ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 4195d3f97e59fc4f34d523d0195d8d0b
244cd9dd441c530c8e03405819eb759e95f25cb0
1fc6101023c68883ddf2cb7eb133e96a3e3cf96d7657223e38621f9fc9a7653d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
p.thoctv.com/css/vn.png
172.67.221.70200 OK 467 B IP 172.67.221.70:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type PNG image data, 14 x 11, 8-bit/color RGBA, non-interlaced\012- data
Hash d404158c3628ae513ce7e542f8b7c546
4dc2e16f65df1bf6ccd92462663463734a9e80bb
ce9d4addead161cd51302a57e0082296fb94a6cf190c2354d7487a7c63a71681
GET /css/vn.png HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/png
content-length: 467
last-modified: Sat, 11 Mar 2023 17:36:12 GMT
etag: "640cbc0c-1d3"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8op%2FqejvwYPkU7dYlnbQXV4oZzbq76ZTlPPrvxm6D%2BZOGrnqN4WKtdb0nCVmurSawJ50UBDCmut75tYPIZfHDy0f8oX9p2NcdyZzMidKhW1sg2b1vrgxI6dPTKNtciU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a10a731c06-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 4195d3f97e59fc4f34d523d0195d8d0b
244cd9dd441c530c8e03405819eb759e95f25cb0
1fc6101023c68883ddf2cb7eb133e96a3e3cf96d7657223e38621f9fc9a7653d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
motphimle.vip/wp-content/uploads/2022/02/Canh-Quay-Chua-Cong-Bo-Ban-Dien-Anh-Behind-Cut-Movie-2022-poster-185x278.jpg
188.114.96.1200 OK 13 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/02/Canh-Quay-Chua-Cong-Bo-Ban-Dien-Anh-Behind-Cut-Movie-2022-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 3625ff338a99e1c2386505122fbd7783
1a61c70fc1657e38727645e218ecf98b6c416dc7
059913bfe498d1e8942195f86ddcee516467890ae8148f3dc1bd00c7e474838b
GET /wp-content/uploads/2022/02/Canh-Quay-Chua-Cong-Bo-Ban-Dien-Anh-Behind-Cut-Movie-2022-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 12885
last-modified: Fri, 11 Feb 2022 03:31:34 GMT
etag: "6205d896-3255"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zGm%2BKa0IZ0iSG9xuLNMfCItcfyL%2BNAgUlHdq9nYk4CGaJ55HBoZivP%2Bu%2B2r414R4L5hVSyJ%2FTonduXb57KnXH0bC1riUfPmw%2B97azL9cWKNhxrZbV2Zasulu01zaOHDA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c933b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/09/Kheu-Goi-Chet-Nguoi-2-Poison-Ivy-2-1996-poster-185x278.jpg
188.114.96.1200 OK 12 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/09/Kheu-Goi-Chet-Nguoi-2-Poison-Ivy-2-1996-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 72132db3be68dcad98171a34cf35123f
b7340bf8621c609e8c49d95bb58b2c2385bea7a7
d0228096e0c02573f8fa9febd0cbd1dd93acae2615a43d792648f0a1e9629252
GET /wp-content/uploads/2021/09/Kheu-Goi-Chet-Nguoi-2-Poison-Ivy-2-1996-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 12078
last-modified: Thu, 16 Sep 2021 04:18:38 GMT
etag: "6142c59e-2f2e"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hDAXlGVb1JWFjsIvvr1GBdaApSfCcfFxPTwUfQj0O2JfW6iVuZvyZLl5XjqkvODvaZ%2F5tU1NDK%2FVw6aKLdnjWAMhtVEBR%2BwooIlaYh1T1N6K10w5eIT1iBpUi9WK0QkK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0d946b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/02/Tu-Than-Vung-Texas-Texas-Chainsaw-Massacre-2022-poster-185x278.jpg
188.114.96.1200 OK 11 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/02/Tu-Than-Vung-Texas-Texas-Chainsaw-Massacre-2022-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash a0ab2f084abf0668fcd81fd4ccc70905
073afa9e2915169de35cd6629b55ff18e7c658e4
e49b907243610d74d5b754d7742e4e8b3a430edcc50e6db224cf51b292f51371
GET /wp-content/uploads/2022/02/Tu-Than-Vung-Texas-Texas-Chainsaw-Massacre-2022-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 10984
last-modified: Wed, 02 Feb 2022 09:13:16 GMT
etag: "61fa4b2c-2ae8"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q5jIiZlESaFCZzpwb9WLJ6PcV6MdQRwxI0cutLT0nasd8HYGWETk%2BJYyivH9w0mBLpOqL0ixedCb2RLhghiPD1UlxaeHpy2lhgZT2KlqLmjxyIRTCujltffgnvXCpo3x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0d945b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/10/10-Thu-Thuat-Ten-Tricks-2022-poster-185x278.jpg
188.114.96.1200 OK 12 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/10/10-Thu-Thuat-Ten-Tricks-2022-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 2a08208629d0fe3aa30c6e797a5798a2
4ce525fea3ece7dc4c9f1996c04dc13dd5b5423e
c6067c19620f3f26720328dae9dbdfd793c6467cb46987d1affab7a17cbffae4
GET /wp-content/uploads/2022/10/10-Thu-Thuat-Ten-Tricks-2022-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 12108
last-modified: Thu, 06 Oct 2022 09:52:19 GMT
etag: "633ea553-2f4c"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RGI5KfelZ5048gH3Tqmvdr0BprG%2FqGooRoE%2F%2FQcsXq%2BiwSxAteQk4eTzLCkFoEBUgeVZ%2FwzjdlzhhYtbbHCmojUz1Ynpxqtger59q63Cu1D7E68mPHKYl%2Fji9Oyk2aFV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0d942b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/06/Chiec-Xe-Ma-Quai-Christine-1983-poster-185x278.jpg
188.114.96.1200 OK 12 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/06/Chiec-Xe-Ma-Quai-Christine-1983-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 3ae935c9d950eb0d3055ffbbde228f25
14ede930afbdc31463f1141b576dc4b48137e4c3
2f093747e13a01088b9ab1552f8d801a6b130de7507db89fd19534b3918d4061
GET /wp-content/uploads/2022/06/Chiec-Xe-Ma-Quai-Christine-1983-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 11555
last-modified: Fri, 10 Jun 2022 09:07:35 GMT
etag: "62a309d7-2d23"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cFYwjC%2BD37F5ivpvIzerCAH1%2F%2F2KZuAaRek0%2BXpsSnhAWcz2K3JIrOhPkyViixXfzOI07DQSQere0XTpnH09AeFbNfRezw3Jz%2FYKo6uCNR1TO9vdTmJQobJPoWm8MPjm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c940b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2023/05/motphimlevip.png
188.114.96.1200 OK 30 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2023/05/motphimlevip.png
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type PNG image data, 2380 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash dd11ed9aa3d404cd6e44ffddf4005d4d
92bce36c1d65ed4d2aa94e601a37875e11b418ed
304b497d3f06188af1d7c653000f24ddd955c56caa051b80898725628916c509
GET /wp-content/uploads/2023/05/motphimlevip.png HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/png
content-length: 30366
last-modified: Wed, 24 May 2023 08:34:46 GMT
etag: "646dcc26-769e"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U%2BdN0Jc1xf3OQ8iiO02fPKEklbGg7gXtpfp5erFkfq7Xme0E9qK%2FtlUJXHdm2FJXjF9z4diRfEsugbCxhg8lwWYwc%2BMDGiOPwkQAD2uYg5anQVdU2I6DbR6nqYWggVQj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0b92bb518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/11/Luyen-Ca-Dong-Bac-The-Northeastern-Bro-2021-poster-185x278.jpg
188.114.96.1200 OK 23 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/11/Luyen-Ca-Dong-Bac-The-Northeastern-Bro-2021-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 5a32e6ee5a9bb765df35ffdf0192bfa2
8df1b67bd94e33ef0c6e911f76e9a9b5ef55afe8
eb918599aae209b7711db36d1d70b1848644649b093b167c7c7a4cb355a33a1a
GET /wp-content/uploads/2021/11/Luyen-Ca-Dong-Bac-The-Northeastern-Bro-2021-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 22576
last-modified: Sun, 28 Nov 2021 15:40:32 GMT
etag: "61a3a2f0-5830"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2FmrlqbmaVQmGA8HEXw%2FFOHpikgRBqIAHscw%2Fnb6eEdAd2WgzmCdu3EsvLhoTgE5CJhpe2GW2IUD59xSExK%2FCX0nogGoNfIYFChzzwQH3mUGgTwGEwy%2B5AslgoBKMaIz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c931b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/08/Phu-Ho-Tham-Van-Tam-Chau-De-Tien-2004-poster-185x278.jpg
188.114.96.1200 OK 17 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/08/Phu-Ho-Tham-Van-Tam-Chau-De-Tien-2004-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 02da263184eb3e055da311506e91605f
7d58c588a66da7b55d1250c745399235faee5d7b
4599d8e471550722303e3fb621428e7627b05e56cf7c467345e280fc3b160a3e
GET /wp-content/uploads/2022/08/Phu-Ho-Tham-Van-Tam-Chau-De-Tien-2004-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 17094
last-modified: Mon, 15 Aug 2022 03:13:02 GMT
etag: "62f9b9be-42c6"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pGt1D2GIyu22yHCE2y88u9RqY6KiGp%2FfwwGr5APS9DUlaGf6knK8Cfmpzsx9aUMZ84gO%2FqXDSqlh4TgYHO5ISSRaRBmD8tgR%2BVZTUt799N5y66p1DHEDPSJsWiNDc%2BbP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c934b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/08/The-Beastmaster-The-Beastmaster-1982-poster-185x278.jpg
188.114.96.1200 OK 18 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/08/The-Beastmaster-The-Beastmaster-1982-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 17bb8714dfeff8b8f5127d5d5e56cd4d
19ec4f52c7c2ffde9967c6b83dbd3acbb8295011
2c4ea4bbaf8ce3027d80efeeb6e1740021e3867da743cb5ff41e691668e8bff4
GET /wp-content/uploads/2022/08/The-Beastmaster-The-Beastmaster-1982-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 18478
last-modified: Wed, 10 Aug 2022 09:29:13 GMT
etag: "62f37a69-482e"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2I5agrVRAHEMZ0f5LJ4ipxzOe9aMC6TNM5m1P31LEDcP8sYh383SXdyWiLUjn%2BrfHRzmHpfN5J5eF2gC54kh0nEp3O05DcJ4S%2BwGZ%2FZPwZSRhZmQOLbY%2FGqu6CdWpmmB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c93ab518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/08/Co-Hau-Gai-Ban-Viet-Nam-185x278.jpg
188.114.96.1200 OK 15 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/08/Co-Hau-Gai-Ban-Viet-Nam-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 976dda2c05bd80e178aa80be95151eea
c16ab4a6a1307a90dd62a1d1943f7edbe7ad3e09
36051de71ed9c64b2d2a84a452ed5563990eb579fad8b2de929928231e8c01aa
GET /wp-content/uploads/2021/08/Co-Hau-Gai-Ban-Viet-Nam-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 14955
last-modified: Fri, 06 Aug 2021 09:16:32 GMT
etag: "610cfdf0-3a6b"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3H17mPUUxmfdOiJHKTMmBM89e5R4wyH%2BKVP27UTiiuBbJAe%2BF3tPtmA7owPZL2kppSCWZRUlwlXO1IFJcaVhs3niD3DoaMKEBKka3kwKbiQoTViLOHsN1kBEGmf1Q%2Bk4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0b92eb518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/07/Chat-Doc-Khieu-Goi-2-Naked-Poison-2-2002-poster-185x278.jpg
