nhipcaunhadat.net/
301 Moved Permanently 226 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 252216d9a4b1e6cf3593eb3d17238559
ec422c95201d180a93c804551bb8310054d16d7f
46c01858bd5cb1a1a72865111b8f3f56d6db08f07051f95511177ea36d341e97
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: http://www.nhipcaunhadat.net/
Date: Sun, 18 Dec 2022 03:25:54 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 226
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3cf7e36f17a535e53e5213c02cf2b4
e65acbc03135ce135b9e91b4f74b3e1439faa6f6
a2317476862acd0a92fe523454c3991752b07ba14e7667f421dd9624e0233758
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6988
Expires: Sun, 18 Dec 2022 05:22:22 GMT
Date: Sun, 18 Dec 2022 03:25:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2039a1dda99e075b82840608771d2326
e89713a35b312f3b87fbeaad98f03fddecbf77ce
aae78c754635e9833fa6c231d775bddc82add02f9ce3197a0b260a0806e708c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AAE78C754635E9833FA6C231D775BDDC82ADD02F9CE3197A0B260A0806E708C3"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2707
Expires: Sun, 18 Dec 2022 04:11:01 GMT
Date: Sun, 18 Dec 2022 03:25:54 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 18 Dec 2022 02:34:16 GMT
content-type: application/json
age: 3098
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555fc6e99ad3bf077d1c4b9b805e428d
4e800fc8e809a950288df0e94992084647762561
fac00cada519279717e2a13528cb202d292fc92ed5eb42782c41f8e7b9509eaf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7001
Expires: Sun, 18 Dec 2022 05:22:35 GMT
Date: Sun, 18 Dec 2022 03:25:54 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: emDF452x/oZzscMYZqeSP9J/t1ckLgb2SRTPaY2gqzTUCuAiRRqgXTN6h8WqEy5WrYuWCcPkSCo=
x-amz-request-id: 3CE1ETK1GTH073T7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 18 Dec 2022 02:53:56 GMT
age: 1918
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 03:25:54 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 18 Dec 2022 03:08:00 GMT
age: 1075
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/
301 Moved Permanently 177 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 4b00c78f45193212e85b791da23d7799
381f5ebf553597d9d6deba82e1dae74131eff3de
da5574a22bc518dc96e94b352edfabc013c9e7b1590dff60f4780398444552e4
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.nhipcaunhadat.net/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 18 Dec 2022 03:25:55 GMT
Expires: Sun, 18 Dec 2022 03:25:55 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 177
Server: GSE
ocsp.digicert.com/
200 OK 471 B IP
Hash 2d1752cd6eb7f48e7494373911a5b996
43d9c23c4d03cccce0fc478f0e12c0874dc762fd
aded7fd1d638c001b0b462fdfeee0549d2ed61b51ced88eb83690e2e20ed36d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 779
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:55 GMT
Etag: "639d86ab-1d7"
Last-Modified: Sun, 18 Dec 2022 03:12:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/s/gts1d4/Z-9wJFAxL2M
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/Z-9wJFAxL2M
IP
Hash a385255f5f324d71d17daafd013b7134
5bbbcae8a8685b574eef2be9eed2ea844ead6092
6ec34a5f93482d0ebd1634805e88f8cde2fd506b0d810849e4aebca3eaece5c0
POST /s/gts1d4/Z-9wJFAxL2M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:55 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 92k3zWlPrIrVdZDRtcJSJw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: a7zO06mqZGTjBn6MCHTAgq4MvAE=
ocsp.digicert.com/
200 OK 280 B IP
Hash 46d5ddccf708d1e5c5c659a928a881ae
54cf5b01a1f9cd6fdd7e2f87085c8f7bb18aca09
aa7c526867f352860bb0bb8dae4f2663143a082c28701011a6cf08e48298ca8a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6589
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Last-Modified: Sun, 18 Dec 2022 01:36:08 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b09c5fd392d9d40a99ab4c70e59fd24e
40e39676ca8052fd8b9eab501750f0011737f507
8c2b60b0ec0a8121d5c5a8dda2ec1a57b923efe10246386262f359f6a458cdcd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 46d5ddccf708d1e5c5c659a928a881ae
54cf5b01a1f9cd6fdd7e2f87085c8f7bb18aca09
aa7c526867f352860bb0bb8dae4f2663143a082c28701011a6cf08e48298ca8a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6589
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Last-Modified: Sun, 18 Dec 2022 01:36:08 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280
www.nhipcaunhadat.net/
200 OK 94 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (40667)
Hash db7171664047616f95248236598c13ee
3d8eb343dd0d269386398285b44f1ae34cee5449
6fc8c1407c7d46b8a25aba5a7523157aea880c3b2140dee8c70821a2c0338178
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sun, 18 Dec 2022 03:25:55 GMT
date: Sun, 18 Dec 2022 03:25:55 GMT
cache-control: private, max-age=0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
etag: W/"38c0fde92d269886259f3c884f9e35623ef435387fa8f1aec9427d053b027c30"
x-robots-tag: all,noodp
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 94360
server: GSE
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400
200 OK 983 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400
IP
Hash 39a0b45c25cb498ba4eb1447891327d4
5f574975edd876a5515857b33a74995077a06ea1
d631ab28843126c2378ae90259ca8ee5d3a0713ff709f50bbd050cb32db345d7
GET /css?family=Roboto:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Dec 2022 03:25:56 GMT
date: Sun, 18 Dec 2022 03:25:56 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/js/cookienotice.js
200 OK 2.0 kB URL HTTP/2 www.nhipcaunhadat.net/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sun, 18 Dec 2022 03:25:56 GMT
expires: Sun, 25 Dec 2022 03:25:56 GMT
cache-control: public, max-age=604800
last-modified: Sat, 17 Dec 2022 17:50:57 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3fd8aa5fa6c5a6ffb05a29e9d145cb59
cb8806b6441a2e10bf6f300d3fc4cf91bb054203
d42835745fb09c12aac76e4bbd678234255abeb2e8b1f1de5d7a5c7ad581ec77
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-cMCGMQ-WdDA/YH5310bZxwI/AAAAAAAAMuA/bukv4_VQLjYylsDD7oNQ1GUZx5SUdGkkQCLcBGAsYHQ/s16000/3.png
200 OK 6.0 kB URL HTTP/2 1.bp.blogspot.com/-cMCGMQ-WdDA/YH5310bZxwI/AAAAAAAAMuA/bukv4_VQLjYylsDD7oNQ1GUZx5SUdGkkQCLcBGAsYHQ/s16000/3.png
IP
File type PNG image data, 320 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash c20228c407fbd8ed8942122070cf7f48
b730cfcb8d07c4e60f75fcc336368bf12080eb0a
b300feab7060d79693e21645df8d68cc7bd044eee997aca85a58fed5ab0acae5
GET /-cMCGMQ-WdDA/YH5310bZxwI/AAAAAAAAMuA/bukv4_VQLjYylsDD7oNQ1GUZx5SUdGkkQCLcBGAsYHQ/s16000/3.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="3.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 5972
x-xss-protection: 0
date: Sun, 18 Dec 2022 00:49:02 GMT
expires: Sat, 17 Dec 2022 06:00:46 GMT
cache-control: public, max-age=86400, no-transform
age: 9414
etag: "v32e4"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3fd8aa5fa6c5a6ffb05a29e9d145cb59
cb8806b6441a2e10bf6f300d3fc4cf91bb054203
d42835745fb09c12aac76e4bbd678234255abeb2e8b1f1de5d7a5c7ad581ec77
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 702412865d7c7fe537f320d7d506cd7a
bfad3c0ed7b2bc7d6af44af5aba84ca9c4adb092
26c6a24cf31c692c0b483e304a711a12ae3b61239a0b62fa10a74e4eeb6c1ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2092647672-widgets.js
200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2092647672-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 689971018982703ab88ce528368b9190
be9697d57e5c19d36c52aacd8b04a6a159a2f3bd
cf8b513cfd596cffc3a7e456eccc198b8e409f5aaf624d5dbeecdd748dce0cef
GET /static/v1/widgets/2092647672-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56341
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 02:10:48 GMT
expires: Fri, 15 Dec 2023 02:10:48 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 10 Dec 2022 00:52:24 GMT
content-type: text/javascript
age: 263708
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3fd8aa5fa6c5a6ffb05a29e9d145cb59
cb8806b6441a2e10bf6f300d3fc4cf91bb054203
d42835745fb09c12aac76e4bbd678234255abeb2e8b1f1de5d7a5c7ad581ec77
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.net/gh/doannguyennet/images/fbmessenger.svg
200 OK 481 B URL HTTP/2 cdn.jsdelivr.net/gh/doannguyennet/images/fbmessenger.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (450)
Hash 8a75e404c349d6a0e6864159d91131a0
80f35d1921966e8fc408aed3bd85cec756a9a36c
6298f633c84bfe41e028d1336a04ca4b9ae9c2f8cbc5ef5a49727c9ce3b20ddf
GET /gh/doannguyennet/images/fbmessenger.svg HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/svg+xml
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"344-/3vULS9E1HIr2w3P0Zby3LsXbMM"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 18 Dec 2022 03:25:56 GMT
age: 17355
x-served-by: cache-fra-eddf8230050-FRA, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 481
X-Firefox-Spdy: h2
cdn.jsdelivr.net/gh/doannguyennet/images/zalo.svg
200 OK 2.8 kB URL HTTP/2 cdn.jsdelivr.net/gh/doannguyennet/images/zalo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2385)
Hash 7aa82ad21592fbf2907127b089d8e63c
f69bb45f31036d6a7ae045f73ed5032e80b62e13
17589c69b224ab2cd158c11db69222d01001461e5fac9e76e33f3307af82d6ae
GET /gh/doannguyennet/images/zalo.svg HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: image/svg+xml
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"1891-pbNj3YcbJ67I5DmNqEXMRhN/Sb4"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 18 Dec 2022 03:25:56 GMT
age: 42959
x-served-by: cache-fra-eddf8230056-FRA, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2794
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aaf303254060f6df292454856e7ce465
a325ecaf071923fa0913b87cd2531985357c4cf3
a58a0b3af20c7018b9e4d5083e362d3dd0eead73f7e51f4982bd871630aee15a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A58A0B3AF20C7018B9E4D5083E362D3DD0EEAD73F7E51F4982BD871630AEE15A"
Last-Modified: Fri, 16 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15491
Expires: Sun, 18 Dec 2022 07:44:07 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aaf303254060f6df292454856e7ce465
a325ecaf071923fa0913b87cd2531985357c4cf3
a58a0b3af20c7018b9e4d5083e362d3dd0eead73f7e51f4982bd871630aee15a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A58A0B3AF20C7018B9E4D5083E362D3DD0EEAD73F7E51F4982BD871630AEE15A"
Last-Modified: Fri, 16 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15491
