMT
expires: Tue, 06 Sep 2022 13:59:22 GMT
cache-control: public, max-age=7200
etag: "1596890789"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/fonts/slick.ttf
404 Not Found 11 kB URL HTTP/2 bunquayphuquoc.com.vn/css/fonts/slick.ttf
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Hash d554546d727885d7e93943acecf6b683
f778517182d7aaed0b754c2e49b8950a42c1a7cc
8c8be8100366c72a2217beb95060d25d1c776a1754626023640a8d50589b9a27
Analyzer Verdict Alert fortinet Malware
GET /css/fonts/slick.ttf HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/slick-theme.min.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 092ab48a58576cf5228f75ca8e05deaf
2e79d46dc0bc28519be8133b7c56eef7486fe40d
0d6abd69dcba207deff031972ab6d68e283a4e6f702689bbe7a529f0bb9d1552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 06 Sep 2022 11:59:22 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 122 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 82324a25d7d4daa0c85a39362196137c
6a1a9fbcee0619784918cce16323664bf1af3a31
9e2944cecab4adace1105b82ee990e7884e2077fd99585ab80e2ff6761c05c6d
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 886
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 06 Sep 2022 11:59:22 GMT
server: ESF
cache-control: private
content-length: 122
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AMLnZu-tTh2zPxpJpfVBMV_xarO1-MpMCuGobYUZ49D2QQ=s68-c-k-c0x00ffffff-no-rj
200 OK 4.6 kB URL HTTP/2 yt3.ggpht.com/ytc/AMLnZu-tTh2zPxpJpfVBMV_xarO1-MpMCuGobYUZ49D2QQ=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 7c26793838e4e588d247bd6e3b5a7016
3f34f2bf8856b29ed351d90fdf87edec6434822c
65ea4b7d3ffe3de34bf4fb63dd29b93ffd6a983bfc1fc299d08ef016a80547fb
GET /ytc/AMLnZu-tTh2zPxpJpfVBMV_xarO1-MpMCuGobYUZ49D2QQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4583
x-xss-protection: 0
date: Tue, 06 Sep 2022 11:59:22 GMT
expires: Sat, 03 Sep 2022 04:12:03 GMT
cache-control: public, max-age=86400, no-transform
etag: "v6ce"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 092ab48a58576cf5228f75ca8e05deaf
2e79d46dc0bc28519be8133b7c56eef7486fe40d
0d6abd69dcba207deff031972ab6d68e283a4e6f702689bbe7a529f0bb9d1552
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Sep 2022 11:59:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/v2.8/plugins/page.php?adapt_container_width=true&app_id=301253440027125&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df10465371bfb6e%26domain%3Dbunquayphuquoc.com.vn%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fbunquayphuquoc.com.vn%252Ff205d59c536b7cc%26relation%3Dparent.parent&container_width=555&height=363&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fbunquaytphcm%2F&locale=vi_VN&sdk=joey&show_facepile=true&small_header=false&tabs=timeline&width=500
200 OK 34 kB URL HTTP/2 www.facebook.com/v2.8/plugins/page.php?adapt_container_width=true&app_id=301253440027125&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df10465371bfb6e%26domain%3Dbunquayphuquoc.com.vn%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fbunquayphuquoc.com.vn%252Ff205d59c536b7cc%26relation%3Dparent.parent&container_width=555&height=363&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fbunquaytphcm%2F&locale=vi_VN&sdk=joey&show_facepile=true&small_header=false&tabs=timeline&width=500
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (30794)
Hash 147470d7abf8313a10ce1f560f905c41
7157454138b1664ae03718a2c3875e781ac5e72d
2b13386aba952ba236738dc05428bdc41b7d36c24a6f5e6d2e3946225c4c1345
GET /v2.8/plugins/page.php?adapt_container_width=true&app_id=301253440027125&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df10465371bfb6e%26domain%3Dbunquayphuquoc.com.vn%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fbunquayphuquoc.com.vn%252Ff205d59c536b7cc%26relation%3Dparent.parent&container_width=555&height=363&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fbunquaytphcm%2F&locale=vi_VN&sdk=joey&show_facepile=true&small_header=false&tabs=timeline&width=500 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v8.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: io7zLZxYLVJZaLCRbpX82bf1gJdgH3UFRDzWmXXSJ+Obl5ImqbyWM8/lH8EvwWO4BQHyhdycrwuo2Uf85eR8Ig==
date: Tue, 06 Sep 2022 11:59:23 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/dia_chi2.jpg&h=635&w=1600&zc=1
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/dia_chi2.jpg&h=635&w=1600&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
GET /timthumb.php?src=/upload/images/Slider2/dia_chi2.jpg&h=635&w=1600&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 170093
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_1Ca-Tom.jpg&h=300&w=300&zc=1
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_1Ca-Tom.jpg&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
GET /timthumb.php?src=/upload/images/Pic_Menu(NEW2)/2_1Ca-Tom.jpg&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 30174