188.114.96.1200 OK 14 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/07/Chat-Doc-Khieu-Goi-2-Naked-Poison-2-2002-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 080425f86a6b1c2da876529732c79af3
236892566c77dff8eecec8258124463cb5f10a6b
5e11d50e4f83ac5e8c55c1d4fc889f5388762f7828e60b61e2cb1a28049ac018
GET /wp-content/uploads/2021/07/Chat-Doc-Khieu-Goi-2-Naked-Poison-2-2002-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 14467
last-modified: Wed, 28 Jul 2021 07:37:04 GMT
etag: "61010920-3883"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FOyAFc5c0BfV6l%2BQaDb3R%2FJk2d2IIIUofMn3jmD7ORAs4SCwQBujWe3c15ASN3%2FgoJ3iQyiCBWH%2FaAY0ApvTrxzcTOE7x5h3%2BPoyDUmGZ3CWvjs0laJ3uVwSjYjvfJSn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c930b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/08/Sexy-Sisters-Die-teuflischen-Schwestern-1977-poster-185x278.jpg
188.114.96.1200 OK 16 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/08/Sexy-Sisters-Die-teuflischen-Schwestern-1977-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 5321b84fecef4bb7cd101c62aa1e353b
3ccd0a7ac7dc40aabf786a1f4dda7d5c570ffe90
9302072d431f8dcfbc2d40be504774773e269afc104911687ebe9069c3a97ac4
GET /wp-content/uploads/2022/08/Sexy-Sisters-Die-teuflischen-Schwestern-1977-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 16065
last-modified: Tue, 09 Aug 2022 09:37:00 GMT
etag: "62f22abc-3ec1"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aiAOy29iBdlgZZacAzQ4X4cKas4hEda8HEVHi9gn%2B4JKKZBjx7GbjXpSakkJtQdV3EbHs9OA%2Fre1%2BOZoOWdNja9IGdU%2Fm9YWLdkdCfOfccMhrT4WubKPjg2nKi5%2BX4z8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c936b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/11/Ba-Den-Roi-Dad-Is-Here-2022-poster-185x278.jpg
188.114.96.1200 OK 21 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/11/Ba-Den-Roi-Dad-Is-Here-2022-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash 9fa4dc952e32c6b034760ded41c373a0
4ec7d7eaf4f5bc87428ede63857ced691429dbee
ba2708b1e21ca6e3cf55b96c6e04ff69e135a9ae8e5e3654d8db4fd4ea565eea
GET /wp-content/uploads/2022/11/Ba-Den-Roi-Dad-Is-Here-2022-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 20677
last-modified: Wed, 09 Nov 2022 03:36:32 GMT
etag: "636b2040-50c5"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TfzYmr40nOhHXRVUH2CWi0Ivmy6OTNakTWw8Yvnju5SBiEoNAQ6bdu8f7yzf2vebgqi9Jua1gJzU9zp%2Fkt4igCJVI1edNsWKxLZOv%2F9FKgKHwNeDD5OMHJzWCScW1zBn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c935b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/03/Bong-Bong-Bubble-2022-poster-185x278.jpg
188.114.96.1200 OK 17 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/03/Bong-Bong-Bubble-2022-poster-185x278.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 185x278, components 3\012- data
Hash d3e24900ecabfe20fe1bc0a9c1daa675
51d150c89a358633507bc616d19c923e7632c3d6
eef68d2c238acc821dc4959e7f6d64115335b2cd3322b2edc38ecffe3709d4d9
GET /wp-content/uploads/2022/03/Bong-Bong-Bubble-2022-poster-185x278.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 17108
last-modified: Tue, 01 Mar 2022 03:46:29 GMT
etag: "621d9715-42d4"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i1iShS1gAKhjwPw2MXDXnje0sLW1l%2F37orUKmJ9MqTVFbvhHfjLcIAO1e4kTXbUvBwZVaFyqolEAuh95jaQ95ZLb3%2B9Qa%2BoXlMgRWgbl2%2BP6TTxObJnuwGG8AcNQE%2BDZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0c93cb518-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash bf41763493034cf0721a38e55b1b3ddc
286ada2e9811dec033e7c630fa0c33a036771ae1
8bb566767ad110bd2452aca59b4190694cce97ab9601de46067d8643efaad86d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.gussiesarkosic.com/rTqQasYJZ7nxSLlIJ/52935
172.255.6.129200 OK 20 B URL GET HTTP/1.1 js.gussiesarkosic.com/rTqQasYJZ7nxSLlIJ/52935
IP 172.255.6.129:443
Requested by https://p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
Certificate IssuerLet's Encrypt
Subjectjs.gussiesarkosic.com
Fingerprint72:53:84:8E:C0:D7:C9:05:66:56:9F:1F:2C:D7:B9:4E:D5:71:57:51
ValidityWed, 17 May 2023 18:30:12 GMT - Tue, 15 Aug 2023 18:30:11 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /rTqQasYJZ7nxSLlIJ/52935 HTTP/1.1
Host: js.gussiesarkosic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://p.thoctv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 May 2023 06:52:30 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://p.thoctv.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Tue, 30-May-2023 06:52:30 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJw9i8sKwjAURGuUYNVWBvwAf8D6QBdu1aXUhbgOtd6WYM0tTXzUr%2FcFruYwc8bzPDEIIXSJ3nIaLSfRfBZNF3M0c2KIeIdeylfjqlqZ5EKQMVf3pIasKNdsAnR%2FoFI%2BETrxbnQwZ8N38x8%2BtwCtVLs6gP%2BJrxu20dS2RLgq9GO45%2BLq3raFb8gpWxKd4K%2BTY0HjzX6L8N9%2Bz7KBtraqrPhRv7nv9IWebEhxlllyUqBxk%2BIFsdRBIw%3D%3D; expires=Tue, 30-May-2023 06:52:30 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
motphimle.vip/wp-content/uploads/2022/12/Liep-Lang-Hanh-Dong-Dealer-Hunting-2022-1.jpg
188.114.96.1200 OK 68 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/12/Liep-Lang-Hanh-Dong-Dealer-Hunting-2022-1.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 800x472, components 3\012- data
Hash 40a74b04d3c96115fb2bf6d5ac023d88
4182355b9be254da4a80c256765c79dcf798f141
348bf836d4cbf8e89ef5084fde9b3cf27eec19c5574c53c79eb75f57defa4acf
GET /wp-content/uploads/2022/12/Liep-Lang-Hanh-Dong-Dealer-Hunting-2022-1.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: image/jpeg
content-length: 68133
last-modified: Fri, 02 Dec 2022 09:13:28 GMT
etag: "6389c1b8-10a25"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=koUT7I%2FoN%2BL29Hbb6yZWq%2BeUDmlUzZGqkCiM0oXjBW38PButgO73gmkeflc8YBI7HDVbodW%2BftXw6KbRqRsIIbI1FzTisdzYNnxAEOynyypj47%2F6XfmjI%2B%2BuYoMEMdSL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a0d948b518-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash e75b43e8a7beaf5ded692008749eb5b0
5f96a142b29fc6ca88b33a9cb5c2c5b4b95b8635
a100d74db29961c793a7254e52dd854c8f85761876369b45073d911be95bab3a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-E2HMSLG4KD
142.250.74.168200 OK 80 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-E2HMSLG4KD
IP 142.250.74.168:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (3288)
Hash db28d678c9f06ee74cc343d745830752
a08db654dee18f539769ed0a5b4526d0349a04ab
42fbca4c9199b6fc841d87d2da3f2514682dc2d2a17f26dfc3c30887aa323069
GET /gtag/js?id=G-E2HMSLG4KD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 29 May 2023 06:52:31 GMT
expires: Mon, 29 May 2023 06:52:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80108
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash e75b43e8a7beaf5ded692008749eb5b0
5f96a142b29fc6ca88b33a9cb5c2c5b4b95b8635
a100d74db29961c793a7254e52dd854c8f85761876369b45073d911be95bab3a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash e75b43e8a7beaf5ded692008749eb5b0
5f96a142b29fc6ca88b33a9cb5c2c5b4b95b8635
a100d74db29961c793a7254e52dd854c8f85761876369b45073d911be95bab3a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash e75b43e8a7beaf5ded692008749eb5b0
5f96a142b29fc6ca88b33a9cb5c2c5b4b95b8635
a100d74db29961c793a7254e52dd854c8f85761876369b45073d911be95bab3a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash e75b43e8a7beaf5ded692008749eb5b0
5f96a142b29fc6ca88b33a9cb5c2c5b4b95b8635
a100d74db29961c793a7254e52dd854c8f85761876369b45073d911be95bab3a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 29 May 2023 06:52:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
142.250.74.35200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 May 2023 05:00:02 GMT
expires: Fri, 24 May 2024 05:00:02 GMT
cache-control: public, max-age=31536000
age: 352349
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
142.250.74.35200 OK 5.5 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data
Hash cdaab83619fcacd4027a77c99dd51e69
9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4
4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 23:01:05 GMT
expires: Wed, 22 May 2024 23:01:05 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 460286
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2
142.250.74.35200 OK 5.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 5604, version 1.0\012- data
Hash 7cda2cfee99d697daf8c14819d9004eb
76f4002863493c93454a9f17424942f321287cba
0948409a22b5979aa7e1ec20da9e61f12e7d403800b541ece053881bd2542b70
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 15:13:54 GMT
expires: Thu, 23 May 2024 15:13:54 GMT
cache-control: public, max-age=31536000
age: 401917
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2
142.250.74.35200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 11800, version 1.0\012- data
Hash e36fccd06262bef92e7a9841e2202225
b907dd02819497b3942220e0aa160c167195506b
7f1c829b0c90fd664a03bb714a74f7d35d9e38ee1687104abc8ad5bd9c8ccb6c
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 03:11:25 GMT
expires: Sun, 26 May 2024 03:11:25 GMT
cache-control: public, max-age=31536000
age: 186066
last-modified: Wed, 11 May 2022 19:25:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
motphimle.vip/wp-includes/css/dist/block-library/style.min.css?ver=6.2.2
188.114.96.1200 OK 29 kB URL GET HTTP/3 motphimle.vip/wp-includes/css/dist/block-library/style.min.css?ver=6.2.2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (48325)
Hash 47cdb0e81ea341ad27a1a0b0ba6b02d8
6195a67b0b7f7919f07309e2c8ce71f3d4729d03
aca566587618e75fa291a419c7c430be02e03fc72f6105658c1bc8e7d59a65e4
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2.2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Fri, 31 Mar 2023 03:07:58 GMT
vary: Accept-Encoding
etag: W/"64264e8e-17ced"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OFYxPRCTRARtwK8R72cW9jJmQN3HFxM%2FAV6AUkCpRwuZjTVt3t%2F6X%2FrHHtWD9MzmbBW%2Bv9bS76Gu6FFS0Rsur8nVFvzYiDZVErYrekVt%2FUPRa0AJYcuZ00NYqbxqaasI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0a907b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
p.thoctv.com/css/okru.css
172.67.221.70200 OK 16 kB URL GET HTTP/3 p.thoctv.com/css/okru.css