Expires: Sun, 18 Dec 2022 07:44:07 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 702412865d7c7fe537f320d7d506cd7a
bfad3c0ed7b2bc7d6af44af5aba84ca9c4adb092
26c6a24cf31c692c0b483e304a711a12ae3b61239a0b62fa10a74e4eeb6c1ae4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aaf303254060f6df292454856e7ce465
a325ecaf071923fa0913b87cd2531985357c4cf3
a58a0b3af20c7018b9e4d5083e362d3dd0eead73f7e51f4982bd871630aee15a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A58A0B3AF20C7018B9E4D5083E362D3DD0EEAD73F7E51F4982BD871630AEE15A"
Last-Modified: Fri, 16 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15491
Expires: Sun, 18 Dec 2022 07:44:07 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aaf303254060f6df292454856e7ce465
a325ecaf071923fa0913b87cd2531985357c4cf3
a58a0b3af20c7018b9e4d5083e362d3dd0eead73f7e51f4982bd871630aee15a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A58A0B3AF20C7018B9E4D5083E362D3DD0EEAD73F7E51F4982BD871630AEE15A"
Last-Modified: Fri, 16 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15491
Expires: Sun, 18 Dec 2022 07:44:07 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 975edcb8d00c99b6a7c953b36e22a60f
03a89c27fd9297ad18539095ce8036752b0b9970
7c5e88b1f7a86de4db6fdd164b45082bc6636bcd8a50de67a74be6ca4d799737
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 03:25:56 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "B220EA33D4B31E2B128961B40ECFDFEF6B23B2D3"
Expires: Sun, 18 Dec 2022 15:00:00 GMT
Last-Modified: Sun, 18 Dec 2022 03:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 270
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b4cb4bcb990b59-OSL
cdn.rawgit.com/hoangthienblogger/code/master/hieuung1.js
301 Moved Permanently 103 B URL HTTP/2 cdn.rawgit.com/hoangthienblogger/code/master/hieuung1.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash ba02b53bb1470b1cbda11499507c46b5
1fbb0a67ce0501d3eae16aaaf808bb4b18cb16fe
485a4b5b5580d3f61854e1a7ae31e6f3c11f43072acbee2df2b6ceae6cee0a95
GET /hoangthienblogger/code/master/hieuung1.js HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/plain; charset=utf-8
content-length: 103
location: https://cdn.jsdelivr.net/gh/hoangthienblogger/code@master/hieuung1.js
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
age: 59222
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/18/2022 03:25:56
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230115-FRA, cache-chi-kigq8000054-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 9501af550363ec77265aaf5cb4afbfde
cdn-cache: EXPIRED
X-Firefox-Spdy: h2
cdn.rawgit.com/hoangthienblogger/code/master/fontawesome-webfont.woff2?v=1
301 Moved Permanently 117 B URL HTTP/2 cdn.rawgit.com/hoangthienblogger/code/master/fontawesome-webfont.woff2?v=1
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash 0897ea478d54b98a092b170705bf676d
07cf99ef4631a508f7f8577425fc7dea5687a2d9
f184af350c79d8969b62178824769fbe1dd0a30a7500981e138034eb7bdbefbe
GET /hoangthienblogger/code/master/fontawesome-webfont.woff2?v=1 HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nhipcaunhadat.net
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/plain; charset=utf-8
content-length: 117
location: https://cdn.jsdelivr.net/gh/hoangthienblogger/code@master/fontawesome-webfont.woff2
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-expose-headers: *
age: 8456
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/18/2022 03:25:56
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230022-FRA, cache-chi-kigq8000113-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 9863a3a4f59b02c3932425f9e3babd90
cdn-cache: EXPIRED
X-Firefox-Spdy: h2
cdn.rawgit.com/hoangthienblogger/code/master/hieuung2.js
301 Moved Permanently 103 B URL HTTP/2 cdn.rawgit.com/hoangthienblogger/code/master/hieuung2.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash 620a989726f0491d8bac844a0d6da16f
d03d874947c0a60083212a60d51989f161e1c6cf
16c52a761a19dd5e7da4c4bcbb78e9d5f4a91dd7d4bbf3fc542865f34403a525
GET /hoangthienblogger/code/master/hieuung2.js HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/plain; charset=utf-8
content-length: 103
location: https://cdn.jsdelivr.net/gh/hoangthienblogger/code@master/hieuung2.js
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
age: 59221
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/18/2022 03:25:56
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230136-FRA, cache-chi-kigq8000109-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 13c68bdd92fe2c7c5022df33a3c5b783
cdn-cache: EXPIRED
X-Firefox-Spdy: h2
cdn.rawgit.com/hoangthienblogger/code/master/UTMNeoSansIntel.woff2
301 Moved Permanently 113 B URL HTTP/2 cdn.rawgit.com/hoangthienblogger/code/master/UTMNeoSansIntel.woff2
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash 26ddad101c068dc6daa3cc90a80facbd
4c9404650d0c5e2ac9fb99ac8b37bbf69acea726
fc4271fbe0e29124b66f978254b93b033e1556c879aaf9dd973205735236ea8d
GET /hoangthienblogger/code/master/UTMNeoSansIntel.woff2 HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nhipcaunhadat.net
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/plain; charset=utf-8
content-length: 113
location: https://cdn.jsdelivr.net/gh/hoangthienblogger/code@master/UTMNeoSansIntel.woff2
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-expose-headers: *
age: 8456
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/18/2022 03:25:56
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230116-FRA, cache-chi-kigq8000165-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 07f11726d663e0b59a279c29f4ddf222
cdn-cache: EXPIRED
X-Firefox-Spdy: h2
cdn.rawgit.com/hoangthienblogger/code/master/hieuung3.js
301 Moved Permanently 103 B URL HTTP/2 cdn.rawgit.com/hoangthienblogger/code/master/hieuung3.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash 23ca2b1f1f100da37e30263bcc49cad8
77d83c227ae2e6511df73e3ec2862da73e7fce58
f983a1926b73c67e7e89a5c9f1fb2ad6ab77cd4077d15a7889fcc2b19443de15
GET /hoangthienblogger/code/master/hieuung3.js HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/plain; charset=utf-8
content-length: 103
location: https://cdn.jsdelivr.net/gh/hoangthienblogger/code@master/hieuung3.js
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
age: 59221
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/18/2022 03:25:56
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230088-FRA, cache-chi-kigq8000026-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 369fa8c9ead5b425a2ce51c7aadbdeda
cdn-cache: EXPIRED
X-Firefox-Spdy: h2
cdn.rawgit.com/hoangthienblogger/code/master/UTMNeoSansIntelBold.woff2
301 Moved Permanently 117 B URL HTTP/2 cdn.rawgit.com/hoangthienblogger/code/master/UTMNeoSansIntelBold.woff2
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash ca01306ebfeb00455a16e291f0293ee8
0f55ca38884dff908d661244c1790ecf6d75e24d
d4b919a3d9edfae9a80b95f6739f1e566900be9ac672d5d3a26774987b667718
GET /hoangthienblogger/code/master/UTMNeoSansIntelBold.woff2 HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nhipcaunhadat.net
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/plain; charset=utf-8
content-length: 117
location: https://cdn.jsdelivr.net/gh/hoangthienblogger/code@master/UTMNeoSansIntelBold.woff2
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-expose-headers: *
age: 8456
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/18/2022 03:25:56
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230027-FRA, cache-chi-kigq8000110-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 401c9be9afdcf78b8b3e6f3abe1020b1
cdn-cache: EXPIRED
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/du-an?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct
200 OK 13 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/du-an?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct
IP
File type Unicode text, UTF-8 text, with very long lines (62898)
Hash 5955bbaf2ba93bb4efc75133c9613e6d
d9223dda12047a4ae0bac730fa7354ae7d614de0
a6e41de1d514923c0ca689a6a97d1ab763944735b64ef98cb7656c3d0a0cec79
GET /feeds/posts/default/-/du-an?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"77f892c70b4994f2fac77d02ed9f8a90cbe523d14f84a1d66f6aae2f29f9d323"
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 18 Dec 2022 03:25:57 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-encoding: gzip
content-length: 13320
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Sun, 18 Dec 2022 04:28:42 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Sun, 18 Dec 2022 04:28:42 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Sun, 18 Dec 2022 04:28:42 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3766
Expires: Sun, 18 Dec 2022 04:28:42 GMT
Date: Sun, 18 Dec 2022 03:25:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55ed0b2b-29ce-4d76-b023-81de03fa2be2.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55ed0b2b-29ce-4d76-b023-81de03fa2be2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 48ada927b99cfaa3fb3f64a1bac0070c
d033137dd828e42ce811226861ba6c7ad365f40c
e161cbd3e1eef6ede739a758bc4524abc2c2d66998f86f16f74c446ad7d22603
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55ed0b2b-29ce-4d76-b023-81de03fa2be2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8130
x-amzn-requestid: 4a3a96af-df3d-44b1-ae92-3c33339be260
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2PxEaKIAMF3Pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3731-6d7a4d76179c29f76a494618;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4K4i-dYFmQJOFx-FnzS5sbfK3vW7VJA0RL1mmjViBsvgz52mI5H-Mw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:10 GMT
age: 19906
etag: "d033137dd828e42ce811226861ba6c7ad365f40c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cde09a4-7b92-4452-ab94-7a69956cac79.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cde09a4-7b92-4452-ab94-7a69956cac79.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 74d11c8c5c4cd0e0f73e6f57a5e66a86
c22be5adb0f7c024eaff5feb131a8406b04935b0
122a82dd7caa4a895978100cd9b2d54e7dbd6176cc2129444e5f3988e5dfcd3a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cde09a4-7b92-4452-ab94-7a69956cac79.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15272
x-amzn-requestid: e31e3815-629e-4497-aa25-3b4b18fdf5eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT3O9F-EoAMFxNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e38c5-7edf7e5900207bda1ed8b147;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:46:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 75oSKW7PEIG1Q2SWIIOa4Rrlq4L23jzrl1ASBPiWP4Ewcx3OZfIPCw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:10 GMT