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/isotope.pkgd.min.js
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/js/isotope.pkgd.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /js/isotope.pkgd.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 34694
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/jquery.nicescroll.min.js
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/js/jquery.nicescroll.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /js/jquery.nicescroll.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 62311
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/ajax-loader.gif
404 Not Found 0 B URL HTTP/2 bunquayphuquoc.com.vn/css/ajax-loader.gif
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
GET /css/ajax-loader.gif HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/slick-theme.min.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
www.youtube.com/embed/IY_MtenwPmU
200 OK 0 B URL HTTP/2 www.youtube.com/embed/IY_MtenwPmU
IP
GET /embed/IY_MtenwPmU HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Sep 2022 11:59:21 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=t84tbZ1rw50; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=HbjuinBxvOE; Domain=.youtube.com; Expires=Sun, 05-Mar-2023 11:59:21 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+601; expires=Thu, 05-Sep-2024 11:59:20 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/gmaps.min.js
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/js/gmaps.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /js/gmaps.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 31836
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/bootstrap-datepicker.min.js
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/js/bootstrap-datepicker.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /js/bootstrap-datepicker.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 33529
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/s_quan.jpg&h=635&w=1600&zc=1
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Slider2/s_quan.jpg&h=635&w=1600&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
GET /timthumb.php?src=/upload/images/Slider2/s_quan.jpg&h=635&w=1600&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 280314
content-type: image/jpeg
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/css/fonts/slick.woff
404 Not Found 0 B URL HTTP/2 bunquayphuquoc.com.vn/css/fonts/slick.woff
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /css/fonts/slick.woff HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/slick-theme.min.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/skrollr.min.js
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/js/skrollr.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /js/skrollr.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:34 GMT
accept-ranges: bytes
content-length: 12615
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/elements.js
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/js/elements.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /js/elements.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 15860
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-8-KhanLanh1.png&h=300&w=300&zc=1
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-8-KhanLanh1.png&h=300&w=300&zc=1
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
GET /timthumb.php?src=/upload/images/Pic_Menu(Cu)/N-8-KhanLanh1.png&h=300&w=300&zc=1 HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/5.3.29
accept-ranges: none
cache-control: max-age=864000, must-revalidate
expires: Fri, 16 Sep 2022 11:59:18 GMT
last-modified: Tue, 06 Sep 2022 11:59:18 GMT
content-length: 86787
content-type: image/png
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 bunquayphuquoc.com.vn/js/bootstrap.min.js
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
Analyzer Verdict Alert fortinet Malware
GET /js/bootstrap.min.js HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 08 Oct 2020 14:20:33 GMT
accept-ranges: bytes
content-length: 37045
content-type: application/javascript
date: Tue, 06 Sep 2022 11:59:18 GMT
server: Apache
X-Firefox-Spdy: h2
bunquayphuquoc.com.vn/images/background/ft-res-bg.jpg
404 Not Found 0 B URL HTTP/2 bunquayphuquoc.com.vn/images/background/ft-res-bg.jpg
IP
ASN #135905 VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
GET /images/background/ft-res-bg.jpg HTTP/1.1
Host: bunquayphuquoc.com.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bunquayphuquoc.com.vn/css/elements.css
Cookie: PHPSESSID=fklbrf50h4aa1q7he44vd615i1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
accept-ranges: bytes
content-type: text/html
date: Tue, 06 Sep 2022 11:59:19 GMT
server: Apache
X-Firefox-Spdy: h2
103.138.88.56
143.204.55.115
31.13.72.36
93.184.220.29
104.17.24.14
23.36.77.32