IP 172.67.221.70:443
Requested by https://p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type ASCII text, with no line terminators
Hash bcaf85ef44e31860010d6a209047d8f2
346f173267742dcc1393ecbdacc5b919a13dbd5c
fdb53e5c09223d32b046c85ec1702cc54b9629ac6573cf389e450633560a91c5
GET /css/okru.css HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-bgj: minify
cf-polished: origSize=93
etag: W/"62c6739d-5d"
expires: Sun, 18 Jun 2023 14:48:01 GMT
last-modified: Thu, 07 Jul 2022 05:48:13 GMT
pragma: public
vary: Accept-Encoding
cf-cache-status: HIT
age: 835469
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3snDDWbKvNkuy6OhJcOQgX5Fj0218efO1p49Dwd0LwFVpv2FRaUTaZ0RUv5dEUEGdLz8%2FMlNx00yBnFkJXWBM5rp5Xww0h2ACPudzERG8wse3H%2BaYln4IN6FjUKv2wI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a2de46b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.35200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 03:11:48 GMT
expires: Sun, 26 May 2024 03:11:48 GMT
cache-control: public, max-age=31536000
age: 186043
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
motphimle.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
188.114.96.1200 OK 16 kB URL GET HTTP/3 motphimle.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type gzip compressed data, from Unix\012- data
Hash d4daac89cf67fedd253071bdde805780
ccbc6d7a02a0f73d2395fb3d77c807b44dcc1677
c952363241012e7fa1be1b31a7af8578701bdfc9c4e5d5685e32496cf72d27d8
Analyzer Verdict Alert fortinet Phishing
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: application/javascript
last-modified: Thu, 25 May 2023 08:39:22 GMT
etag: W/"646f1eba-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uJWxR%2Fa9hnyap3M%2BEdHeKx%2F%2FCp4Uw7bktNQbJ0B9yVRB%2Fpka4TGtTwNhluVqaqTWyjPGZH9uv4%2Fbb%2B96hnlVVjHWXyRE5w%2Bv24e7tY9sCA1Q3uMbdvGhxPiH0w8uv%2Fee"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a169fbb518-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 31 May 2023 06:52:30 GMT
cache-control: max-age=172800, public
content-encoding: gzip
motphimle.vip/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.2.2
188.114.96.1200 OK 6.7 kB URL GET HTTP/3 motphimle.vip/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.2.2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (4186), with no line terminators
Hash ea958276b7de454bd3c2873f0dc47e5f
b143f6e8e8f79d8f104c26b0057ef5514d763219
2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.2.2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Thu, 21 Jan 2021 23:05:45 GMT
vary: Accept-Encoding
etag: W/"600a08c9-105a"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B6U47B7LpxDET12n11Xn7UC6lscbWeJNqfu00FLMaOA1763%2F%2FIM53w%2F%2Fwsi1zd8VyV1gIwpxeot49M1MEgSy3U0D96s7NQcxXGxbnMq27htT7WZLp2xc0Gf8rB4LAIQQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0a90eb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-includes/js/comment-reply.min.js?ver=6.2.2
188.114.96.1200 OK 1.8 kB URL GET HTTP/3 motphimle.vip/wp-includes/js/comment-reply.min.js?ver=6.2.2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (2946)
Hash 492f2c1a7ea7eb83fe42e0ff7cb51aa2
db36a77f6aaa2063bfbec02c2c0e967438c5a245
e174a58a503ab84b3d1b9de12fd3895788204485170f1289e445f7b5b98ec789
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/comment-reply.min.js?ver=6.2.2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Thu, 02 Jun 2022 08:54:48 GMT
vary: Accept-Encoding
etag: W/"62987ad8-ba5"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4V8PpD2WUPqmKIDWZHd%2FybTPPjdQIxwTqbaJjL%2BD%2B4ht%2B9HpY1aBbNdS6sWVO%2BusbrMCk4pGFZazi42A86ndr%2BDLW2Y3VE8KCmW6NNsCLExYxXzxVvdSB%2BUMeYMktWIY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a4ee00b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/05/50-Sac-Thai-1-Fifty-Shades-of-Grey-2015-poster-65x65.jpg
188.114.96.1200 OK 2.2 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/05/50-Sac-Thai-1-Fifty-Shades-of-Grey-2015-poster-65x65.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 65x65, components 3\012- data
Hash b2a2d5d85a59c53660c3e75336ee9e3e
835c92ec03bfaed863efa4b1e431f0f3d0fb2843
e5e17e157db916bc14df8ffc83e372f1279f49a8849ef399a9f99a33007cfa86
GET /wp-content/uploads/2021/05/50-Sac-Thai-1-Fifty-Shades-of-Grey-2015-poster-65x65.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: image/jpeg
content-length: 2233
last-modified: Thu, 20 May 2021 04:06:55 GMT
etag: "60a5e05f-8b9"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NVXHs9ANS6iCwMwXnz12bj4ZDwWQ7GEIG69nPEpQoka2mtr7rmcDGu0GOHYlm8qPxq%2BLG%2Bbwi9d2fqAmednH7eILDh68so7lqnhZ%2FwrsbnewbjC7hc96tgqTriZ%2B%2Bgv4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a62fbbb518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/starstruck.js?ver=2.5.1
188.114.96.1200 OK 1.0 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/starstruck.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (1309), with CRLF line terminators
Hash 4279a70d8fc5018f1a4dd4328ba56d0e
6aec001b3bd94f107f49e62c817048b1dd5ebe27
2914ebe7e0b33da6d390b3f42a784210f285402cf57588b90d917193f773e9aa
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/lib/starstruck.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sun, 17 Mar 2019 11:37:28 GMT
vary: Accept-Encoding
etag: W/"5c8e3178-51f"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1VwlF%2FSHVSVWXDd%2BGVmXIXyywOH7fcx9mXKLmqQPJ%2BGjjaCxx9OzFRLfrPLARDWQiFnjAmwDEHhn2Q4URjOIKGuzdZ9bDQsWUJcYWcTe7lz6Oz3yIpKUjBrTKdKTq%2BIC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a50e41b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/01/Kim-Binh-Mai-phan-1-Kim-Binh-Mai-2008-poster-108x150.jpg
188.114.96.1200 OK 5.3 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/01/Kim-Binh-Mai-phan-1-Kim-Binh-Mai-2008-poster-108x150.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 108x150, components 3\012- data
Hash 740afd067818fc56c6cf16a18816a5be
019b9a6fc8f21338e94d820fde62ade2eae18757
c8ed4109813b65bdb4aa8bf4b4de2279b15b9e2342ae975dabf382ad3a4a41aa
GET /wp-content/uploads/2021/01/Kim-Binh-Mai-phan-1-Kim-Binh-Mai-2008-poster-108x150.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: image/jpeg
content-length: 5268
last-modified: Sat, 30 Jan 2021 10:24:43 GMT
etag: "601533eb-1494"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iW1lBJPZIYwIl%2FAkVfhRapuzE3l%2BfrBb7wEUqd1ai88LNlezUDgId%2B%2B%2FjStgiJnuPDmy%2Fm2K29Bgjk3VlNYfg6gDJIikwqeu1h3C4pMdjEMYNMqF4vuMB8pjQS6a7oLS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a62fb9b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/04/Fast-Furious-9-Huyen-Thoai-Toc-Do-2021-poster-150x150.jpg
188.114.96.1200 OK 10 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/04/Fast-Furious-9-Huyen-Thoai-Toc-Do-2021-poster-150x150.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 565885d07c9782bd42a65c420872a5ef
e954fe3550645c41e320be44f40b0edcfe96cd36
6fd19687325abf8cf1d6448cdee0941de7e5715569b1f987065449b16a6caef1
GET /wp-content/uploads/2021/04/Fast-Furious-9-Huyen-Thoai-Toc-Do-2021-poster-150x150.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: image/jpeg
content-length: 10374
last-modified: Thu, 15 Apr 2021 09:07:58 GMT
etag: "6078026e-2886"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bui%2FENqJ3NwCsqDDEn0p4nBOsxtRj%2Bqm3DztWa5OjfOtffvDNziV4oC8G8dvV%2FZInh9rJX2nv%2BRH86NHwmAcjXdqmrw69j1sowyeIjSs9oQcs%2FlXwPwbpuRJu6GDrXC%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a62fb7b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/05/Phim-Cruella-Cruella-2021-poster-65x65.jpg
188.114.96.1200 OK 2.1 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/05/Phim-Cruella-Cruella-2021-poster-65x65.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 65x65, components 3\012- data
Hash 47344417df17b2e437ff6bf3be89c15f
d28606e7c8cbc89ae0a8aee356254930a61f68b2
5e690d816ff13f449ef25b0de25e01e2defed9c0311b0bb4bf6825d542f87e51
GET /wp-content/uploads/2021/05/Phim-Cruella-Cruella-2021-poster-65x65.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: image/jpeg
content-length: 2078
last-modified: Mon, 17 May 2021 23:54:25 GMT
etag: "60a30231-81e"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xTzC3c2zaKMJt8QDR33WrIpquUne%2F05RUm%2F6kmna1MZh%2Bh2lgoBFsr28%2BTx3l6f0E2Y5Fp1S9pOaZwxHtcZCeqZYqej1Gy%2F%2FdIiNuceMsfL3mrxIrtIpBKLIhaRu8TLI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a63fcab518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/01/Kim-Binh-Mai-phan-2-Kim-Binh-Mai-2009-poster-105x150.jpg
188.114.96.1200 OK 7.7 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/01/Kim-Binh-Mai-phan-2-Kim-Binh-Mai-2009-poster-105x150.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 105x150, components 3\012- data
Hash 541491316f0fbd8f2f9873603133b36b
cffda304b7a310cbf0cff36ca787c79b80de11d6
f2ed2100ea1b0393bd73af9633fd40100980d53a22883379f6a4c6f5380f68fe
GET /wp-content/uploads/2021/01/Kim-Binh-Mai-phan-2-Kim-Binh-Mai-2009-poster-105x150.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: image/jpeg
content-length: 7722
last-modified: Sat, 30 Jan 2021 10:53:14 GMT
etag: "60153a9a-1e2a"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CGJlhnje4DwQFnUbkA7cOiUOnButbOIRTRsf5mFy0pkfDgYLmJ1zNkIzuDpZTpGN0wC0zStVQ2vlvzx%2B5iYW0SIOfHB%2BIKY%2F0FG9lxvz0wigZJN%2BqdtieqfwPqAMN00T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a63fc2b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/plugins/wp-tab-widget-pro/fonts/fontawesome-webfont.woff2
188.114.96.1200 OK 67 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/wp-tab-widget-pro/fonts/fontawesome-webfont.woff2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-tab-widget-pro/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/wp-content/plugins/wp-tab-widget-pro/css/font-awesome.min.css?ver=6.2.2
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: font/woff2
content-length: 66624
last-modified: Mon, 07 Oct 2019 18:21:16 GMT
etag: "5d9b821c-10440"
x-frame-options: allowall