etag: "c22be5adb0f7c024eaff5feb131a8406b04935b0"
content-type: image/jpeg
age: 19906
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfd0e913579b4ff2f511223d70cb01fb
497e0ffef816e100e6ddc221ec17d5f389c1142a
bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KyEMrUTeuVTPJ3EIkrH1DLYqa4bHK7fe6dApTAFP4XY0G4airnflGA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 20930
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ada04738696f861648635c9ba98841e4
ce644cd4349d88aa7c24b2503b0b18b444061639
e5cee777efbf1d8a0f95f6cce71199e5f016a91f90cf0afe38bc86654b9d730d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8696
x-amzn-requestid: c897aeed-a082-46a1-965f-39e8c763cb05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10ZH3jIAMF0gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-548ac80840737a20743980f5;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JecluZu8ExMmP-UHM8QbK-bjm_yqULU1tl2QQDfKMea8NHM6y2JI7g==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 20930
etag: "ce644cd4349d88aa7c24b2503b0b18b444061639"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed374d0c34e8b2e15f08a6479a4f45e7
5db9e59699048998f0685e940640eae19ef11c8e
9933854830be796a87cfe44b6b8336294e2d3dbbe3205f267720aca6968c3a21
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12125
x-amzn-requestid: e44faa15-1dfd-4bc0-bdfb-307c3de2755d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2QPFZAIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3734-33d636210a1e24742ee71187;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DmeWRYIlUMCR8Nds0-n0a9ju0ySR7ZuTAS82Lu8sZxPXQpBJkqzvww==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:52:21 GMT
age: 20015
etag: "5db9e59699048998f0685e940640eae19ef11c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e58e21a-d103-491b-8b21-7309aa7c0fb7.jpeg
200 OK 3.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e58e21a-d103-491b-8b21-7309aa7c0fb7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4fb14f45fdbdf907975ee1c9ab0dab57
4a47d03bf202c65914ee8dfcbe1e4f84c53e729f
2b263ba9a1ed4446876c52a41662479d3a944ebdb3cd8605a84a6410e5dbbd41
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e58e21a-d103-491b-8b21-7309aa7c0fb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2960
x-amzn-requestid: d709abc1-74e3-4e17-8b19-945bb2f589e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10XHMloAMFyqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-5c2a97e62e1c758c6755d77f;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: fzu0L-rcI5_8UG48ULcunFfjxuKMXBfS9ETcQM4Cpr-A7tPImz3Paw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 20930
etag: "4a47d03bf202c65914ee8dfcbe1e4f84c53e729f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
4.bp.blogspot.com/-PBgM_8dt4nc/XLn3SxZgrXI/AAAAAAAAEUE/hzAaXfJqpoECsc18h74QBEMLgr__6AFXgCEwYBhgL/s1600/Panorama5-2.jpg
200 OK 263 kB URL HTTP/2 4.bp.blogspot.com/-PBgM_8dt4nc/XLn3SxZgrXI/AAAAAAAAEUE/hzAaXfJqpoECsc18h74QBEMLgr__6AFXgCEwYBhgL/s1600/Panorama5-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 950x425, components 3\012- data
Size 263 kB (263153 bytes)
Hash 7f9d830407037e52b1d19d4b5662131d
53a928431c8f799ddf7becf7dfc79d982f629e0e
f70796e4778bec0ef43345feaaa0b52cb4b2ca7f173ae59d31c9c930f68e4315
GET /-PBgM_8dt4nc/XLn3SxZgrXI/AAAAAAAAEUE/hzAaXfJqpoECsc18h74QBEMLgr__6AFXgCEwYBhgL/s1600/Panorama5-2.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1143"
expires: Mon, 19 Dec 2022 03:25:56 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Panorama5-2.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:56 GMT
server: fife
content-length: 263153
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/datnen?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01
200 OK 3.6 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/datnen?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01
IP
File type Unicode text, UTF-8 text, with very long lines (25732)
Hash 0c487e198d07cf609b73a6b7f9d9b6dc
20ee78c59f526efd325e061f340cb9ce6758db7d
3a66d5bb13bceb34af61060b61b16457525a57e3b5ae1ac15a17b4c8cbedf5e1
GET /feeds/posts/default/-/datnen?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01 HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"03d47f3ad06768ccb63961e387ffdd6c98a0a2e9deed4313a705964ae6519c47"
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 18 Dec 2022 03:25:57 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-encoding: gzip
content-length: 3574
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/canho?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01
200 OK 5.9 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/canho?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01
IP
File type Unicode text, UTF-8 text, with very long lines (34501)
Hash 9843b1c60458fa491e76c569ba81f05b
6b19d91946f41d5c44d63b70248afc6badbd1988
e03d4962afc548b2e640085bd8fcd7b6fe2739efb9b4c9455c1ff7d3e9f2972a
GET /feeds/posts/default/-/canho?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01 HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"043bb60ffde6230f80f0d74e20870bfca629bdf498b5a5b3a4374d12eec324a4"
date: Sun, 18 Dec 2022 03:25:57 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 18 Dec 2022 03:25:58 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-encoding: gzip
content-length: 5906
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/nhapho?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01
200 OK 7.4 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/nhapho?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01
IP
File type Unicode text, UTF-8 text, with very long lines (43704)
Hash 1fca5be30656b32d35fa890b33708aa4
490aa183fe883669dc5e627b08e83ae016ec27c4
c472254b0064dd66b3b8724167b4422f77b4f809c1fb9869ae73f6f1b8211f58
GET /feeds/posts/default/-/nhapho?max-results=6&orderby=published&alt=json-in-script&callback=labelproduct01 HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"b73e85418b5639bd070c861f4194430037717cb1670555982ae5b8397d00103a"
date: Sun, 18 Dec 2022 03:25:57 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 18 Dec 2022 03:25:58 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-encoding: gzip
content-length: 7360
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
cdn.rawgit.com/hoangthienblogger/code/master/UTMNeoSansIntel-Italic.woff2
301 Moved Permanently 120 B URL HTTP/2 cdn.rawgit.com/hoangthienblogger/code/master/UTMNeoSansIntel-Italic.woff2
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash e8b368b41594b568959e1d8a4264e38a
8734a5891ac3f05722a80f0e415add7f830b655e
3079818da41aa5be990a84cff3ed20f625a5a8a99721da7bfe0b113c3955a636
GET /hoangthienblogger/code/master/UTMNeoSansIntel-Italic.woff2 HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nhipcaunhadat.net
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Sun, 18 Dec 2022 03:25:58 GMT
content-type: text/plain; charset=utf-8
content-length: 120
location: https://cdn.jsdelivr.net/gh/hoangthienblogger/code@master/UTMNeoSansIntel-Italic.woff2
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-expose-headers: *
age: 8458
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/18/2022 03:25:58
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230073-FRA, cache-chi-kigq8000117-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: 0abec28810f0ac9aac1f924a12e6d34b
cdn-cache: EXPIRED
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/Tin-tuc?max-results=2&orderby=published&alt=json-in-script&callback=labeltintuc
200 OK 5.4 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/Tin-tuc?max-results=2&orderby=published&alt=json-in-script&callback=labeltintuc
IP
File type Unicode text, UTF-8 text, with very long lines (21660)
Hash a5e26b5d0e408386d728b19396d51178
22bf8bd3fdb086a0d5b26b846b0ff2392ae85f03
5fbf1e8eaefe2f5d7a087151ceb3245b81704011b0daa8f7cb41da349d5c480d
GET /feeds/posts/default/-/Tin-tuc?max-results=2&orderby=published&alt=json-in-script&callback=labeltintuc HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"72a8ffa90df897b002bb2c9ab008acb241e3c894b5db681f4603ee59c91adbfa"
date: Sun, 18 Dec 2022 03:25:58 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Sun, 18 Dec 2022 03:25:59 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-encoding: gzip
content-length: 5384
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 496d96f69203ab6ad46a661482df3c81
1e09de48fbd4df599eab45d9339ebf6cee9825d7
b43e2510e05b3ca9adfc47f8526c71c732b3f530bd1ecec189a21b777f131498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5043
Cache-Control: max-age=132080
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:58 GMT
Etag: "639dd583-1d7"
Expires: Mon, 19 Dec 2022 16:07:18 GMT
Last-Modified: Sat, 17 Dec 2022 14:43:15 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 496d96f69203ab6ad46a661482df3c81
1e09de48fbd4df599eab45d9339ebf6cee9825d7
b43e2510e05b3ca9adfc47f8526c71c732b3f530bd1ecec189a21b777f131498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5043
Cache-Control: max-age=132080
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:58 GMT
Etag: "639dd583-1d7"
Expires: Mon, 19 Dec 2022 16:07:18 GMT
Last-Modified: Sat, 17 Dec 2022 14:43:15 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
www.nhipcaunhadat.net/feeds/posts/default/-/Tin-tuc?max-results=5&orderby=published&alt=json-in-script&callback=labeltintuc01
200 OK 11 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/Tin-tuc?max-results=5&orderby=published&alt=json-in-script&callback=labeltintuc01
IP
File type Unicode text, UTF-8 text, with very long lines (55892)
Hash 165fec950b9b16666de57d6447fb1054
0674f1783ea0513fe5a9afbe6524ecd875409d42
88e211890e3715a51b0fbeed7442d51fb601c2eec88bd2e43bed182d1871b777
GET /feeds/posts/default/-/Tin-tuc?max-results=5&orderby=published&alt=json-in-script&callback=labeltintuc01 HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Cookie: sc_simpleCart_chunks=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"9dd2a3b1d48e1425fc531d8fd02eae54e2f8663c52214596576dd7df4e9da70b"
date: Sun, 18 Dec 2022 03:25:58 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Sun, 18 Dec 2022 03:25:59 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-length: 10812