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ld12o6ijlYoUwKtluAbhnaf1Y2xPmaa%2BMhPmBSRcPC25zc4dpJwk3b1tQ%2BrdNZrzmAss31sOT1MsPjWYVTVdTmSpjWeuCENQ%2F3afgZabAnS0k6Tpyd7Zv2w42UpxHbWa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a5ff67b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-includes/css/classic-themes.min.css?ver=6.2.2
188.114.96.1200 OK 141 kB URL GET HTTP/3 motphimle.vip/wp-includes/css/classic-themes.min.css?ver=6.2.2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
Size 141 kB (141172 bytes)
Hash 1a0804b1a9d09705657f91fe7cad4c5a
feeece6f0b3e0bcf090547c475329a2772f6b26b
dcd9f488bd62ba0ee403b07a97e40b9ffd63a0eff61091588c913b16d5153d48
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/classic-themes.min.css?ver=6.2.2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Fri, 31 Mar 2023 03:07:58 GMT
vary: Accept-Encoding
etag: W/"64264e8e-123"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=50CBUOzoih4fgnc%2F0UFMPjCqZ2Zdd6FZrvXrZ79KX78xfs2auH88xNqIuBP%2BT9KsgZIISBSGB8pEJJM%2BQmNFwu0M7CeXCquiL%2F%2BJ%2FGASO93uwR%2BovskJxkID5gYblqaQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0a910b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pixel.wp.com/g.gif?x_stats-initial-visibility=visible&v=wpcom-no-pv&rand=0.8426768592187323
192.0.76.3200 OK 50 B URL GET HTTP/2 pixel.wp.com/g.gif?x_stats-initial-visibility=visible&v=wpcom-no-pv&rand=0.8426768592187323
IP 192.0.76.3:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?x_stats-initial-visibility=visible&v=wpcom-no-pv&rand=0.8426768592187323 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/gif
content-length: 50
cache-control: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
p.thoctv.com/css/catfish-1.gif
172.67.221.70200 OK 136 kB URL GET HTTP/3 p.thoctv.com/css/catfish-1.gif
IP 172.67.221.70:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type GIF image data, version 89a, 728 x 90\012- data
Size 136 kB (136539 bytes)
Hash 5420c91242fb13514c39e72a6598d3b0
8bd26d85d61c8b5525ba3a2fc622bedb29eb8736
7349772a087e49c4906acac2e2d376e17ad2c17cc7ed7bc922b5f57338f45898
GET /css/catfish-1.gif HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/gif
content-length: 136539
last-modified: Sat, 11 Mar 2023 17:47:32 GMT
etag: "640cbeb4-2155b"
expires: Sun, 18 Jun 2023 14:47:26 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 835506
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vG2BOITKWr7lMPjkKh%2BZWbX1iQd4t9tlnfovmz9ld8QOnkbIFI3kf3G5EUtIu963SaJ8KePPXnHPhp8mF7LlKOZzbW%2F952fMjP4CfSJVRo6qgD3SVLBZpm%2BoO%2Bas0Ko%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0ac791cb515-OSL
alt-svc: h3=":443"; ma=86400
p.thoctv.com/css/catfish-2.gif
172.67.221.70200 OK 78 kB URL GET HTTP/3 p.thoctv.com/css/catfish-2.gif
IP 172.67.221.70:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type GIF image data, version 89a, 728 x 90\012- data
Hash 1b1367a8fec200a07fd35e9d9db073ff
54aaa660eb004cc72c15f00e2fcb971449ef1440
10dcbffab3d509c6a0426f10ddf683fa6cd950a355d6791ee24fc67ddd3aa4f6
GET /css/catfish-2.gif HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/gif
content-length: 78272
last-modified: Sat, 11 Mar 2023 17:47:29 GMT
etag: "640cbeb1-131c0"
expires: Sun, 18 Jun 2023 14:47:26 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 835506
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wFg1KJkQzqqsAQlqbAKXqJEgYZVE%2FUqW1QrinkjfgqVblM%2B%2B6V3yP1%2FAKXP6vVpzaaWJ%2BQhxc2NeCgF%2B3%2B9nUh1cdYQNVJ6Iqx%2BRhCJ60KFruo505PTu1txz0As%2FoYU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0ac791fb515-OSL
alt-svc: h3=":443"; ma=86400
p.thoctv.com/css/x.png
172.67.221.70200 OK 1.1 kB IP 172.67.221.70:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type PNG image data, 20 x 20, 8-bit colormap, non-interlaced\012- data
Hash 05cfbc8212bee6fc4fac5580f012a4e7
2b95794dd84787fe09b4b4abe3a88bc48a43f14a
22fcb00211990da289d91dfc6323fe903aebfa81d7ef091971b87331e48fcd96
GET /css/x.png HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/png
content-length: 1082
last-modified: Sat, 11 Mar 2023 17:06:13 GMT
etag: "640cb505-43a"
expires: Sun, 18 Jun 2023 14:47:26 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 835506
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JzHHZv0SzSUAegpOfoVyi2LVCMv8ALF5iVw3wry8grcr7NzBiWjFbxTU5T6gcvMfR%2F0ucTfFnT80iYXrTMU1MPKQzkJ12nZNrr5lO%2BAZiEpnnI4Bo37Y6NUtO%2FGFArw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0ac7922b515-OSL
alt-svc: h3=":443"; ma=86400
p.thoctv.com/css/header.gif
172.67.221.70200 OK 639 kB URL GET HTTP/3 p.thoctv.com/css/header.gif
IP 172.67.221.70:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type GIF image data, version 89a, 728 x 90\012- data
Size 639 kB (639048 bytes)
Hash aaf46be18e52a2ea413578e3933933da
c509fd1f2807ad31c5c84906a7eb07956a66ae4f
8e2c8ddad66047d1ade6bc54b70b66280c2dd8a82440f99e990dd7f03e40c94e
GET /css/header.gif HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/gif
content-length: 639048
last-modified: Sat, 11 Mar 2023 17:47:32 GMT
etag: "640cbeb4-9c048"
expires: Sun, 18 Jun 2023 14:47:26 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: HIT
age: 835506
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WacopCTBuMwuTeKlpWJh7lmh41cyxHdw6hZ%2BzSP61SQhFaz30q3t8nxob2krG409Zrp8EClDVGpT%2FAacKqBvlRxNLJjCRwnfu%2FNjVKt1CLTvNwX6bBtGUKEYd4uxl4M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0ac892fb515-OSL
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/vendor/p2p-media-loader/p2p-media-loader-hlsjs.js
104.21.14.185200 OK 36 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/p2p-media-loader/p2p-media-loader-hlsjs.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type C++ source, ASCII text, with very long lines (505)
Hash 7077807f2900e2dc473a8945b5c6f5f5
8850c71d238e0a68379b4a27cb142c19d7a69c36
70fba5ef769f37e29994085b653c2b3fc95d97fa7235793524d53f65c0fcf338
GET /assets/vendor/p2p-media-loader/p2p-media-loader-hlsjs.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sat, 26 Oct 1985 15:15:00 GMT
vary: Accept-Encoding
etag: W/"1dc0fff4-109c8"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 481643
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w7No6eZ0kDpw%2F2XWJAMFtviBwKLYn2%2FiM6UYUhVOkTDl4qHLf%2FBhFxpSRQMVALM0WQD5Dhd02XWQBzOddYPbPsBqpYD0fNrf%2F5L%2BddYN8idp7J7%2FGdWj95h3vypSPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a83b7fb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
i.imgur.com/hdcFl3v.png
151.101.244.193302 Found 0 B IP 151.101.244.193:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hdcFl3v.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
retry-after: 0
location: https://i.imgur.com/removed.png
accept-ranges: bytes
date: Mon, 29 May 2023 06:52:32 GMT
age: 0
x-served-by: cache-iad-kiad7000089-IAD, cache-hel1410033-HEL
x-cache: HIT, MISS
x-cache-hits: 0, 0
x-timer: S1685343152.159414,VS0,VE108
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
content-length: 0
X-Firefox-Spdy: h2
motphimle.vip/wp-content/uploads/2021/04/Truyen-Nhan-Cua-Nu-Oa-Silip-1985-poster-90x135.jpg
188.114.96.1200 OK 5.3 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/04/Truyen-Nhan-Cua-Nu-Oa-Silip-1985-poster-90x135.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 90x135, components 3\012- data
Hash a19c77873e47434d40980d509378910e
499fb6b43ae74b838f2ad5ee83a723c2c771d96f
8ff81a47547a63a7366784445004951821857928d9fdd3786af3ba319e1d31ae
GET /wp-content/uploads/2021/04/Truyen-Nhan-Cua-Nu-Oa-Silip-1985-poster-90x135.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/jpeg
content-length: 5291
last-modified: Sat, 17 Apr 2021 09:20:11 GMT
etag: "607aa84b-14ab"
expires: Wed, 28 Jun 2023 06:52:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BL9gqhyG%2FmyHxBXWxzHAg7vcvm2%2FGdk9hGr8X0HgVwLJVnGM2sLZq5ApQ%2FdoIaXSxUTu1CGhuWPcJwVzyAEk9TXb%2Fu1vuiVCLzKShPLjk7vDltzAV1%2B7H7HB3Js%2B%2F%2BPU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0acaf0cb518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/08/Diep-Van-1-90x135.jpg
188.114.96.1200 OK 6.0 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/08/Diep-Van-1-90x135.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 90x135, components 3\012- data
Hash adab97fe3596beced20ab3049efab828
19c520e98b4ec0c01fbdf71304a6e12af29bc72e
750e558e079d3fa774ae5139db61fa835181fd6cbc337300ef5220cf74f183dc
GET /wp-content/uploads/2021/08/Diep-Van-1-90x135.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/jpeg
content-length: 6033
last-modified: Wed, 11 Aug 2021 17:26:05 GMT
etag: "6114082d-1791"
expires: Wed, 28 Jun 2023 06:52:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1miGPn699ZjBKcaUU8kDmfSTyi3Y8WV4%2Fkn4wdCl2d7o2RuFTvBoG3jEPYb6%2Bu%2Ba5yk5uA0RTF%2Fvo9YW4LkQKhRUezi3E5GXiO1jEJ%2BMBJN1NbGVZt86FGvqgah8aRw1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0acaf13b518-OSL
alt-svc: h3=":443"; ma=86400
i.imgur.com/removed.png
151.101.244.193200 OK 503 B IP 151.101.244.193:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerSectigo Limited
Subject*.imgur.com
FingerprintD6:4D:45:03:6D:38:F8:FD:EA:AF:E5:92:B3:4D:85:A5:6B:AF:5C:EC
ValidityMon, 13 Mar 2023 00:00:00 GMT - Tue, 12 Mar 2024 23:59:59 GMT
File type PNG image data, 161 x 81, 1-bit colormap, non-interlaced\012- data
Hash d835884373f4d6c8f24742ceabe74946
20002faf28adfd94ca98cf6ced46f14334b53684
9b5936f4006146e4e1e9025b474c02863c0b5614132ad40db4b925a10e8bfbb9
GET /removed.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://motphimle.vip/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 14 May 2014 05:44:36 GMT
etag: "d835884373f4d6c8f24742ceabe74946"
content-type: image/png
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 29 May 2023 06:52:32 GMT
age: 6475167
x-served-by: cache-bwi5167-BWI, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 3445056
x-timer: S1685343152.359755,VS0,VE0
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 503
X-Firefox-Spdy: h2
motphimle.vip/wp-content/plugins/ungrabber/js/ungrabber.min.js?ver=3.0.3
188.114.96.1200 OK 50 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/ungrabber/js/ungrabber.min.js?ver=3.0.3
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (3386)
Hash a29f5b51d8207981a2c58d607333764d
4d2b5d52bbf461dc0878240f27d040b94deb849e
5064274dc1c5e540a6ad3c0944f47ec159a209731e6356985a1b4f7bb21f64be
GET /wp-content/plugins/ungrabber/js/ungrabber.min.js?ver=3.0.3 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Fri, 30 Jul 2021 23:50:07 GMT
vary: Accept-Encoding
etag: W/"6104902f-efe"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FCFtevJ%2FUuwk0FOVFA3Plm%2B1DDNROzWSWyhIeJeF384S9nPMdoOQZ9V73yy%2FcdmxgBGicop1jDCDNlhTolxNH%2Fr1fvdrrIduQmVtVpdtbNnMv8wUHwzrcFdwTxFjra3z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a50e38b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/pwsscrollbar.js?ver=2.5.1
188.114.96.1200 OK 20 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/pwsscrollbar.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (45007)
Hash 971c9dba00bafafbbefeec7e58dfc432
ea7fbe2e8c2725baccf3aa09fc52244708218620
8d66e5d985349af924510cf978564a7d84164741de08f173d1fa61f0b1c2960c
GET /wp-content/themes/motphimle/assets/js/lib/pwsscrollbar.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sun, 03 Jan 2021 02:40:16 GMT
vary: Accept-Encoding
etag: W/"5ff12e90-afd0"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EabaaO%2F%2BfWcSTV0TvD6gYHaa7SSIZianjVM8tl0PEufcxbTM5g8D9gRysslQDzwWUCuFbc0upVkhbcv%2BT3GXk7%2Fz15mluwZuEdDGq6SBtWUWdr84FfvnUJzuVzoq8qd1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a52e62b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/02/Ky-Bang-Ha-Cuoc-Phieu-Luu-Cua-Buck-Wild-2022-poster-90x135.jpg
188.114.96.1200 OK 5.5 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/02/Ky-Bang-Ha-Cuoc-Phieu-Luu-Cua-Buck-Wild-2022-poster-90x135.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 90x135, components 3\012- data
Hash fa7a4256983ced1346289bb24bc7cfb9
331806abe771c620756c5bc7b0357b923f4e33c7
5bdab32dacb3f6f123e128586c97c3c197937d4150b5fb5691077b30cfa48909
GET /wp-content/uploads/2022/02/Ky-Bang-Ha-Cuoc-Phieu-Luu-Cua-Buck-Wild-2022-poster-90x135.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92; _ga_E2HMSLG4KD=GS1.1.1685343151.1.0.1685343151.0.0.0; _ga=GA1.1.33334610.1685343152
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/jpeg
content-length: 5521
last-modified: Mon, 07 Feb 2022 09:19:44 GMT
etag: "6200e430-1591"
expires: Wed, 28 Jun 2023 06:52:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8XP1hxkEkXTPdfLPPypTW9xjuOhFZYNHO26%2FfiWcHlme8o%2BxVkkhfqDZem160py66uuEMDpGxDn6jIiqGe57KSgdzZOdqCkTk5Y07rijrS%2FotTNH9G5FJBBkvqCcRH0U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0affa82b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/blueimp.js?ver=2.5.1
188.114.96.1200 OK 12 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/blueimp.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (32032), with CRLF line terminators
Hash 0c33d55a46db8350f57388504aec281f
3701799975093b4d67e3baeea453ef6202a66fba
833047db5433fc30adfc5f85c19e600dbb6f56d462510663208a5354a984dada
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/lib/blueimp.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sun, 17 Mar 2019 11:37:28 GMT
vary: Accept-Encoding
etag: W/"5c8e3178-80c4"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CsQBP1CMhxcZIMc%2F2biCWB00QRVGsnRw2UzjD4L7XNt1zcaGGMXWsw07c5SEOouVyE1jfwDdf1Qgo8%2BMbCfpfhkKL%2BdqxoGfujDLlDNG4SUKpwaKhEO5noZ1TJxUeh8g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a51e4cb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/plugins/ungrabber/js/devtools-detect.min.js?ver=3.0.3
188.114.96.1200 OK 6.0 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/ungrabber/js/devtools-detect.min.js?ver=3.0.3
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (658)
Hash 0e5fcee088c63abb1943337ace8d30c6
e459b2f82899e70ccc3df5468350a492c728f995
7ef01425178b629cb73805de16157d7964779c696d72a6eea46137ddb3a6a34a
GET /wp-content/plugins/ungrabber/js/devtools-detect.min.js?ver=3.0.3 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Fri, 30 Jul 2021 23:50:07 GMT
vary: Accept-Encoding
etag: W/"6104902f-311"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q7MNMwASPvwlAQFFTp4BtBeiHQRK%2Fe3aG2ZdJPcPpEUcUDaDBa2NEOrDpoIUkqSwBnPkVGlL9ZldLIZ031iK8tR%2FShFp93bHHYv6ZAeJjqqI9y23HB5D7YpOHSIsCxgM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a4fe1cb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/01/Buc-Anh-Dinh-Menh-The-Lucky-One-2012-poster-90x135.jpg
188.114.96.1200 OK 4.7 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/01/Buc-Anh-Dinh-Menh-The-Lucky-One-2012-poster-90x135.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 90x135, components 3\012- data
Hash a5826b20da9932f68a5aacb08dc8f465
f8119b9799c0448678ac85e8f4bb31ab5f0dbe7b
685ee22ecd7051581f3b8c83c6a46125c54545f963afab9802d428749c730b09
GET /wp-content/uploads/2022/01/Buc-Anh-Dinh-Menh-The-Lucky-One-2012-poster-90x135.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92; _ga_E2HMSLG4KD=GS1.1.1685343151.1.0.1685343151.0.0.0; _ga=GA1.1.33334610.1685343152
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:35 GMT
content-type: image/jpeg
content-length: 4717
last-modified: Tue, 25 Jan 2022 14:31:47 GMT
etag: "61f009d3-126d"
expires: Wed, 28 Jun 2023 06:52:35 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2FKG4Ijv0ScV4ypbcDRJ8SpuSau0RRP5mml7DYD%2F%2FK5MCaq4LH1kloW3ESmUeJBJIJF3EC66ac9et03g9qaoUE6diq4hNMMkPubVx1OjCxgN5jTsFflMBr56FxAwAJwq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0c06cadb518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/idtabs.js?ver=2.5.1
188.114.96.1200 OK 1.5 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/idtabs.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (1591), with no line terminators
Hash 08755c304c37fe33cda2bfb7344ff230
d47f71c3d91b50c62457b2e6cde5fdaba4f5ce70
13181383cf1475b1b73b37c42e5c131c31e4865ffcf5c5fa9360caa483a74f24
GET /wp-content/themes/motphimle/assets/js/lib/idtabs.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sun, 17 Mar 2019 11:37:28 GMT
vary: Accept-Encoding
etag: W/"5c8e3178-607"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2mTF8qvIo1J7xWaPBTSw26ctGG50XM6blpdn%2B6nmPGMzGYBTXJXPF5zPszth0XcM%2BwNSDSBjqKwUIcN6vcCXUfBBXpDmJGKLlHHPUQ0rX9iL5Z91lU8mXF1Qfg9hBbSi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a51e56b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2021/09/2790961.png
188.114.96.1200 OK 21 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/09/2790961.png
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 13856c08606c70ce9d638bc3d78a998c
79a2c83238b0dfffd3095048c601de2217e7ae33
05eadcb27f710cb205f5367d80d761c42a56b43fea3fa74d931d6cb0c75b3b6c
GET /wp-content/uploads/2021/09/2790961.png HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/png
content-length: 21413
last-modified: Mon, 20 Sep 2021 15:14:00 GMT
etag: "6148a538-53a5"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RP5AE6EYX9yo1hJ8K2yNq3uxSCfyqH1IJPLDfW026%2BAkbRFqr3b98jgD8g0Rh7kBG4TxV4Qyi1Q9xBjQVM6j2khI%2FGDJAd8m%2BAhsyl6GqDTjAyu6PuE%2F32ZDk97LAQNH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0aa5c74b518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-connection/dist/tracks-callables.js?minify=false&ver=d9dbf909a3d10fb26f39
188.114.96.1200 OK 1.1 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-connection/dist/tracks-callables.js?minify=false&ver=d9dbf909a3d10fb26f39
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (1103), with no line terminators
Hash ca038e87a59e7dec395d1eb4a5cd2cdc
9e500299ef148d64df80628c9a4ff69b5ff1b358
b1b3c2a5ce30e928be42e225f82a79d275390a805c16e56c2dddda87e787281b
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-connection/dist/tracks-callables.js?minify=false&ver=d9dbf909a3d10fb26f39 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 08:00:36 GMT
vary: Accept-Encoding
etag: W/"6454b7a4-433"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cA05KVANBcUsGXUPngUSEtkxp3qFiK9g6zJTfRZUU9IINGWQXQN5WUtLg8jTfEweY7rxwfc4ONqYEzCJ2JSDpBYVKSnf0OVLciXxySm%2FqpGVuRlZJBbYZt%2BBtgGdfGAY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a50e31b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/starstruck.raty.js?ver=2.5.1
188.114.96.1200 OK 10 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/starstruck.raty.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (10362), with CRLF line terminators
Hash d967735d0c4a36d039142d01d02ee257
e79738152720eef153774d3a6806d03861623f2f
310589cc35c17dc5e369b35b45423ac830bb0a0b65f7f720a1c3b089254bd152
GET /wp-content/themes/motphimle/assets/js/lib/starstruck.raty.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sun, 17 Mar 2019 11:37:28 GMT
vary: Accept-Encoding
etag: W/"5c8e3178-287c"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OIhgfD5WJcpZbgZBYqNQr8ove6TRyq%2FfaXIbdugsRBw5xy6ZUC0eRrpQ6%2FcFc31wuUtNrNsgjM6JzjhJbB%2BwJx7lbFUCRV%2FQGAC6vPQswbAbK7K%2BlDeIyqsQhRZjK1ES"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a50e43b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
188.114.96.1200 OK 90 kB URL GET HTTP/3 motphimle.vip/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (65447)
Hash 0e850a69bc7fd0acc2e92ce6eee87959
8be6d9e7f7a61ccf0b8eac8a8144d770b608a19c
afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.4 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Fri, 31 Mar 2023 03:07:58 GMT
vary: Accept-Encoding
etag: W/"64264e8e-15ed7"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=95kOStG5rgimGDQ30R8w2MyF6yo%2BnOVoJbkJkmHi%2B59v9BINAK7n2Z%2F0bL2iMpy73kLjmPssqwWpYe8o5aF6JAuiic3e%2BteZVyb6CKWwB1tFxG7C6Vjp%2BRnGl70A2lEh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a53e71b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/fontawesome/webfonts/fa-solid-900.woff2
188.114.96.1200 OK 141 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/fontawesome/webfonts/fa-solid-900.woff2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 140996, version 331.-31392\012- data
Size 141 kB (140996 bytes)
Hash 25d740d42658b6e2c293ce7b3322aac7
41cc9ae4b5dd70fd3988059dfb864f20f99ae371
8b5a3ff47c2413e0bf3dd3bb7899a25aeef9b390a055847a1185a39ad48a2da2