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/27_FzQmpw6G.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.0 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/27_FzQmpw6G.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash 96448526f74455fa478781867dc027d9
f5caf68dbf398e5a5f34bd227d8b11f59600a850
b237faa2779c31fc7100f098059807c41cd59f83b73886746d6d080cfd15d60c
GET /rsrc.php/v3/yY/l/0,cross/27_FzQmpw6G.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 17 Dec 2023 18:31:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: lkSFJvdEVfpHh4GGfcAn2Q==
x-fb-debug: CGLEqUmxK052SJONQX2ywN5uAmAOCFM/oKGyAmvc6UumlDG79uOA6aJaTWBZwUDLO1IafGoNRknuRoK0b1BFwA==
content-length: 5009
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yf/r/uftvpBOwAM5.js?_nc_x=Ij3Wp8lg5Kz
200 OK 5.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yf/r/uftvpBOwAM5.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5828)
Hash eef8af5be8755e2c304dfeca97c6c8b9
c712189796acf6eb6fcceaffe551b25efd475a14
c3e1914f40e29bafe042cbd8f9f2bd58a257523c0ef86764eb91a18ed2980c42
GET /rsrc.php/v3/yf/r/uftvpBOwAM5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 12 Dec 2023 19:18:07 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 7vivW+h1XiwwTf7Kl8bIuQ==
x-fb-debug: DQA7CEEalbLyIkINdpmwdck54KCYNaa5CFNV2SfQ0SuGwzMnQgtrq2P1AgHtLZ3KwDNZtvKOGDEBPJpGvK9nXQ==
content-length: 5272
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yZ/r/0cKQbVrk19s.js?_nc_x=Ij3Wp8lg5Kz
200 OK 6.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yZ/r/0cKQbVrk19s.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (10595)
Hash abc01c5cb9e1f65a8184bd3fa28ae5df
9483687c254802204e18d50976e413162fa21481
482ebf05a0d3aaa255cf9fe29ae7016d2f0efcf0a88d5e31da31c9ad2f14a9e8
GET /rsrc.php/v3/yZ/r/0cKQbVrk19s.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Dec 2023 16:25:00 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: q8AcXLnh9lqBhL0/oorl3w==
x-fb-debug: PEI5GX+hbcDjnmK2QswxK1U+h5VvfYoRdBVHOQyty027ZXRTYHPsy1/MvHR3FBETfOcn3qWds4Vy5T9k2WqFxA==
content-length: 6166
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yL/r/PlsnJC666Fj.js?_nc_x=Ij3Wp8lg5Kz
200 OK 6.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yL/r/PlsnJC666Fj.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (7780)
Hash 855b9a9b80d4c186253eba4e0d14b18d
9af34af716b9116d91c7e2012f35cc756afdfbd3
39f68beab2325364f3a27998ec9692c7275ae0fb6d979fc3730bf881b65975ce
GET /rsrc.php/v3/yL/r/PlsnJC666Fj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Dec 2023 10:01:55 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: hVuam4DUwYYlPrpODRSxjQ==
x-fb-debug: 79PRpUI5725nFdxoLMb3MWriQQrcaSKEiQJkfONF+NGYqMlCrFsl9G/jdR7CMP0SlYUafsrpormDeILmdh7Ckg==
content-length: 6772
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
200 OK 293 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (327)
Hash 2f913d812811ef7e6fca30334c5972e2
d17caaa167443dc08696c672380f237e0db3fb02
ee8918a2f5d163099104b70f79065abc8fd309e69add57170546f2706956eef8
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 17:31:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: L5E9gSgR735vyjAzTFly4g==
x-fb-debug: JozAmGbv6Q/ypW/9mFDVhGRDvJLzH96hRCFe+yQPfrlShbw5A4aCDLFTAzn9dp0NGAOLoyROVOJyykTX7wApIw==
content-length: 293
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iLl54/yd/l/en_US/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iLl54/yd/l/en_US/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (2905)
Hash b3d9bbe7863976aa5b46e02c7798acc8
f3534203ec245879da839b07de21385a5203556d
f29d8841fd47e887686263e49027672a365baa6362e277192f635b303c9e016d
GET /rsrc.php/v3iLl54/yd/l/en_US/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 00:14:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: s9m754Y5dqpbRuAsd5isyA==
x-fb-debug: 3BLS+Qm1ZUHLXx82YSKNT1gnfbKWPgiF7O/N3DuBIKFX6StRH+n3Dcp5m4K1meSXwOLPfnt9NrJ8jHz6AAbd5A==
priority: u=3,i
content-length: 7100
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (8741)
Hash c92ef94e30a2dd9473fd9fe533472b73
97049e47de026939c75a885df9e8bb0fb56515ba
f2981c7109e60cf9f5a9e846a25800dbec20a923db028f310b6feb79415650bb
GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 16:05:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: yS75TjCi3ZRz/Z/lM0crcw==
x-fb-debug: evfItOvloioR/c07+wzrqPKDMVqsk/rikSZVsPDWuuSLYzVS0mhaVWm1QUEZB+vjKQxZfthMJ9fa+d0PRM5ryg==
priority: u=3,i
content-length: 16232
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEpO4/y1/l/en_US/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz
200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEpO4/y1/l/en_US/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (42114)
Hash 7524540c965e62fd3390f6aa427f5443
bd1b7935aef5eb36690c1982886b67470fc8e373
7f456c91da4be41030dff14d2537892f29329d157b92643d4ae329d30d6254d4
GET /rsrc.php/v3iEpO4/y1/l/en_US/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Dec 2023 19:55:48 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dSRUDJZeYv0zkPaqQn9UQw==
x-fb-debug: xMvJ+RkNiRVZbwVigObKFuw6q5qnvcsnXw0NyCAnMEJDvn9jvnflObaB5s5Wgsbtsrcczp4+3RFEvBqJWMFYkw==
priority: u=3,i
content-length: 23498
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 92 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash a08df3adf1c3de729756cc47b512d569
976f5eaef01c1d1e86cd3beeb79c76b1eb5eeed1
7dc5a30018573d832f3aa1d64b86abe5def2e5b1a42fa53a348d127e55a18f7d
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Dec 2022 03:25:56 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-03-10 20:26:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 121d365db7a9aba3915641185d93b963
cdn-cache: HIT
cf-cache-status: HIT
age: 20644763
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 77b4cb49dadafab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash 9286a42c6635bf94761964f1b129c0de
21d966c8e5833bec35fd039f80e6f7e47185743a
da4067af50abaeaa27b4dfc7f3accf1346f13d9fd9d3821222bc820378c7ed00
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 13:47:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: koakLGY1v5R2GWTxsSnA3g==
x-fb-debug: WcHbJWlvUdzpL+hxxdaY4u14r8KvrfP1dpQOMFVhsfPshD5cS/3aP2YuPmwz06o9j0A1bx/mZ6O+RSxfTqLKtQ==
content-length: 1615
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5542)
Hash 1ad15afc034f310427c81b0759603a2b
e5efd1d029dccf5fa8128c84aadb6544a4ab60e0
fedf63f655f9eef24c517c3d6762fb07b142213ba623d4a0b06614fb5d9754bd
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Dec 2023 02:03:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: GtFa/ANPMQQnyBsHWWA6Kw==
x-fb-debug: qzWSlkajReW9Myxaw0qgu0wZzVwIDt5a2Qv7OVAzL853BZmj4xEq2lH+gM4PWHvAcixloP+naH9ZQEjs/oxAAw==
priority: u=3,i
content-length: 12334
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/canho?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02
200 OK 4.9 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/canho?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02
IP
File type Unicode text, UTF-8 text, with very long lines (26165)
Hash e02223165895467981fa5a9f7af23128
8cee3dc250e6137905b600ed8efea0eac6d271dd
99b342c2dbf7dd2cc51e337bd26d917934672c3002823e6514902de4c77cec49
GET /feeds/posts/default/-/canho?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02 HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Cookie: sc_simpleCart_chunks=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"a38a6007314ff34eb10b02dbdad177de6724dfbc97c1e40b4612580a35f29b6c"
date: Sun, 18 Dec 2022 03:25:58 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Sun, 18 Dec 2022 03:25:59 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-length: 4914
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/nhapho?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02
200 OK 5.7 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/nhapho?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02
IP
File type Unicode text, UTF-8 text, with very long lines (30307)
Hash 3fee1bff9daa2f081552256eee693e21
a566e2e0279a2222f6c3c5bb3ad4e161a7a7d06f
45547c05e7a50ea9dea7cef13746a515fd9caeb7f7f6fa612933a18a39985f0b
GET /feeds/posts/default/-/nhapho?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02 HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Cookie: sc_simpleCart_chunks=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"566598296adff32b2e6e5ee4c4c6144a1f75565cd950fd6bd4c6db5883a557b4"
date: Sun, 18 Dec 2022 03:25:59 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Sun, 18 Dec 2022 03:26:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-length: 5662
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
www.nhipcaunhadat.net/feeds/posts/default/-/datnen?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02
200 OK 2.8 kB URL HTTP/2 www.nhipcaunhadat.net/feeds/posts/default/-/datnen?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02
IP
Hash 4bf22de027c86a7a817c61d4a4438f12
a6b5df6d6d7ff3c6a0643ba79d3fc7e597c1517a
ef42ae1888358eb80c7a2619a80b3d2546c0c94ee2ca47873640e2d91efb8697
GET /feeds/posts/default/-/datnen?max-results=3&orderby=published&alt=json-in-script&callback=labelproduct02 HTTP/1.1
Host: www.nhipcaunhadat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Cookie: sc_simpleCart_chunks=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"cab59edd43bea029297d2ae54cb2bf077cb72706e255d1b06db327e80c2fc627"
date: Sun, 18 Dec 2022 03:25:59 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Sun, 18 Dec 2022 03:26:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Tue, 13 Dec 2022 11:10:46 GMT
content-length: 2666
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1266d62a0505a7560e1bca7169ede0f6
d0f1bf98b2a532442eecd96949a1fd1be4d2cd92
9039afbfee400a09f93ed177943a84e57b8eeb295652b450252446146a1ec140
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1266d62a0505a7560e1bca7169ede0f6
d0f1bf98b2a532442eecd96949a1fd1be4d2cd92
9039afbfee400a09f93ed177943a84e57b8eeb295652b450252446146a1ec140
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1266d62a0505a7560e1bca7169ede0f6
d0f1bf98b2a532442eecd96949a1fd1be4d2cd92
9039afbfee400a09f93ed177943a84e57b8eeb295652b450252446146a1ec140
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1266d62a0505a7560e1bca7169ede0f6
d0f1bf98b2a532442eecd96949a1fd1be4d2cd92
9039afbfee400a09f93ed177943a84e57b8eeb295652b450252446146a1ec140
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz