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/wp-content/themes/motphimle/assets/fontawesome/css/all.min.css?ver=5.15.1
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: font/woff2
content-length: 140996
last-modified: Sun, 04 Oct 2020 23:20:56 GMT
etag: "5f7a58d8-226c4"
x-frame-options: allowall
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oo7VQMTeA7dvLy2r1egsbhFP9FCVmc2bt%2BaPxDRJKHp4X8AfZVz1cyAJ8bbk4CkNa%2FTgTTbHw8P6Mu%2B1Os%2FCwwuo3BGwrJtr4CnUsmvBmahSUkm0V69S1d0Z6qILaBZK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0a55e94b518-OSL
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/vendor/p2p-media-loader/p2p-media-loader-core.js
104.21.14.185200 OK 337 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/p2p-media-loader/p2p-media-loader-core.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type C++ source, ASCII text, with very long lines (505)
Size 337 kB (337328 bytes)
Hash f6b097efbd7ff945c0dfa16dd2338295
ba8469e67895a73ef6ee46001d30d6dcbe4a4037
4092a4dfb244477eb5cfeab6430f1f7da6141f76d2f5dd9bf3fc6c48502b9a32
GET /assets/vendor/p2p-media-loader/p2p-media-loader-core.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Sat, 26 Oct 1985 15:15:00 GMT
vary: Accept-Encoding
etag: W/"1dc0fff4-525b0"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 481645
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1dwNqPK%2F7DCM18qijKhyI7sgIkRzBhQ6abAuKuKxPBj43Tu8Su4gyAr6Ey%2BOOab9JUBF%2FLdy%2Bgn8Rp09CPkmCL6DWrSGtcSybTqS%2FcYzfZ%2F1X8vhwTZ2UqulEqGGPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b3394bb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/plugins/jetpack/css/jetpack.css?ver=12.1
188.114.96.1200 OK 100 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/jetpack/css/jetpack.css?ver=12.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=12.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Fri, 05 May 2023 08:00:36 GMT
vary: Accept-Encoding
etag: W/"6454b7a4-1856a"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sGVWxKzzbddUpzz9PXNjxCH9slaw4rhnD5BVjh8%2BtuSxC8yceppNTWHOU8inFNDG0LIzgqYrF54B1%2BgmKZS8PCqYZlnf1iqkrjNsPiY05nxqi0pyJpEoWk6fz%2FRoUCns"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b929b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/plugins/wp-tab-widget-pro/css/wp-tab-widget-pro.css?ver=6.2.2
188.114.96.1200 OK 25 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/wp-tab-widget-pro/css/wp-tab-widget-pro.css?ver=6.2.2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (330), with CRLF line terminators
Hash 5c22e87364acc3f5b2ed325e55240476
44ef2b2063045aa85f2f03c9224f1520d986ebff
e2d191359493b62067d36afdd33ecf4035dea561a8caaa0d455be83a292a9902
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-tab-widget-pro/css/wp-tab-widget-pro.css?ver=6.2.2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Mon, 07 Oct 2019 19:14:40 GMT
vary: Accept-Encoding
etag: W/"5d9b8ea0-6026"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tu8bPrExO2clpWQZEGxYyXj%2Bl0o810wnYj7pAo4JqdVRjjPVrU%2B9XDfphb8Vhfn0M0FFtBJUBK8SoaM5IPb8l5jb5s29bbL7w5O77kb9JQp8jGmKBAGQ9f3EOZVn%2BaOS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0d94cb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
stats.wp.com/w.js?ver=202322
192.0.76.3200 OK 11 kB URL GET HTTP/2 stats.wp.com/w.js?ver=202322
IP 192.0.76.3:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (10778), with no line terminators
Hash f6c87bc49e7646c7ccda489b9defc829
9003fc52b4c4014b4bd9fe2f4506440b299478b2
e97d12898ebf1039197a2a1c2f87bfe3b56f93eca2bfe60a46a1053fab7ad860
GET /w.js?ver=202322 HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 29 May 2023 06:52:30 GMT
content-type: application/javascript
vary: Accept-Encoding
x-minify: t
x-minify-cache: hit
etag: W/10813-1684464982349.1523
content-encoding: br
expires: Tue, 28 May 2024 00:00:01 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
zzplay.buzz/assets/css/player.css
104.21.14.185200 OK 23 kB URL GET HTTP/3 zzplay.buzz/assets/css/player.css
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type ASCII text, with CRLF line terminators
Hash 69fc775ed925e0704e5646695b754bb2
2b0967bfc28493edc135f36d3e4ed0e39c5197ba
4c947d1e07e8c7bc8c85eb8ea724eb4b59c5f629e3604fbcfd30ac3b9ae6bf3b
GET /assets/css/player.css HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: text/css
last-modified: Thu, 24 Nov 2022 11:22:26 GMT
vary: Accept-Encoding
etag: W/"637f53f2-5a58"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 511926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TVTkHTCSubHifeOoDfK00EctM2aVX8R5DXj4Qq8aD4t80cJhPFvhpAKI2yM2RQ4%2FmNaZ5ZUrVwrdI%2BKlnOQvIOyFrQBK6hTgQ4KdkcEvvy5r2pXlJS3WEfYILN24uA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b32944b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/plugins/wp-tab-widget-pro/css/font-awesome.min.css?ver=6.2.2
188.114.96.1200 OK 27 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/wp-tab-widget-pro/css/font-awesome.min.css?ver=6.2.2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (27255), with CRLF line terminators
Hash 30c3355dfd31e868aff88a753ccc4fde
98c96c1a018644793cc82212da9e524b9721426d
8d85ff3794aa8511ad00fb1c88196f1bcd0cd0b6a9f16b03ab29b345bfefb3fa
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-tab-widget-pro/css/font-awesome.min.css?ver=6.2.2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Mon, 07 Oct 2019 18:21:16 GMT
vary: Accept-Encoding
etag: W/"5d9b821c-6b1c"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uYP4jnrTorsJso9Lv09FxSWSohQv6e1GjqUXLNCeTlGZa%2BbTxJuAOtosl5ixEV6Ao8LJa57Fu0%2BaVnLBy6qM92qvOp5Q4%2BqCywl38QjYRM3dfP7Emws9NE2F429%2BfgrV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0d94ab518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
142.250.74.35200 OK 5.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 5560, version 1.0\012- data
Hash ca3b09b62fda648a4511700413313fd0
109cd4c5435bd6614391bb8722c47c287c96b2ec
77b24796a3d4ab521f66765651875338ed50cb9306cfe4603a3e79618e429cec
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 00:16:47 GMT
expires: Thu, 23 May 2024 00:16:47 GMT
cache-control: public, max-age=31536000
age: 455744
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
motphimle.vip/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f
188.114.96.1200 OK 1.6 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (1610), with no line terminators
Hash 85001da72d2adacd89f64191337692ca
f4aabaaef3d271c4e6cbcfb974b3d3b403a32db0
95d19d87f29a6ea4e274e3681e839eac392e30647f4d373841c3c9c30749b64b
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Fri, 05 May 2023 08:00:36 GMT
vary: Accept-Encoding
etag: W/"6454b7a4-64a"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ql%2Fv4Qlqo236DgfnDptepv%2FUm0V8l3NpZXGmRMO%2B6H%2FDPZt3u4yci78aPV%2FtU4gnhhV06FHBM2r621MQXPn3%2BJHSo3uBn%2FTTWT4AKMicvDlDfWI5IfKxnDHdI0jp6KBW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0a909b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
104.21.14.185200 OK 7.2 kB URL GET HTTP/2 zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
IP 104.21.14.185:443
Requested by https://p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8151), with no line terminators
Hash eeaab02992f14a433ff38c00d66cbb5e
923de09f34a9d4e0d1515ad68749be25645e7833
78a911c7e97f80ecd399dd8b353513f8c3604d5743f8823cd4843edcce0ffc77
GET /e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://p.thoctv.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/html; charset=UTF-8
referrer-policy: same-origin, no-referrer, strict-origin-when-cross-origin
cache-control: no-cache, max-age=0
origin-agent-cluster: ?0
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-allow-headers: *
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yma70TJ3G3WJEz7lBznPq9bRjAMQSANIJSQLBXfiUpHuR8A7849EuwN3M7JPS4qr7flK0lYu7M0lvqK3sF5ATv6LHiPyTP9Xu1ScI62LL8iY0YKVMWPdEjN90XCd7w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a33b8f0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
zzplay.buzz/api/?Qnc4R09mandnRjFjbkc5aWl3eVNTbTc0V1FSbllOOTFYZkg0WXJqSTlybnZyRWRNU0x5KzJwNHZuTFhncjBzWGpzWUxFRWU1RUdyOHp4M1Y5emoxb3NsWkt5N0MzMnhkS052c1hONGgyK25wdnkxWkttQ0djN2JpVEtYdXZoVzlKUWlsUDJ6WmlmRGYzcEtiVy8wMmlCeDlOSkhnWHdaMHZHemdKV3ZLTmFQcUdGcCtZTXdkcE1iRFp3ZzI3a3RsVHptOG9VV1dySkxNcmZmaDRCM2wzQWdaQ2NqQjZ0djZmM3ZwalV3ejBoWWlVK2o1RmR1SHdmTjU0Vjh2YTNOdXNZeUR4SDRoVXVIaDVUc3B0a2lzM2FMdUxISDlkTmFqOEtwT1BQOU5mWnc9&_=1685343152891
0.0.0.0 0 B URL GET zzplay.buzz/api/?Qnc4R09mandnRjFjbkc5aWl3eVNTbTc0V1FSbllOOTFYZkg0WXJqSTlybnZyRWRNU0x5KzJwNHZuTFhncjBzWGpzWUxFRWU1RUdyOHp4M1Y5emoxb3NsWkt5N0MzMnhkS052c1hONGgyK25wdnkxWkttQ0djN2JpVEtYdXZoVzlKUWlsUDJ6WmlmRGYzcEtiVy8wMmlCeDlOSkhnWHdaMHZHemdKV3ZLTmFQcUdGcCtZTXdkcE1iRFp3ZzI3a3RsVHptOG9VV1dySkxNcmZmaDRCM2wzQWdaQ2NqQjZ0djZmM3ZwalV3ejBoWWlVK2o1RmR1SHdmTjU0Vjh2YTNOdXNZeUR4SDRoVXVIaDVUc3B0a2lzM2FMdUxISDlkTmFqOEtwT1BQOU5mWnc9&_=1685343152891
IP 0.0.0.0:0
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/?Qnc4R09mandnRjFjbkc5aWl3eVNTbTc0V1FSbllOOTFYZkg0WXJqSTlybnZyRWRNU0x5KzJwNHZuTFhncjBzWGpzWUxFRWU1RUdyOHp4M1Y5emoxb3NsWkt5N0MzMnhkS052c1hONGgyK25wdnkxWkttQ0djN2JpVEtYdXZoVzlKUWlsUDJ6WmlmRGYzcEtiVy8wMmlCeDlOSkhnWHdaMHZHemdKV3ZLTmFQcUdGcCtZTXdkcE1iRFp3ZzI3a3RsVHptOG9VV1dySkxNcmZmaDRCM2wzQWdaQ2NqQjZ0djZmM3ZwalV3ejBoWWlVK2o1RmR1SHdmTjU0Vjh2YTNOdXNZeUR4SDRoVXVIaDVUc3B0a2lzM2FMdUxISDlkTmFqOEtwT1BQOU5mWnc9&_=1685343152891 HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
motphimle.vip/wp-content/plugins/ungrabber/js/hotkeys.min.js?ver=3.0.3
188.114.96.1200 OK 5.7 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/ungrabber/js/hotkeys.min.js?ver=3.0.3
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type Unicode text, UTF-8 text, with very long lines (5851), with no line terminators
Hash b0d3fdfd8530d974bf4e835effc51d01
8f05ebf383859d52a452888a4e742bf322038214
45f04fc00410d5eddd449e031939b3454e60ac3e8f2ef2cb1941fa796c61ce62
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ungrabber/js/hotkeys.min.js?ver=3.0.3 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Fri, 30 Jul 2021 23:50:07 GMT
vary: Accept-Encoding