200 OK 63 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz
IP
Hash 162e1a8f695008e72a8db69d9c64f18e
c46373bb881211c584949d816ca49a614f322364
4bd173b418e5a89d5bcc5960c72fd79aae42e4a365fe45461e602ef7a60297c1
GET /rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Dec 2023 22:28:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: fLiXl86iqEuUjfrlPQyQ1A==
x-fb-debug: 3wiHEVGDPfYQASu98xRqP7A5AE0rftaTIbXC3WU+EicjYOGcki9+HZRQabMCI1pgHhllVqh8OuyBhDCc2/AgHg==
priority: u=3,i
content-length: 7199
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:58 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-Z4-bQjcKl9Y/WtE1I3SEhZI/AAAAAAAAAk0/rG0I8dvKz_Ijd4D34WOxu-54ygzc5zqpwCLcBGAs/s1600/area.png
200 OK 688 B URL HTTP/2 lh4.googleusercontent.com/-Z4-bQjcKl9Y/WtE1I3SEhZI/AAAAAAAAAk0/rG0I8dvKz_Ijd4D34WOxu-54ygzc5zqpwCLcBGAs/s1600/area.png
IP
File type PNG image data, 28 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash b32e80c6462b9c7c76b2b0b0daa6d896
581e5c9957b80d09e30c2bc886c8bb3ecf37a371
c03d35fba1905c24e8a335f74f50742a045019dca1be2831c216447c6afc8b15
GET /-Z4-bQjcKl9Y/WtE1I3SEhZI/AAAAAAAAAk0/rG0I8dvKz_Ijd4D34WOxu-54ygzc5zqpwCLcBGAs/s1600/area.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="area.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 688
x-xss-protection: 0
date: Sun, 18 Dec 2022 00:49:02 GMT
expires: Sun, 18 Dec 2022 05:06:03 GMT
cache-control: public, max-age=86400, no-transform
age: 9417
etag: "v250"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-aSEvH6XdFOA/YJugLrZvYEI/AAAAAAAAMzw/l5lRxeGKv-cg1tqdjZlKvZ0NrzsJtv6gQCLcBGAsYHQ/s16000/CT3.jpg
200 OK 138 kB URL HTTP/2 lh4.googleusercontent.com/-aSEvH6XdFOA/YJugLrZvYEI/AAAAAAAAMzw/l5lRxeGKv-cg1tqdjZlKvZ0NrzsJtv6gQCLcBGAsYHQ/s16000/CT3.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 624x380, components 3\012- data
Size 138 kB (137670 bytes)
Hash 5fc3d6dd3d548dac61e9647354f9ba6d
e65eddb700078cebd2f6a03c92bde0da22e638b9
b10a9491be760b1b47a68d9c1449b05e872db195add8f422f23c38c49fa1b13b
GET /-aSEvH6XdFOA/YJugLrZvYEI/AAAAAAAAMzw/l5lRxeGKv-cg1tqdjZlKvZ0NrzsJtv6gQCLcBGAsYHQ/s16000/CT3.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v333d"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="CT3.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 137670
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-_H-Rc8lzthE/WtE1I9nedkI/AAAAAAAAAk4/_mAhocKIIug5PNstFqrGe8jdMjXxnMP6ACLcBGAs/s1600/search.png
200 OK 3.1 kB URL HTTP/2 lh4.googleusercontent.com/-_H-Rc8lzthE/WtE1I9nedkI/AAAAAAAAAk4/_mAhocKIIug5PNstFqrGe8jdMjXxnMP6ACLcBGAs/s1600/search.png
IP
File type PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced\012- data
Hash 5e97776bf2bfeba700f633b87a85cb79
4948e13420c9d3df2dead63347b2f098ec39a5df
dc54ceb9860b743839b1f5bff20c24dc3a215310fa9e21eef8cef1fad8114eb2
GET /-_H-Rc8lzthE/WtE1I9nedkI/AAAAAAAAAk4/_mAhocKIIug5PNstFqrGe8jdMjXxnMP6ACLcBGAs/s1600/search.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="search.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3059
x-xss-protection: 0
date: Sun, 18 Dec 2022 00:49:02 GMT
expires: Fri, 16 Dec 2022 03:17:01 GMT
cache-control: public, max-age=86400, no-transform
age: 9417
etag: "v251"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1266d62a0505a7560e1bca7169ede0f6
d0f1bf98b2a532442eecd96949a1fd1be4d2cd92
9039afbfee400a09f93ed177943a84e57b8eeb295652b450252446146a1ec140
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.googleusercontent.com/-s1YvOzCdI20/YJueQo4_tAI/AAAAAAAAMzo/ZY116uLdUN0lonSQIpXwJv5NPtx7nWCOQCLcBGAsYHQ/s16000/a.jpg
200 OK 160 kB URL HTTP/2 lh4.googleusercontent.com/-s1YvOzCdI20/YJueQo4_tAI/AAAAAAAAMzo/ZY116uLdUN0lonSQIpXwJv5NPtx7nWCOQCLcBGAsYHQ/s16000/a.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 799x450, components 3\012- data
Size 160 kB (159938 bytes)
Hash 8c301d9c10863176d38228426d27219a
b3013daf474dd2201de22e233e10b31fc57811c2
f526373166394b96126b2383979a50208f504790a00dce5515c7d7de32b83352
GET /-s1YvOzCdI20/YJueQo4_tAI/AAAAAAAAMzo/ZY116uLdUN0lonSQIpXwJv5NPtx7nWCOQCLcBGAsYHQ/s16000/a.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v333b"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="a.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 159938
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-PBgM_8dt4nc/XLn3SxZgrXI/AAAAAAAAEUE/hzAaXfJqpoECsc18h74QBEMLgr__6AFXgCEwYBhgL/s1600/Panorama5-2.jpg
200 OK 263 kB URL HTTP/2 lh4.googleusercontent.com/-PBgM_8dt4nc/XLn3SxZgrXI/AAAAAAAAEUE/hzAaXfJqpoECsc18h74QBEMLgr__6AFXgCEwYBhgL/s1600/Panorama5-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 950x425, components 3\012- data
Size 263 kB (263153 bytes)
Hash 7f9d830407037e52b1d19d4b5662131d
53a928431c8f799ddf7becf7dfc79d982f629e0e
f70796e4778bec0ef43345feaaa0b52cb4b2ca7f173ae59d31c9c930f68e4315
GET /-PBgM_8dt4nc/XLn3SxZgrXI/AAAAAAAAEUE/hzAaXfJqpoECsc18h74QBEMLgr__6AFXgCEwYBhgL/s1600/Panorama5-2.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1143"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Panorama5-2.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 263153
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-wpeNX02arPg/YH51Y6eOkkI/AAAAAAAAMtw/Cqf7V4fNxLYUMAAoRZ3KnU4mS6uPwHO6gCLcBGAsYHQ/s16000/z2440828965766_4befa49f5d4ce1df16ce41ffaf977c1a.jpg
200 OK 327 kB URL HTTP/2 lh4.googleusercontent.com/-wpeNX02arPg/YH51Y6eOkkI/AAAAAAAAMtw/Cqf7V4fNxLYUMAAoRZ3KnU4mS6uPwHO6gCLcBGAsYHQ/s16000/z2440828965766_4befa49f5d4ce1df16ce41ffaf977c1a.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 960x1280, components 3\012- data
Size 327 kB (326594 bytes)
Hash 53d8449232b53a6f967262da9f156b17
0fe2bc7c93d2f3470f84157ea161e40410d4605d
de2916d83635e522474b204c928df5db8078aac4387a62570885d756b9447423
GET /-wpeNX02arPg/YH51Y6eOkkI/AAAAAAAAMtw/Cqf7V4fNxLYUMAAoRZ3KnU4mS6uPwHO6gCLcBGAsYHQ/s16000/z2440828965766_4befa49f5d4ce1df16ce41ffaf977c1a.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v32df"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="z2440828965766_4befa49f5d4ce1df16ce41ffaf977c1a.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 326594
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-F5m-Oqp7c4Q/YLRcjaR4mRI/AAAAAAAANAw/7VcvOlS5BFsyA-QEA0gsm5bK8wHIEF3TwCLcBGAsYHQ/s16000/z2523323140403_e55da6abe85bc86e19113cd36790dd5d.jpg
200 OK 268 kB URL HTTP/2 lh4.googleusercontent.com/-F5m-Oqp7c4Q/YLRcjaR4mRI/AAAAAAAANAw/7VcvOlS5BFsyA-QEA0gsm5bK8wHIEF3TwCLcBGAsYHQ/s16000/z2523323140403_e55da6abe85bc86e19113cd36790dd5d.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 960x1280, components 3\012- data
Size 268 kB (268517 bytes)
Hash ddae06596af9e3484ed7a2bd68c1e1f2
ff18580d8098e3f12f2a7b2bd1c33d31ade6d0d6
e003f3a7b23dc61d77d13e71ba220fb35ee9da654d721d9042ba867c83ec6378
GET /-F5m-Oqp7c4Q/YLRcjaR4mRI/AAAAAAAANAw/7VcvOlS5BFsyA-QEA0gsm5bK8wHIEF3TwCLcBGAsYHQ/s16000/z2523323140403_e55da6abe85bc86e19113cd36790dd5d.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3414"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="z2523323140403_e55da6abe85bc86e19113cd36790dd5d.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 268517
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-49k8uiHTvec/YN6BrEsN4GI/AAAAAAAANJY/qh7mhuDRW6Mefk1W2dnfNZZRPOQrf6z6QCLcBGAsYHQ/s16000/Screenshot%2B%252860%2529.png
200 OK 641 kB URL HTTP/2 lh4.googleusercontent.com/-49k8uiHTvec/YN6BrEsN4GI/AAAAAAAANJY/qh7mhuDRW6Mefk1W2dnfNZZRPOQrf6z6QCLcBGAsYHQ/s16000/Screenshot%2B%252860%2529.png
IP
File type PNG image data, 933 x 451, 8-bit/color RGB, non-interlaced\012- data
Size 641 kB (641014 bytes)
Hash bfa1a9987e0c5505883c460f2889abd5
1d12846e44976088253217f61cdfe7d071a7552c
6c2624d5c6bfc78ee6334540717fd72b51820e920304a8cb713bb0d707088a00
GET /-49k8uiHTvec/YN6BrEsN4GI/AAAAAAAANJY/qh7mhuDRW6Mefk1W2dnfNZZRPOQrf6z6QCLcBGAsYHQ/s16000/Screenshot%2B%252860%2529.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Screenshot (60).png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 641014
x-xss-protection: 0
date: Sun, 18 Dec 2022 00:49:03 GMT
expires: Sun, 18 Dec 2022 06:18:57 GMT
cache-control: public, max-age=86400, no-transform
age: 9416
etag: "v3497"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/--gUjZY2NVdw/YJui2oFiy0I/AAAAAAAAM0E/xHBIbbJLN2sSh9n814I82sI6JSGok1a4gCLcBGAsYHQ/s16000/cc-ct4-vcn-phuoc-hai.jpg
200 OK 204 kB URL HTTP/2 lh4.googleusercontent.com/--gUjZY2NVdw/YJui2oFiy0I/AAAAAAAAM0E/xHBIbbJLN2sSh9n814I82sI6JSGok1a4gCLcBGAsYHQ/s16000/cc-ct4-vcn-phuoc-hai.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 1000x563, components 3\012- data
Size 204 kB (204103 bytes)
Hash fd10659531333320393870cdad4829c7
d958864f5b32af5ddef66d7e3595fec1c5c2461a
30100d81349d406bffa2bb1f400200107c6f59fedddbf0a92d444097f024378a
GET /--gUjZY2NVdw/YJui2oFiy0I/AAAAAAAAM0E/xHBIbbJLN2sSh9n814I82sI6JSGok1a4gCLcBGAsYHQ/s16000/cc-ct4-vcn-phuoc-hai.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3343"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="cc-ct4-vcn-phuoc-hai.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 204103
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-jwt_aJwtXEo/YN0958AxqnI/AAAAAAAANIY/_2HLqzzCoEM5QSui6VX7MDwZnpxTwqXRQCLcBGAsYHQ/s16000/Screenshot%2B%2528120%2529.png
200 OK 793 kB URL HTTP/2 lh4.googleusercontent.com/-jwt_aJwtXEo/YN0958AxqnI/AAAAAAAANIY/_2HLqzzCoEM5QSui6VX7MDwZnpxTwqXRQCLcBGAsYHQ/s16000/Screenshot%2B%2528120%2529.png
IP
File type PNG image data, 1033 x 429, 8-bit/color RGB, non-interlaced\012- data
Size 793 kB (792712 bytes)
Hash e0b98fe38b9ac8c4f035cec43f48c5b7
37006eef87acf50f0729bf08b0cde1e47f430248
a11accadf8eb3e47c106afca054e1f8a738b56b83a7101b4a4158e775709b5fc
GET /-jwt_aJwtXEo/YN0958AxqnI/AAAAAAAANIY/_2HLqzzCoEM5QSui6VX7MDwZnpxTwqXRQCLcBGAsYHQ/s16000/Screenshot%2B%2528120%2529.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Screenshot (120).png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 792712
x-xss-protection: 0
date: Sun, 18 Dec 2022 03:25:59 GMT
expires: Sun, 18 Dec 2022 05:06:05 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3488"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1266d62a0505a7560e1bca7169ede0f6
d0f1bf98b2a532442eecd96949a1fd1be4d2cd92
9039afbfee400a09f93ed177943a84e57b8eeb295652b450252446146a1ec140
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.googleusercontent.com/-cMCGMQ-WdDA/YH5310bZxwI/AAAAAAAAMuA/bukv4_VQLjYylsDD7oNQ1GUZx5SUdGkkQCLcBGAsYHQ/s16000/3.png
200 OK 6.0 kB URL HTTP/2 lh4.googleusercontent.com/-cMCGMQ-WdDA/YH5310bZxwI/AAAAAAAAMuA/bukv4_VQLjYylsDD7oNQ1GUZx5SUdGkkQCLcBGAsYHQ/s16000/3.png
IP
File type PNG image data, 320 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash c20228c407fbd8ed8942122070cf7f48
b730cfcb8d07c4e60f75fcc336368bf12080eb0a
b300feab7060d79693e21645df8d68cc7bd044eee997aca85a58fed5ab0acae5
GET /-cMCGMQ-WdDA/YH5310bZxwI/AAAAAAAAMuA/bukv4_VQLjYylsDD7oNQ1GUZx5SUdGkkQCLcBGAsYHQ/s16000/3.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="3.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 5972
x-xss-protection: 0
date: Sun, 18 Dec 2022 00:49:03 GMT
expires: Sat, 17 Dec 2022 06:18:12 GMT
cache-control: public, max-age=86400, no-transform
age: 9416
etag: "v32e4"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.nhipcaunhadat.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:54 GMT
expires: Thu, 14 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 287525
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-1/307666876_498393825630773_5457060877555823938_n.jpg?stp=c12.0.50.50a_cp0_dst-jpg_p50x50&_nc_cat=105&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=-Q5oIwtrj4sAX_AWR2U&_nc_oc=AQkYaSYXHuCi9zTnJHgS5Et7ZBZCl2BwOZYJm6b7jps8ne47vPwrIvEUhVub8MjvHK8&_nc_ht=scontent-arn2-2.xx&oh=00_AfD0QQInhX0F5R-2QFpVvlt6uJLt-AlvWsuPQNpThZL4cA&oe=63A3684A
200 OK 1.8 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-1/307666876_498393825630773_5457060877555823938_n.jpg?stp=c12.0.50.50a_cp0_dst-jpg_p50x50&_nc_cat=105&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=-Q5oIwtrj4sAX_AWR2U&_nc_oc=AQkYaSYXHuCi9zTnJHgS5Et7ZBZCl2BwOZYJm6b7jps8ne47vPwrIvEUhVub8MjvHK8&_nc_ht=scontent-arn2-2.xx&oh=00_AfD0QQInhX0F5R-2QFpVvlt6uJLt-AlvWsuPQNpThZL4cA&oe=63A3684A
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash e7340d5c945aaf923a58577b8f08a23f
4433ad544582d7bc84c728b0390ec303bfd1dcc9
85d72451c9f3065a2bbea5548d7a127571c4ba0d198b206ddf57fcb93c9c486d
GET /v/t39.30808-1/307666876_498393825630773_5457060877555823938_n.jpg?stp=c12.0.50.50a_cp0_dst-jpg_p50x50&_nc_cat=105&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=-Q5oIwtrj4sAX_AWR2U&_nc_oc=AQkYaSYXHuCi9zTnJHgS5Et7ZBZCl2BwOZYJm6b7jps8ne47vPwrIvEUhVub8MjvHK8&_nc_ht=scontent-arn2-2.xx&oh=00_AfD0QQInhX0F5R-2QFpVvlt6uJLt-AlvWsuPQNpThZL4cA&oe=63A3684A HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Sat, 24 Sep 2022 05:51:49 GMT
x-haystack-needlechecksum: 876361658
x-needle-checksum: 144115422
content-type: image/jpeg
content-digest: adler32=334455181
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
content-length: 1756
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:59 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/313886013_642899607302570_85404074695597224_n.jpg?stp=dst-jpg_s160x160&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=K45wC6dKjGUAX-sEkvc&_nc_ht=scontent-arn2-2.xx&oh=00_AfAn1Zgk1GL3GGrUIDC3kk7rQeNkSIuz2SV0voZlHeZ62w&oe=63A37399
200 OK 6.0 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/313886013_642899607302570_85404074695597224_n.jpg?stp=dst-jpg_s160x160&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=K45wC6dKjGUAX-sEkvc&_nc_ht=scontent-arn2-2.xx&oh=00_AfAn1Zgk1GL3GGrUIDC3kk7rQeNkSIuz2SV0voZlHeZ62w&oe=63A37399
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x107, components 3\012- data
Hash 039aa0ba2f635407dc2aec1ff621983e
7019a344cb9b182ca6de287e7199c3b9cc895d97
bc3e3d45196d54a49ad7c1b1a633e4cb6e94fa47fef57a68a6a1b07f0ae75c5a
GET /v/t39.30808-6/313886013_642899607302570_85404074695597224_n.jpg?stp=dst-jpg_s160x160&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=K45wC6dKjGUAX-sEkvc&_nc_ht=scontent-arn2-2.xx&oh=00_AfAn1Zgk1GL3GGrUIDC3kk7rQeNkSIuz2SV0voZlHeZ62w&oe=63A37399 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 07 Nov 2022 12:43:00 GMT
x-haystack-needlechecksum: 2564111242
x-needle-checksum: 4265163911
content-type: image/jpeg
content-digest: adler32=3426382665
content-length: 5951
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:59 GMT
x-fb-edge-debug: PGZwib3Vhx7Dzu6DT8PVoXvJMfklc2_oKwxTpHwv0UM7sQLEFDXlfzrOvazO_qKTdPRFu6JK8bvwbMR0i6TuddU-l9uKyKashpPwpGESpCA
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/313107831_633786914880506_4055708724226359614_n.jpg?stp=dst-jpg_p280x280&_nc_cat=100&ccb=1-7&_nc_sid=8024bb&_nc_ohc=hzxPf3K51PIAX8wF_kV&_nc_ht=scontent-arn2-2.xx&oh=00_AfAATpjuldTlPtG7Vu31sw_m34PK87ZOG78cTCswBpHa3Q&oe=63A4707E
200 OK 30 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/313107831_633786914880506_4055708724226359614_n.jpg?stp=dst-jpg_p280x280&_nc_cat=100&ccb=1-7&_nc_sid=8024bb&_nc_ohc=hzxPf3K51PIAX8wF_kV&_nc_ht=scontent-arn2-2.xx&oh=00_AfAATpjuldTlPtG7Vu31sw_m34PK87ZOG78cTCswBpHa3Q&oe=63A4707E
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 325x280, components 3\012- data
Hash 281aa008d19cf643005cc2daac921112
4ce9e7e63cb383d8c4b797abccf9f245a2252e5d
93d2c63c61550b364f1bc447358f23de190b5d146f147a254bca742e9c42c1bb
GET /v/t39.30808-6/313107831_633786914880506_4055708724226359614_n.jpg?stp=dst-jpg_p280x280&_nc_cat=100&ccb=1-7&_nc_sid=8024bb&_nc_ohc=hzxPf3K51PIAX8wF_kV&_nc_ht=scontent-arn2-2.xx&oh=00_AfAATpjuldTlPtG7Vu31sw_m34PK87ZOG78cTCswBpHa3Q&oe=63A4707E HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Tue, 25 Oct 2022 08:54:02 GMT
x-haystack-needlechecksum: 1797004852
x-needle-checksum: 4194050639
content-type: image/jpeg
content-digest: adler32=2018943361
content-length: 30306
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:59 GMT
x-fb-edge-debug: 9mxCplZpNmJRbyXR9p7_rS1LfdSb8wUDdgQLM7_Bmj8N-AhjrMaSauFIxauMI5ZXYCcxLlqrBBSH6a2BRq-g3vQh1NoH2YXLUJ-7UWPe_dE
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/314601004_642899640635900_1705638828759453826_n.jpg?stp=dst-jpg_s160x160&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=0FpoY5d6ykEAX-2Uplb&_nc_ht=scontent-arn2-2.xx&oh=00_AfA_8Z58uKGkrqpGguBlamlms9nUmRtaNYQiA7fmhrMzUQ&oe=63A2F874
200 OK 5.9 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/314601004_642899640635900_1705638828759453826_n.jpg?stp=dst-jpg_s160x160&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=0FpoY5d6ykEAX-2Uplb&_nc_ht=scontent-arn2-2.xx&oh=00_AfA_8Z58uKGkrqpGguBlamlms9nUmRtaNYQiA7fmhrMzUQ&oe=63A2F874
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x107, components 3\012- data
Hash b052a73a3589152faf5da7c18e5ec2b6
d9a34991fbd82056f5ed516e57f73fd24c35b71a
ad17e1004b5755bafc92d9e5eddb421c624957ecdfe399d2e419cd11b48907bb
GET /v/t39.30808-6/314601004_642899640635900_1705638828759453826_n.jpg?stp=dst-jpg_s160x160&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=0FpoY5d6ykEAX-2Uplb&_nc_ht=scontent-arn2-2.xx&oh=00_AfA_8Z58uKGkrqpGguBlamlms9nUmRtaNYQiA7fmhrMzUQ&oe=63A2F874 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 07 Nov 2022 12:43:03 GMT
x-haystack-needlechecksum: 352981034
x-needle-checksum: 114819859
content-type: image/jpeg
content-digest: adler32=3869533382
content-length: 5875
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Sun, 18 Dec 2022 03:25:59 GMT
x-fb-edge-debug: E6c5djRFeFOZOMrSI85Yxmkw2AjRE382q6TqmFzW5GS-B8_Bm9fUVWkNEqT-6qwPTWuGp6gYdb4WN2OyCWpPPjhHLIQMzJWG_U4AR7iL5Fg
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fdbb7ba725cc70f13ad981863c8c5581
1b9a678e8f3b68f162bc7a6e7bde5171f5415046
dcab650b9fa579906912c3b598b7099cf0728e72b7782d5362849ef310a00965
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 03:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.googleusercontent.com/-QvIGN7Jqbps/WtE0mRUHTsI/AAAAAAAAAks/_4DNV1Nm4LY3G26fAL4VdvXZmb9d0D7EQCLcBGAs/s1600/bg_es.jpg
200 OK 71 kB URL HTTP/2 lh4.googleusercontent.com/-QvIGN7Jqbps/WtE0mRUHTsI/AAAAAAAAAks/_4DNV1Nm4LY3G26fAL4VdvXZmb9d0D7EQCLcBGAs/s1600/bg_es.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x1226, components 3\012- data
Hash 8e78090162880d92bc6f004ea6224e39
c62d3d5572eb1047962b5186a131292c8153e3f3
160e3a761b51ef41ffcecbf4914bc04f9c72db55976d8d479f531a399f22c341
GET /-QvIGN7Jqbps/WtE0mRUHTsI/AAAAAAAAAks/_4DNV1Nm4LY3G26fAL4VdvXZmb9d0D7EQCLcBGAs/s1600/bg_es.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v24c"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="bg_es.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 70893
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-gyO7gF5J0FE/WtE1JKrhYhI/AAAAAAAAAk8/BR-J7xcseJouA6PHI1iGw3YUh0psYuZNQCLcBGAs/s1600/cost.png
200 OK 1.5 kB URL HTTP/2 lh4.googleusercontent.com/-gyO7gF5J0FE/WtE1JKrhYhI/AAAAAAAAAk8/BR-J7xcseJouA6PHI1iGw3YUh0psYuZNQCLcBGAs/s1600/cost.png
IP
File type PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 07213b235b3a53734e2d5bd13409876f
254c0266d0024db29f50225e60969bfc38e5e6ac
e0f7e2d1cded9a7a132dd50d8a30f8d951203096840e8dd6b765a20fc2f7c88f
GET /-gyO7gF5J0FE/WtE1JKrhYhI/AAAAAAAAAk8/BR-J7xcseJouA6PHI1iGw3YUh0psYuZNQCLcBGAs/s1600/cost.png HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v252"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="cost.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 1490
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-kSBOxTzGTwo/WtOZPA5gQ3I/AAAAAAAAAmA/r0D4XWsM_OYhvx7G3hhHp0KOnUGLXWeQQCLcBGAs/s1600/7.jpg
200 OK 336 kB URL HTTP/2 lh4.googleusercontent.com/-kSBOxTzGTwo/WtOZPA5gQ3I/AAAAAAAAAmA/r0D4XWsM_OYhvx7G3hhHp0KOnUGLXWeQQCLcBGAs/s1600/7.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x994, components 3\012- data
Size 336 kB (335794 bytes)
Hash 549fa6827943e86b21095debebc06c3d
33b847933dfe14aafd967703bdea0beac7f9536b
446487bebfbabc41449391688f16f03d7008d47643d3f02c39484f4142fbf0e2
GET /-kSBOxTzGTwo/WtOZPA5gQ3I/AAAAAAAAAmA/r0D4XWsM_OYhvx7G3hhHp0KOnUGLXWeQQCLcBGAs/s1600/7.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v263"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="7.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 335794
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.googleusercontent.com/-ujKIBvO4DVQ/WtOZRZ-rSaI/AAAAAAAAAmE/UTQHUz1yEXIcvj_VhGdA3rce9y1xFIduACLcBGAs/s1600/pc-dem-phuoc-long-2.jpg
200 OK 1.2 MB URL HTTP/2 lh4.googleusercontent.com/-ujKIBvO4DVQ/WtOZRZ-rSaI/AAAAAAAAAmE/UTQHUz1yEXIcvj_VhGdA3rce9y1xFIduACLcBGAs/s1600/pc-dem-phuoc-long-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 1600x843, components 3\012- data
Size 1.2 MB (1167604 bytes)
Hash 7fe87a8c2ba8856182d7cba6f95ca679
01794209470a0a19a1fe94d3510afb5c36cd48ff
a85320a0ee17a2347bc1129504b9565abcb2011c3c1e91552d3073b5742a4aa3