etag: W/"6104902f-1639"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8wJE848jZTfmb337hWoDZuzn%2FdpDhAkjTbazvHdbB9tJHKMowQHAqpgyeViM8OsvXqZclc4%2BchnaqTJ8PqpJjfa5Mt4vmf3px9ULlLCfDTVoeT6k%2Fd5ttIqQNncZrcgm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a50e35b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/front.livesearch.min.js?ver=2.5.1
188.114.96.1200 OK 4.9 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/front.livesearch.min.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type HTML document, ASCII text, with very long lines (5204), with no line terminators
Hash 3e02695f486f7d47e810a74ec9d51f29
f8bc1c9598b8658e8d37067704c1c6eeb2aed995
756fceb6faf7b50a12ef05ffef98a309338d6aa25587aaac7d1345dcac65c585
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/front.livesearch.min.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Thu, 04 Mar 2021 16:57:34 GMT
vary: Accept-Encoding
etag: W/"6041117e-1322"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BJSb%2BMN1BdGXHu%2B83dVWSJCQ%2F%2BaaBJdN%2Fk41wnrzIqvnCZ6hAQ6MJybrfAz6YCSy0gipfjAp3obyLxEL%2FqPoDkDfrxiO%2F5RoXW7ESFrDhb%2FFJ6AbrGQzA91%2B0LwM0P2c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a4ee0cb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
142.250.74.35200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 03:27:10 GMT
expires: Sun, 26 May 2024 03:27:10 GMT
cache-control: public, max-age=31536000
age: 185121
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zzplay.buzz/assets/vendor/jwplayer-hlsjs/jwplayer.hlsjs.js
104.21.14.185200 OK 36 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/jwplayer-hlsjs/jwplayer.hlsjs.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type ASCII text, with very long lines (861)
Hash 8981e521f213e46b12d45e54f0c62b35
90f582607e20ddb46d75f23264eb2fd50a8038b0
abba5c2f3e013c97a2c1e638a8390fe7beb321d81a105fbeee587b5cded6b003
GET /assets/vendor/jwplayer-hlsjs/jwplayer.hlsjs.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Sun, 05 Nov 2017 21:24:34 GMT
vary: Accept-Encoding
etag: W/"59ff8192-8cea"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2160503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WT2MyHcEDgteiRUEwlXZ4g%2BcriYRgR%2BniWxaZOBOi4xwOZJQv0E6MRjA9FIzgPlqe9lt7jsA4NU%2F4FuLDUr%2BLqddRlc8cDaqZ%2FOieFyLrBt2GwPjz%2Bhb9gYhalruQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b3394fb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/08/The-Last-10-Years-The-Last-10-Years-2022-poster-90x135.jpg
188.114.96.1200 OK 4.5 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/08/The-Last-10-Years-The-Last-10-Years-2022-poster-90x135.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 90x135, components 3\012- data
Hash 2e0d7812c7b9509fb50de6f4b1c5d7c4
74e2f3f80e1b182506942d7b17255d4aa4c57940
9933a417080299773a32f532a6a5e9bbb53e1a13b4b647170da70b97a32456e4
GET /wp-content/uploads/2022/08/The-Last-10-Years-The-Last-10-Years-2022-poster-90x135.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92; _ga_E2HMSLG4KD=GS1.1.1685343151.1.0.1685343151.0.0.0; _ga=GA1.1.33334610.1685343152
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/jpeg
content-length: 4471
last-modified: Sun, 07 Aug 2022 08:43:55 GMT
etag: "62ef7b4b-1177"
expires: Wed, 28 Jun 2023 06:52:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jAxuZOfIpnrJ3kTBpmbW5DzL1Z0j%2BLd5sWtf6shPomA3O7dsALV%2FK65BKK44D1PqwAekhEU2c9f4rBsqAWR76UX72Vu0p5%2FVdR%2B1SdE6m8%2FMBe3%2FiIWC%2FTW32EsYvIP5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0af49dcb518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/front.ajax.min.js?ver=2.5.1
188.114.96.1200 OK 15 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/front.ajax.min.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (15442), with no line terminators
Hash 952eef4cf551892806338b5ce0d0b318
cf5b84741881666ba53f212cb5dc340ad1557a5d
492093d72d2f54bcc5dcf3dd26c5c357860ff2d1de11e1e22cac1d990a5dd700
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/front.ajax.min.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Thu, 04 Mar 2021 16:57:20 GMT
vary: Accept-Encoding
etag: W/"60411170-3c52"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IcXz1TsO1eBX9R6j2WWX0ho9Fc7RcvqtLp3xDmksZSPC7%2BZrAxEv%2Fh6VJy%2FBfzpK9nMUHwtqnhRxTdSxogZYbemMXISSO4x%2F8kz8Tuc4%2BSjry1xbUfASUEymEwO74sgc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a51e50b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/js/app.js
104.21.14.185200 OK 10 kB URL GET HTTP/3 zzplay.buzz/assets/js/app.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type ASCII text, with very long lines (10031), with CRLF line terminators
Hash 68510bc1f17e498c59ac5c90ab56d3ad
04e58ee1f10d853da3a9ce1f860409483713dee4
82cc12b2d6e41071870e223f602b4ccca3eb10b20d616aa521bf730d3e19707d
GET /assets/js/app.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Sun, 08 Jan 2023 21:49:28 GMT
vary: Accept-Encoding
etag: W/"63bb3a68-2731"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 306413
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KvBls0yt9iZ%2BSFnxJr%2FEcYX4jCubjDZzZmeAQ7MD%2FArpgnYTfKDOEqxGRLhHjgwBuK8pMM4KnF0aQETRYmEr%2FchDTQVVjSWeimZ%2FcaVeiziVP%2F0nglGiTntUZEjXqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b33952b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/css/front.style.min.css?ver=2.5.1
188.114.96.1200 OK 98 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/css/front.style.min.css?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (24759), with CRLF line terminators
Hash 2cd6abb0a9b5b8a032b6c770d4831102
70427277697d63c807dc42c1b5b32572a0f272eb
4515ca19e876ee8daba5a7d98e0f8071ed436dafce3293d61a3cff93c020462e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/css/front.style.min.css?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Tue, 07 Sep 2021 04:18:26 GMT
vary: Accept-Encoding
etag: W/"6136e812-180b1"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F3NXKjPtQPo4hoxz1ljDwuHvPnqmhT1blx6f%2FEhO7mcYZqmA0JlLtT8EoadxBpu0qMUIlfza21TAjr1PgtVUdrQbhs%2FsiridUTv86QxE1WfPhj72ZEze9wpKajy9xKMI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b922b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
172.67.221.70200 OK 587 B URL GET HTTP/2 p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
IP 172.67.221.70:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type HTML document, ASCII text, with very long lines (621), with no line terminators
Hash 465d2ab34af45ed844f81aeba61cbf1e
8ab592575009225e596217ea040056be6857a618
9c92a09b26b7f6e822fb2a47e83c265853e7629f062a8661dd4ef1df59a49feb
GET /play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-frame-options: allowall
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, User-Agent, If-Modified-Since, Cache-Control, Range, Accept-Ranges, Cache-Control, Accept, Origin, X-Requested-With
access-control-expose-headers: Content-Length, Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JQHlcp3N2DUZ4QEYPd4jJgc9Ro0OTmr9evbuO2xBHcY8t6xgNkqnKjS2zTVJCwVzRhFA9fiEGZuDI8Abb%2BT%2BTOE11Gh3K78GAugloLiVAIVVOAnwMyK4YSrHZlaVt78%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a10a6e1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/isrepeater.js?ver=2.5.1
188.114.96.1200 OK 10 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/isrepeater.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (10378), with CRLF line terminators
Hash 6ceeb6d8b500945a6aaea27f52f6f5e6
4647a4865cb5ba5dce1057b3765044ec9559eec6
477f24a8aa73997ef9d469763c99d51a9a0e94826db0525b45542d9d7219e214
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/lib/isrepeater.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sun, 17 Mar 2019 11:37:28 GMT
vary: Accept-Encoding
etag: W/"5c8e3178-288c"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kNYwVxG39IoVz7t7hwLOBS7bw9Z2v7XJplxhHPeS1B1pnHpAmmALVS7A9BX0h9VDeB1zhbZqfsfGZE2o6YV0tk%2F2X%2BRZZf3l%2F26d88knzBOWoldtDlEflBTXPMUmFPbI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a51e53b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/lazyload.js?ver=2.5.1
188.114.96.1200 OK 7.2 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/lazyload.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (7422), with no line terminators
Hash b2e88ae477b7d838568a2a1ce4dde5cf
8720928d822422d94a6e0f75a90b2fe71443a9f6
1dee16476fa35b4ef60ad902413600dd2f8df2ee1d43512407db4c14b4e4fe4f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/lib/lazyload.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Thu, 04 Mar 2021 15:42:18 GMT
vary: Accept-Encoding
etag: W/"6040ffda-1c46"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wIyTzktaxVMiEW3iYV4i80OnJrmy%2FO9pHDBGQCoL9BCJPQKmHdWnq443kMTwnHP7szDLyJJgeUWG9IA6ExooH0rIQdFO7%2F21d3Yi3IzaTRi9Ww%2BzDNSJsB6xhNhY2zoX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a53e74b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
188.114.96.1200 OK 13 kB URL GET HTTP/3 motphimle.vip/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (13326)
Hash 5cfa2b481de6e87c2190a0e3538515d8
0fccf3c8ab2c10b4dcc7970e64ce997ab1622f68
9810aee7e6d57d8cceaa96322b88e6df46710194689ae12b284149148cabc2f3
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Fri, 31 Mar 2023 03:07:58 GMT
vary: Accept-Encoding
etag: W/"64264e8e-3470"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DMSlnZER%2Bct%2FqxX6aj8hCWC7vzgrv%2FGbIv8%2Ft%2BlUksvC1eNoN%2BjU7zGgidWZcv3BN3Hu1dOnl6020wQd2yi3d8xsceZuy4RZ8GzBTAcuM1ylZ2VXFtAG0edwpy0LmuTH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a53e72b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/vendor/jwplayer/jwplayer.latest.js
104.21.14.185200 OK 119 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/jwplayer/jwplayer.latest.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
Size 119 kB (119278 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/vendor/jwplayer/jwplayer.latest.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Sun, 18 Sep 2022 17:42:10 GMT
vary: Accept-Encoding