GET /-ujKIBvO4DVQ/WtOZRZ-rSaI/AAAAAAAAAmE/UTQHUz1yEXIcvj_VhGdA3rce9y1xFIduACLcBGAs/s1600/pc-dem-phuoc-long-2.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v263"
expires: Mon, 19 Dec 2022 03:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="pc-dem-phuoc-long-2.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:25:59 GMT
server: fife
content-length: 1167604
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicSP41z_z1ctrNdMZDEW0QgvUfEXUodGsKKxB_KUd8Vyh5DjFk3Wfo2wYg02-PyAxMhHSk3GiZde_6LzEoiHU7pg9LWn-DlAitPDrUD6QLTUfZPnZyf0Ns0LHmYB9Fbos2fHDQNkw-pPwP-W4I4bJOptoV7OfBSq9xhv74iFLCIQdESSsfy93gRiwgeA/s320/NH.png
200 OK 13 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicSP41z_z1ctrNdMZDEW0QgvUfEXUodGsKKxB_KUd8Vyh5DjFk3Wfo2wYg02-PyAxMhHSk3GiZde_6LzEoiHU7pg9LWn-DlAitPDrUD6QLTUfZPnZyf0Ns0LHmYB9Fbos2fHDQNkw-pPwP-W4I4bJOptoV7OfBSq9xhv74iFLCIQdESSsfy93gRiwgeA/s320/NH.png
IP
File type PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced\012- data
Hash ef5561dc3536291ac485cccaf822de25
10b2bf259f5a0b841aee652e12d49a83c04e295a
bf5bdfc21f04123649819734f72773a453606964a0017e12f9d13fd89fbe442f
GET /img/b/R29vZ2xl/AVvXsEicSP41z_z1ctrNdMZDEW0QgvUfEXUodGsKKxB_KUd8Vyh5DjFk3Wfo2wYg02-PyAxMhHSk3GiZde_6LzEoiHU7pg9LWn-DlAitPDrUD6QLTUfZPnZyf0Ns0LHmYB9Fbos2fHDQNkw-pPwP-W4I4bJOptoV7OfBSq9xhv74iFLCIQdESSsfy93gRiwgeA/s320/NH.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3d8d"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="NH.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 13167
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdwDLpSyfWPfRPoZaZ9QPKiZIf2BwqNbOqN8t_EcxJ9pQiWKFGsCNgVhuApljd2ZUBVi8fiW4wHuJJfmoGi-KGU2T64nUtfsrX4vFL79T8Qu0rfxwyqzob3qk4DxWYDg6i7De67la70WLMOmoffvkO4lL2j_lDYQPL2sWWHr6tfkoFwWkm618EkMyW0Q/w302-h403/1.jpg
200 OK 32 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdwDLpSyfWPfRPoZaZ9QPKiZIf2BwqNbOqN8t_EcxJ9pQiWKFGsCNgVhuApljd2ZUBVi8fiW4wHuJJfmoGi-KGU2T64nUtfsrX4vFL79T8Qu0rfxwyqzob3qk4DxWYDg6i7De67la70WLMOmoffvkO4lL2j_lDYQPL2sWWHr6tfkoFwWkm618EkMyW0Q/w302-h403/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 302x403, components 3\012- data
Hash 2b825c4d5338520c65ab9c9b4bcf272b
ab33bcd09de7a0267cdc994a75e50540b5d91105
2bbc64f4d471b1118decb54a34fa1eae75a3bbece746c389db7cb0cf35c2b692
GET /img/b/R29vZ2xl/AVvXsEgdwDLpSyfWPfRPoZaZ9QPKiZIf2BwqNbOqN8t_EcxJ9pQiWKFGsCNgVhuApljd2ZUBVi8fiW4wHuJJfmoGi-KGU2T64nUtfsrX4vFL79T8Qu0rfxwyqzob3qk4DxWYDg6i7De67la70WLMOmoffvkO4lL2j_lDYQPL2sWWHr6tfkoFwWkm618EkMyW0Q/w302-h403/1.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3d03"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 31706
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEmAO1KMuvQLc-vhBlxd6Noky3kUJF7YdsAvtCoiywpV15mI73XAkL3jZdoYLHlKBvnMPdzMQsOWdtCYdpjYBUBdOrpnEKNen0c8Nfg18FDVUzt-OYAoQVbE6EU9aNPsr8iGAQlVODXVr209EIRz0jZ4tNxK6dFNtxoJIUzgGKWU3SMYlfLc_LRFY6yQ/s16000/294508651_1392568471250700_7741188829489092509_n.jpg
200 OK 72 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEmAO1KMuvQLc-vhBlxd6Noky3kUJF7YdsAvtCoiywpV15mI73XAkL3jZdoYLHlKBvnMPdzMQsOWdtCYdpjYBUBdOrpnEKNen0c8Nfg18FDVUzt-OYAoQVbE6EU9aNPsr8iGAQlVODXVr209EIRz0jZ4tNxK6dFNtxoJIUzgGKWU3SMYlfLc_LRFY6yQ/s16000/294508651_1392568471250700_7741188829489092509_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 960x720, components 3\012- data
Hash bd5e485ba2ea0ff30e3d97ecc30d90b5
bb217dabe3d9df972fcfe4aa9fb2a8a2a3d88f03
271ea20a2acb92435f8dacc26272aafb5004117956a82e4504fae907052004ad
GET /img/b/R29vZ2xl/AVvXsEjEmAO1KMuvQLc-vhBlxd6Noky3kUJF7YdsAvtCoiywpV15mI73XAkL3jZdoYLHlKBvnMPdzMQsOWdtCYdpjYBUBdOrpnEKNen0c8Nfg18FDVUzt-OYAoQVbE6EU9aNPsr8iGAQlVODXVr209EIRz0jZ4tNxK6dFNtxoJIUzgGKWU3SMYlfLc_LRFY6yQ/s16000/294508651_1392568471250700_7741188829489092509_n.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3d0a"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="294508651_1392568471250700_7741188829489092509_n.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 72408
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHOarwtL78pj4Zj3kBckoBdXCo4nvF4YTzy4vpT1U5fsVWoGNiN5ZNQ4HpWkqONf-Ng_SHu6yx5jNhPxvhtQz7_5GR1XVyuEnr6YfHmgUY7fS-UBMooHvIwzHqNBiqj4jmV4WdoePccglh5mXWdeluSXYVQQHWdPvCAlsXtMboPthRZ2cySvwzbQ0sHw/s16000/z3892179307960_06d316cbc78bb1323be2afb09a5b9d83.jpg
200 OK 332 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHOarwtL78pj4Zj3kBckoBdXCo4nvF4YTzy4vpT1U5fsVWoGNiN5ZNQ4HpWkqONf-Ng_SHu6yx5jNhPxvhtQz7_5GR1XVyuEnr6YfHmgUY7fS-UBMooHvIwzHqNBiqj4jmV4WdoePccglh5mXWdeluSXYVQQHWdPvCAlsXtMboPthRZ2cySvwzbQ0sHw/s16000/z3892179307960_06d316cbc78bb1323be2afb09a5b9d83.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 820x546, components 3\012- data
Size 332 kB (331977 bytes)
Hash 05aa8480dbe4e4dd995091781e11c54e
2631312bf8d738b05c14dedbf15d154714a63a71
e7c2bc68a85587242f78a8231dcc1a3f4ceb6dfabc5bee70314d5c2a6b152b4c
GET /img/b/R29vZ2xl/AVvXsEgHOarwtL78pj4Zj3kBckoBdXCo4nvF4YTzy4vpT1U5fsVWoGNiN5ZNQ4HpWkqONf-Ng_SHu6yx5jNhPxvhtQz7_5GR1XVyuEnr6YfHmgUY7fS-UBMooHvIwzHqNBiqj4jmV4WdoePccglh5mXWdeluSXYVQQHWdPvCAlsXtMboPthRZ2cySvwzbQ0sHw/s16000/z3892179307960_06d316cbc78bb1323be2afb09a5b9d83.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3ebf"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="z3892179307960_06d316cbc78bb1323be2afb09a5b9d83.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 331977
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEioUm7KigX4W0Qo4Dg7QWZsZ91pQqttgaNkDLzmaota-jrS94RSmXpz8KUr5DMIqWDrhVw7e6AzO3ooO7ajoUieyhgqSjAzRK-76QngxfFI3mvzLdS74DN-ojgPGNl8guysvI4o0Fam3ETBf3g801DkZabxef9B4Z4EmQlbXaMpD38y71RFbwk6gJbDyA=s16000
200 OK 329 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEioUm7KigX4W0Qo4Dg7QWZsZ91pQqttgaNkDLzmaota-jrS94RSmXpz8KUr5DMIqWDrhVw7e6AzO3ooO7ajoUieyhgqSjAzRK-76QngxfFI3mvzLdS74DN-ojgPGNl8guysvI4o0Fam3ETBf3g801DkZabxef9B4Z4EmQlbXaMpD38y71RFbwk6gJbDyA=s16000
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 2048x1536, components 3\012- data
Size 329 kB (329385 bytes)
Hash b0502a42900857b9d6a09d3f215bbacd
818978066ffe62962561c6d56c56506cd0d042cd
97373a71d5f1ceefd86910b236db0a4d018614e9a2b63bb9b9adf08c6f683632
GET /img/a/AVvXsEioUm7KigX4W0Qo4Dg7QWZsZ91pQqttgaNkDLzmaota-jrS94RSmXpz8KUr5DMIqWDrhVw7e6AzO3ooO7ajoUieyhgqSjAzRK-76QngxfFI3mvzLdS74DN-ojgPGNl8guysvI4o0Fam3ETBf3g801DkZabxef9B4Z4EmQlbXaMpD38y71RFbwk6gJbDyA=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3be5"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="z2918895610427_a08859d4e2089dccd073040707d38e87.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 329385
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fnhipcaunhadatvn%2F&tabs=timeline&width=340&height=500&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId=611565939671363
200 OK 196 kB URL HTTP/2 www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fnhipcaunhadatvn%2F&tabs=timeline&width=340&height=500&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId=611565939671363
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18845)
Size 196 kB (195847 bytes)
Hash 6515270af18e6aa368477e6b8e7a9945
915800a706eb997833c3c5b374e4f7bd3fd8634f
a53e32ee069805c476764f21d020f4861b41099765a228f0aa049fa75e8bcaa2
GET /plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fnhipcaunhadatvn%2F&tabs=timeline&width=340&height=500&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId=611565939671363 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: 0MtCH7dZNBUPYBpELV9mD5ybmDYm+AREWA+y4eg9WBGdvCfOXl/aoxTvfkSPvEFOWpTy3f0ybkjuaUf+DjLucg==
date: Sun, 18 Dec 2022 03:25:58 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilG3UZar99FZOQQha_8UDvCP2i5BpfELjQw9R1t0WDC5wCcSAWfdZ_hLT1niOWRZoxupuR8JtA-Bs0i-7oWsZOKu73U8f19dTv32FM70j-k-8WKl2lD5wNtMA37OTrN00wHpue2Q24eufqb9ZbJrfUbxHXdxtfsKsMgyuXKPaiBFXcoZSHx5ebrmgGRw/s16000/vinh%20hoa.jpg
200 OK 2.2 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilG3UZar99FZOQQha_8UDvCP2i5BpfELjQw9R1t0WDC5wCcSAWfdZ_hLT1niOWRZoxupuR8JtA-Bs0i-7oWsZOKu73U8f19dTv32FM70j-k-8WKl2lD5wNtMA37OTrN00wHpue2Q24eufqb9ZbJrfUbxHXdxtfsKsMgyuXKPaiBFXcoZSHx5ebrmgGRw/s16000/vinh%20hoa.jpg
IP
Size 2.2 MB (2211050 bytes)
Hash d350608c32fe7b4fc8462994bf690b93
40dd6e3a58017b80f6207b4b89b5302359573a1f
04f2ee86bded639556f7637debaf0d7ecb14c6209a6bcff371572bb39d8a60d5
GET /img/b/R29vZ2xl/AVvXsEilG3UZar99FZOQQha_8UDvCP2i5BpfELjQw9R1t0WDC5wCcSAWfdZ_hLT1niOWRZoxupuR8JtA-Bs0i-7oWsZOKu73U8f19dTv32FM70j-k-8WKl2lD5wNtMA37OTrN00wHpue2Q24eufqb9ZbJrfUbxHXdxtfsKsMgyuXKPaiBFXcoZSHx5ebrmgGRw/s16000/vinh%20hoa.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e35"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vinh hoa.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 2187546
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-__fVm4hw7a32-SpLvdRylXf6sGff5ODAsfzMRoMmHhlG93j5axQZw6WH2Ybtc5jPFE8yKA3yodwsHxwMxNKTIK94zkkm0pDZPwA1PoKEEQUglw6rW_rXAa4M9BBRVE0NKy3-pXaHFwfaFSNvj81tatK9ELjBIwZCw9lKifRHEdkTDW7SjIwLRZyWhg/s16000/vinh%20thanh.jpg
200 OK 2.2 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-__fVm4hw7a32-SpLvdRylXf6sGff5ODAsfzMRoMmHhlG93j5axQZw6WH2Ybtc5jPFE8yKA3yodwsHxwMxNKTIK94zkkm0pDZPwA1PoKEEQUglw6rW_rXAa4M9BBRVE0NKy3-pXaHFwfaFSNvj81tatK9ELjBIwZCw9lKifRHEdkTDW7SjIwLRZyWhg/s16000/vinh%20thanh.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 2400x1800, components 3\012- data
Size 2.2 MB (2189117 bytes)
Hash 677d3df472fc329c0765aa8a310fdf01
e75146b5ec2df281007f4ae554c9b5d4ffd65243
34314c4175100b48679bcdc182bc8339f110b840a9b8b45f0fb0c99057893558
GET /img/b/R29vZ2xl/AVvXsEg-__fVm4hw7a32-SpLvdRylXf6sGff5ODAsfzMRoMmHhlG93j5axQZw6WH2Ybtc5jPFE8yKA3yodwsHxwMxNKTIK94zkkm0pDZPwA1PoKEEQUglw6rW_rXAa4M9BBRVE0NKy3-pXaHFwfaFSNvj81tatK9ELjBIwZCw9lKifRHEdkTDW7SjIwLRZyWhg/s16000/vinh%20thanh.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e31"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vinh thanh.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 2189117
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXtm7KVryZhSUvBhy7XRgMUpf3lUVn0a2sBtZ5_3CRJZrNOh0-bEk0KESTCJXPRfJPLy9B9FRc1pzoJjkJnYUO4wPUOzglNiRlDKI8jpxkmDyK5_k4Pfw9mh9guspWhZNHMMBVFnO3EaEpiWIEsyByyn4O-YxqHahqRnPp6HDiHgzeyIyeOJa4v76SuQ/s16000/NHA%20TRANG%20NEW.jpg
200 OK 106 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXtm7KVryZhSUvBhy7XRgMUpf3lUVn0a2sBtZ5_3CRJZrNOh0-bEk0KESTCJXPRfJPLy9B9FRc1pzoJjkJnYUO4wPUOzglNiRlDKI8jpxkmDyK5_k4Pfw9mh9guspWhZNHMMBVFnO3EaEpiWIEsyByyn4O-YxqHahqRnPp6HDiHgzeyIyeOJa4v76SuQ/s16000/NHA%20TRANG%20NEW.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 680x454, components 3\012- data
Size 106 kB (105736 bytes)
Hash 7ecf9a44ed5ed75b74f66d4325ba09bb
67e771391363a2fb58347b896822b47881d3c8e0
524a2dd74e8e46db9325c1f90945dc264328ebeab1178acf5dd219fa84247018
GET /img/b/R29vZ2xl/AVvXsEjXtm7KVryZhSUvBhy7XRgMUpf3lUVn0a2sBtZ5_3CRJZrNOh0-bEk0KESTCJXPRfJPLy9B9FRc1pzoJjkJnYUO4wPUOzglNiRlDKI8jpxkmDyK5_k4Pfw9mh9guspWhZNHMMBVFnO3EaEpiWIEsyByyn4O-YxqHahqRnPp6HDiHgzeyIyeOJa4v76SuQ/s16000/NHA%20TRANG%20NEW.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e58"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="NHA TRANG NEW.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 105736
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoYi5jQqp8PKO_Wlp_CzbPGlht_tmanWpmbA9tLcevJzrtz20c7nc6xXkhlgTS7JLHWLZKNRqKLaqCUClz1lDW7p6BJjCPF6_OYyf--m5bawexmXEvgxN2mW57ddaIrw0BUHeX2Ys32JTUBKy27Hr_doMkuyF7F5iUtm0uPvjy2U7RQBc0bRilY3AbkQ/s16000/vinh%20trung.jpg
200 OK 2.2 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoYi5jQqp8PKO_Wlp_CzbPGlht_tmanWpmbA9tLcevJzrtz20c7nc6xXkhlgTS7JLHWLZKNRqKLaqCUClz1lDW7p6BJjCPF6_OYyf--m5bawexmXEvgxN2mW57ddaIrw0BUHeX2Ys32JTUBKy27Hr_doMkuyF7F5iUtm0uPvjy2U7RQBc0bRilY3AbkQ/s16000/vinh%20trung.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 2400x1800, components 3\012- data
Size 2.2 MB (2188870 bytes)
Hash c50eae3118cc46d30120a29c6c9fef1e
c20314b32e8694db7f9d8be700c67788cfb06155
bbd8aa3281f78bdd40cee669bb93c423a3d1fa1a2d3ee5bb31c52548b681fbd2
GET /img/b/R29vZ2xl/AVvXsEjoYi5jQqp8PKO_Wlp_CzbPGlht_tmanWpmbA9tLcevJzrtz20c7nc6xXkhlgTS7JLHWLZKNRqKLaqCUClz1lDW7p6BJjCPF6_OYyf--m5bawexmXEvgxN2mW57ddaIrw0BUHeX2Ys32JTUBKy27Hr_doMkuyF7F5iUtm0uPvjy2U7RQBc0bRilY3AbkQ/s16000/vinh%20trung.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e33"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vinh trung.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 2188870
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixwHwgdq4c0fZJmuMGdGFt3hlEOJaZ66GN-ySRtakDV2rECwFxqkh-iZJVQIvEr_hjd8T3JFy_9B70QzT9CttkZWNvyQHJhZ2nIhmXxXYiq6qhdbMU-cL1mNOlrhnstl1nFoIUnoO4vXqEby9rA3Py1qbIUrQcRCZIpOpm3Cjzoy7d5a7AZ-dLUh1z1Q/s16000/r%C3%AArereer.jpg
200 OK 1.8 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixwHwgdq4c0fZJmuMGdGFt3hlEOJaZ66GN-ySRtakDV2rECwFxqkh-iZJVQIvEr_hjd8T3JFy_9B70QzT9CttkZWNvyQHJhZ2nIhmXxXYiq6qhdbMU-cL1mNOlrhnstl1nFoIUnoO4vXqEby9rA3Py1qbIUrQcRCZIpOpm3Cjzoy7d5a7AZ-dLUh1z1Q/s16000/r%C3%AArereer.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 5616x3744, components 3\012- data
Size 1.8 MB (1827041 bytes)
Hash d47dfb33971aaf478885453f728834f1
82132e8be4f06f1eba84b166a440339329a7373f
08700b5760ab2da9e1dc9b1253e524ad916401c0c49bf48605dd892202eb20a7
GET /img/b/R29vZ2xl/AVvXsEixwHwgdq4c0fZJmuMGdGFt3hlEOJaZ66GN-ySRtakDV2rECwFxqkh-iZJVQIvEr_hjd8T3JFy_9B70QzT9CttkZWNvyQHJhZ2nIhmXxXYiq6qhdbMU-cL1mNOlrhnstl1nFoIUnoO4vXqEby9rA3Py1qbIUrQcRCZIpOpm3Cjzoy7d5a7AZ-dLUh1z1Q/s16000/r%C3%AArereer.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e78"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="r_rereer.jpg";filename*=UTF-8''r%C3%AArereer.jpg
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 1827041
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXT-lX1_9pbe2bY4s3h2j_68Z1YHaQK6ucvAl_nXUTGBJ1FvoQ8zngZxk6bG8g6yGXR__ykCxndtBpeIXHtKLXkEmHC4CKEFyy3qxOVOlTGCi07MWdqYivd190h0-AfLD9K9KB8Jpu1eY01LXeyEaygrLQONgqWTch7kjd06LeG_5e_IPfASsejRrf5Q/s16000/vinh%20hiep.jpg
200 OK 2.2 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXT-lX1_9pbe2bY4s3h2j_68Z1YHaQK6ucvAl_nXUTGBJ1FvoQ8zngZxk6bG8g6yGXR__ykCxndtBpeIXHtKLXkEmHC4CKEFyy3qxOVOlTGCi07MWdqYivd190h0-AfLD9K9KB8Jpu1eY01LXeyEaygrLQONgqWTch7kjd06LeG_5e_IPfASsejRrf5Q/s16000/vinh%20hiep.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 2400x1800, components 3\012- data
Size 2.2 MB (2188622 bytes)
Hash 299d8f6e6ef19280ebd394b131b7bb8f
4b5aff48e7f25c3566fdf755e1c06d25951a04f5
f93a67d93ad7fbe762bd1cb6d0d91b0b4524ed4ccc4b090d563df3f80c4ad449
GET /img/b/R29vZ2xl/AVvXsEhXT-lX1_9pbe2bY4s3h2j_68Z1YHaQK6ucvAl_nXUTGBJ1FvoQ8zngZxk6bG8g6yGXR__ykCxndtBpeIXHtKLXkEmHC4CKEFyy3qxOVOlTGCi07MWdqYivd190h0-AfLD9K9KB8Jpu1eY01LXeyEaygrLQONgqWTch7kjd06LeG_5e_IPfASsejRrf5Q/s16000/vinh%20hiep.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e2b"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vinh hiep.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 2188622
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv6-UiGZhTM66cVJKomOSJ4-kkUxTYN2Qn0WlJuzO46ZsHZ3_aS6KJTF4k3ZWtcetN2rGrX_lDWIgBiX5gkoKK7qY2JLzwhBHLcwH2y0FrR7IzpLXHB1Jd0Pqq6sTHbJ9ZTUEWWrpUuf1LGYwl1r5dufmdeHAZqpHshh4ptt--fwaHD2UijJgwc-qzGg/s16000/vinh%20ngoc.jpg
200 OK 2.2 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv6-UiGZhTM66cVJKomOSJ4-kkUxTYN2Qn0WlJuzO46ZsHZ3_aS6KJTF4k3ZWtcetN2rGrX_lDWIgBiX5gkoKK7qY2JLzwhBHLcwH2y0FrR7IzpLXHB1Jd0Pqq6sTHbJ9ZTUEWWrpUuf1LGYwl1r5dufmdeHAZqpHshh4ptt--fwaHD2UijJgwc-qzGg/s16000/vinh%20ngoc.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 2400x1800, components 3\012- data
Size 2.2 MB (2188727 bytes)
Hash d9d4e0941e86b297565b6a729d083410
0378232aec1b192510c7bb8adc48e693bb35a52c
17945d948e4f214ab88b44bdbed9373ea934c47dbaad4e178342352f2e0ecc50
GET /img/b/R29vZ2xl/AVvXsEhv6-UiGZhTM66cVJKomOSJ4-kkUxTYN2Qn0WlJuzO46ZsHZ3_aS6KJTF4k3ZWtcetN2rGrX_lDWIgBiX5gkoKK7qY2JLzwhBHLcwH2y0FrR7IzpLXHB1Jd0Pqq6sTHbJ9ZTUEWWrpUuf1LGYwl1r5dufmdeHAZqpHshh4ptt--fwaHD2UijJgwc-qzGg/s16000/vinh%20ngoc.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e2d"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vinh ngoc.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 2188727
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxzldcPcsLpqdC33WYjUjIaUhMBJkeOltm_sGrb67WaFJmg5qmEoqqdBxL5thLEBrIrC4ZgPckUHgI17LH-ZmR5FaprUzQ0bhWxjjWeub2xTONYzT6FuMOYViWzbJ1DnUuTZecxhduH6zsctII--ODarGQL6YKOY2SLAMQ7w8ItC80BIpiHmKQLOoDHw/s16000/phuoc%20dong.jpg
200 OK 2.2 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxzldcPcsLpqdC33WYjUjIaUhMBJkeOltm_sGrb67WaFJmg5qmEoqqdBxL5thLEBrIrC4ZgPckUHgI17LH-ZmR5FaprUzQ0bhWxjjWeub2xTONYzT6FuMOYViWzbJ1DnUuTZecxhduH6zsctII--ODarGQL6YKOY2SLAMQ7w8ItC80BIpiHmKQLOoDHw/s16000/phuoc%20dong.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 2400x1800, components 3\012- data
Size 2.2 MB (2191146 bytes)
Hash d4001a0babf8793d9823ee10304c5ed9
6e621f2aefb01445f5b735b9c82310580f93580d
c5c89e7d5beac93abd5f4a3ff9b2b4dd3dcb93d70236f136d974301d2b5458ec
GET /img/b/R29vZ2xl/AVvXsEjxzldcPcsLpqdC33WYjUjIaUhMBJkeOltm_sGrb67WaFJmg5qmEoqqdBxL5thLEBrIrC4ZgPckUHgI17LH-ZmR5FaprUzQ0bhWxjjWeub2xTONYzT6FuMOYViWzbJ1DnUuTZecxhduH6zsctII--ODarGQL6YKOY2SLAMQ7w8ItC80BIpiHmKQLOoDHw/s16000/phuoc%20dong.jpg HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3e2f"
expires: Mon, 19 Dec 2022 03:26:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="phuoc dong.jpg"
content-type: image/jpeg
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:00 GMT
server: fife
content-length: 2191146
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh-lGtFmEKzljDb2OllzL8bonlZVaukCEslNfYlkdbwblfLBZogBtzGTYdJffpiigEWdcMgCxTMj-udEsaYBb7a0QnfAlmNzVapBdru7r760dAduAL3PdWUvTQrG_Y7EjEk0EWf01JfrABKp5viKH5qp-6QQy7Ik6RoK5hXru5kO8P0nEl-XTUlsxHwQ/s16000/Slide1.PNG
200 OK 1.5 MB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh-lGtFmEKzljDb2OllzL8bonlZVaukCEslNfYlkdbwblfLBZogBtzGTYdJffpiigEWdcMgCxTMj-udEsaYBb7a0QnfAlmNzVapBdru7r760dAduAL3PdWUvTQrG_Y7EjEk0EWf01JfrABKp5viKH5qp-6QQy7Ik6RoK5hXru5kO8P0nEl-XTUlsxHwQ/s16000/Slide1.PNG
IP
File type PNG image data, 1280 x 720, 8-bit/color RGB, non-interlaced\012- data
Size 1.5 MB (1535746 bytes)
Hash a73987573af431df358c7626dc6f9e8e
7ea166f46d50dbb5d7dcd0b9d2f56a95db223e01
9434b5a267790a471f7219e40d6aaeccb9099a7fc4404f88eeb7f26d3b4cec74
GET /img/b/R29vZ2xl/AVvXsEhh-lGtFmEKzljDb2OllzL8bonlZVaukCEslNfYlkdbwblfLBZogBtzGTYdJffpiigEWdcMgCxTMj-udEsaYBb7a0QnfAlmNzVapBdru7r760dAduAL3PdWUvTQrG_Y7EjEk0EWf01JfrABKp5viKH5qp-6QQy7Ik6RoK5hXru5kO8P0nEl-XTUlsxHwQ/s16000/Slide1.PNG HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3cf3"
expires: Mon, 19 Dec 2022 03:26:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Slide1.PNG"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:01 GMT
server: fife
content-length: 1535746
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf66930-95e3-4a55-8010-b1b6ca56bb72.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf66930-95e3-4a55-8010-b1b6ca56bb72.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 72e6e854c47d50c6eb07f491ac9ecc3b
067e0a350aaf1a509e8263f38191394e2fa1ee8f
cc6c3dff5dd6da8b61a4891a4c8ebb441fb37bd45af06520bc32d025d276a0f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf66930-95e3-4a55-8010-b1b6ca56bb72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11961
x-amzn-requestid: 58d907ec-0831-48ff-bd18-92b1f364190f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2PeF__oAMF2lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e372f-1c97663c43ee7c5552e3a6f9;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:39:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uzlYcLMD0Q7UOHq2PSorqX5sCd-EuxB1LIKHLQeD5CusFroqIUVNRA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:10 GMT
age: 19913
etag: "067e0a350aaf1a509e8263f38191394e2fa1ee8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnegshZvZbuTsIhTxkL14EZoL-hFOGHXeEdDabJDy0xYpJ0bWhfYI9TFEHGxSzhxyO3GSQ6LFdId15r6WQop5krX6Dteu3W9LKR1noIgLJLHBqUgF63xVJi1S3HtV_LIWzCmsmlox04byGEVIyyk4RNKDps5wkPxqRau08NoA0RrYOCxeXVV5J5TddyQ/s16000/3.png
200 OK 0 B URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnegshZvZbuTsIhTxkL14EZoL-hFOGHXeEdDabJDy0xYpJ0bWhfYI9TFEHGxSzhxyO3GSQ6LFdId15r6WQop5krX6Dteu3W9LKR1noIgLJLHBqUgF63xVJi1S3HtV_LIWzCmsmlox04byGEVIyyk4RNKDps5wkPxqRau08NoA0RrYOCxeXVV5J5TddyQ/s16000/3.png
IP
GET /img/b/R29vZ2xl/AVvXsEjnegshZvZbuTsIhTxkL14EZoL-hFOGHXeEdDabJDy0xYpJ0bWhfYI9TFEHGxSzhxyO3GSQ6LFdId15r6WQop5krX6Dteu3W9LKR1noIgLJLHBqUgF63xVJi1S3HtV_LIWzCmsmlox04byGEVIyyk4RNKDps5wkPxqRau08NoA0RrYOCxeXVV5J5TddyQ/s16000/3.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.nhipcaunhadat.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3ed2"
expires: Mon, 19 Dec 2022 03:26:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="3.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sun, 18 Dec 2022 03:26:03 GMT
server: fife
content-length: 17363168
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
216.239.32.21
93.184.220.29
104.18.21.226
157.240.194.27
194.242.11.186