etag: W/"63275872-1d1ee"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 511926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A7pk5RsHKRECOV7qRbw%2BjJSMwFjkxMtDhICk98Qc70Ooqy6GgZym7X%2FGBQi64599dc0PdXP6trEUCEOsBSljXemFbOuzVyqeC9JRdgMLa0FcRykhplHbUDzoCnDEYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b3394eb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/front.scripts.min.js?ver=2.5.1
188.114.96.1200 OK 4.8 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/front.scripts.min.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (5141), with no line terminators
Hash e3f807a3314a8b38f0c2584c56b9f719
f442e8b1ccf7fb04a6c494a7577e70b8bc35851a
9dece7717d08cc781285005befbd5bf28052ef4cca1e1f3577c33a4b92314a35
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/front.scripts.min.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Thu, 04 Mar 2021 16:57:38 GMT
vary: Accept-Encoding
etag: W/"60411182-12d1"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vdqExwA5gy5jU4Rh2YaYtc%2BT%2F4S0xV2utSBRcdwgmN6SDc1gBcmSR2VHR9VSoOdhr8lqBOnFMKLVzRQae1jpmTDXyuKM7y9TUq1mNw2pJZ0bvVEDjiK7G61aImOjYeDQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a4fe17b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/css/front.mobile.min.css?ver=2.5.1
188.114.96.1200 OK 8.5 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/css/front.mobile.min.css?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (8533), with no line terminators
Hash 8df7fd512e28fdb51a132a2dc2911bd9
6580dc32acb7cd39e428270f6bc05607ed32166d
9cf313177881856b8677bea7ba388fe0e4b6173cfdb2809eec32ff8038fdde77
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/css/front.mobile.min.css?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Fri, 19 Mar 2021 22:57:10 GMT
vary: Accept-Encoding
etag: W/"60552c46-2153"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5klRgSmNisEv1J5xApsZjsdfJhwdtYLEnyhc7jxyg6wh%2F24g%2BJEqo%2FolLjgo3K%2FOj4TLwcI7i%2BpOEi4jXLK72ejead377TUT%2BRu467AZbG6CXEADV37HUuGemsVa94F7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b925b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/vendor/hls.js/0.14.17/hls.js
104.21.14.185200 OK 713 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/hls.js/0.14.17/hls.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
Size 713 kB (713155 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/vendor/hls.js/0.14.17/hls.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Sun, 20 Feb 2022 00:03:58 GMT
vary: Accept-Encoding
etag: W/"6211856e-ae1c3"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 659029
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zLa9XOP%2BwpM7STAh9T1OM0gJMrSzH4WXhvbcS2VZPREHODVbgoXjBjI5m3iOauRXDDnMhn7koppga5RhLG%2BB5%2BRpyNhNhgdaTc%2B9yLCjAhvc6HLV%2Fl66ALwUZA3bSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b3394cb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/css/front.crollbar.min.css?ver=2.5.1
188.114.96.1200 OK 7.2 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/css/front.crollbar.min.css?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (7195), with no line terminators
Hash b30bab9c30e91117f1c192eb45cbd8ff
61ab6f78dfbe30ee6356a62204ad698ffc2a542f
04cef55eb0b4d3e7f889e467fa8306d516dac734f1e08c1dc7119c07f99576c5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/css/front.crollbar.min.css?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Mon, 08 Mar 2021 21:20:40 GMT
vary: Accept-Encoding
etag: W/"60469528-1c1a"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3bJv2JTaOAyCvzTCCGh1HcOYoRIaJlLz%2Buk8gUVk3e8LwPkJTJPDviJO5m7scHbsPLP4z60KYCIAJ4LFhpKWp6vWvIwKpenmK7Q7dioWabFulpysRUw2FUMGjYKq%2BMli"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b91db518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/js/lib/owlcarousel.js?ver=2.5.1
188.114.96.1200 OK 24 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/js/lib/owlcarousel.js?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (635), with CRLF line terminators
Hash 56e770f95a9cb2ce06d6b044f93c24fa
003bdb37bbd8cfd296bcffff38ce601b6b7df8dd
ecc9ea285df7f95f79c647d1cfaca566239d68fcb183aa274fda98f33fce813e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/js/lib/owlcarousel.js?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Sun, 17 Mar 2019 11:37:28 GMT
vary: Accept-Encoding
etag: W/"5c8e3178-5d82"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PmDI%2BYedjYLNJHDDIark0e4UE2eyaSDveWE9B9QKcD%2BqbjVoN7UjA0t%2BqBeApJHLBLCDfRWocPGOnze%2FCJh3loUThaKSQE4uHs1X7HRay7Kwu4z1OJCcbFT6aXgOGtR3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a52e5fb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/js/detect-adblocker.min.js
104.21.14.185200 OK 2.6 kB URL GET HTTP/3 zzplay.buzz/assets/js/detect-adblocker.min.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type ASCII text, with very long lines (2626), with no line terminators
Hash a1d5f898e1926ddaa05309ce7402b971
0c51e4e561392e80ce68ac23eaf08bec6e49f953
c05c50665ef2ef7e5d44e924303500e3d41b2424626a9c2e226e3e4486fefc24
GET /assets/js/detect-adblocker.min.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Sun, 18 Dec 2022 16:40:06 GMT
vary: Accept-Encoding
etag: W/"639f4266-a14"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2560911
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bo4BzCsMFMcm8Alexl%2FAoBdjWssUXu5LYqo9nW0EBjs2gerFa9Nmm9GezNgWm%2FJJUN5RRAxWiqa9RHs%2BXXUxGJnUgOt5zSh6nxnWCXEX4xNnErCAqpXsTqa55zVSJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b32947b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/vendor/crypto-js/aes.js
104.21.14.185200 OK 8.6 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/crypto-js/aes.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type ASCII text, with very long lines (9085), with no line terminators
Hash 9ba54d312cecafc51712a0f53c724170
88094a9951c12fb0e5b5f2a0c574252fe5435dbe
104280f10d6abdaeb100869c700d441d13cf9769b8a66a4125c89b68a285aae1
GET /assets/vendor/crypto-js/aes.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Wed, 12 Feb 2020 18:32:32 GMT
vary: Accept-Encoding
etag: W/"5e4444c0-21b8"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 511926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1pv%2B5E9ceIVi6Qy%2F6iod2LYF%2Byh9cdG4FMfanakoPEQbIL8DZz2Rq0j%2BTpAaw%2BYFTLIH9jAEtQWXSt%2FgQxkQSnA1tgoXLnPgkIsh%2FP5fBcShrtRGaAfSua%2FaLNQBTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b33951b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
188.114.96.1200 OK 11 kB URL GET HTTP/3 motphimle.vip/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (11256), with no line terminators
Hash 2b0dd7eecea03b4bdedb94ba622fdb03
703becba85161118dd6fc66af465428ef43f561c
b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Thu, 21 Jan 2021 23:05:45 GMT
vary: Accept-Encoding
etag: W/"600a08c9-2bf8"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lTBLMiZAwFXrFdd1w7wWXab9Y7SrwD9Jl9BUCToISPHjebtLqh%2F2jQUipSZT%2BmjdBHNqNy30WT2p%2B46%2BMeJINXMbtnvXGD53oGZySbAAMH9zX4TaDJtevXFI1mcw3V4x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0a90bb518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/css/colors.dark.min.css?ver=2.5.1
188.114.96.1200 OK 40 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/css/colors.dark.min.css?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (39933), with CRLF line terminators
Hash f4bb19e163e60b3f73265de6deabda18
d864a8591bcffdbee9fb61a6367be77d590d58ed
f611317538cde70a5eb3ce926abadfc902c23960cb86e32f3eab9e4b20563d9e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/css/colors.dark.min.css?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Thu, 18 Mar 2021 23:48:10 GMT
vary: Accept-Encoding
etag: W/"6053e6ba-9bff"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bsWHPGoxLrp6%2FFsvXXRYMKC6Q1HDyowvZqryj81aLbf3w4ldxu4zRvSjdix8iImJR2Boh%2FGsQTHchILagg18dpoaY8Clizj85u8IGG9L2upNs6g8awo62fSd4GTNJFeY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b923b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/vendor/jquery.min.js
104.21.14.185200 OK 90 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/jquery.min.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /assets/vendor/jquery.min.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Wed, 29 Dec 2021 06:43:14 GMT
vary: Accept-Encoding
etag: W/"61cc0382-15d9d"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 511926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3jiMdlOBIZI7%2BeC%2BV1OU%2BUjffW0iyF410QbUe6cpCZrTC4foQwR%2FRcrS6nYFGs4y4FBr8Cf0rbQ3wSx6Na%2BTh1tVD1%2BY7Ks3E2yjORsrel4JTe%2FqGkJzSLys599wjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b32946b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/css/front.owl.min.css?ver=2.5.1
188.114.96.1200 OK 2.3 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/css/front.owl.min.css?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (2302), with no line terminators
Hash d8d88f8542a7a3b7a2a754c1a68df123
4e71aaf06a7805f3f83ee217b32c2e9f1bfe0c68
c7ee68d6f9ec274bedfd954df61cca2585867b32e7d8ac96955b78e27e2d1f31
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/css/front.owl.min.css?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Mon, 08 Mar 2021 21:21:32 GMT
vary: Accept-Encoding
etag: W/"6046955c-8fb"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iAgwSiS%2BEbaAGuEO6nmYg6cH5fe0bdZ2ufGlnvFc0bIBZQGv2vIN5Ocix8Tnpd4J6pKai9kYLC07AnQF631QPLUqrnQfxVD5Y0C69BWOqI7pbMVFDNcJDTy4kN305t%2F4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b91ab518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/js/player.js
104.21.14.185200 OK 106 kB URL GET HTTP/3 zzplay.buzz/assets/js/player.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type HTML document, ASCII text, with very long lines (2002)
Size 106 kB (105863 bytes)
Hash e35183a347b9067ee850b8cee82af782
465dcbe0709ae671d1dd965031c2ef5449604289
3809c4c75cf67969cfee22015b7be71238244f70e19b4e0d190e533a3e57748e
GET /assets/js/player.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Wed, 08 Feb 2023 02:38:08 GMT
vary: Accept-Encoding
etag: W/"63e30b10-19d87"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 299920
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fqsetrrj1XoqKF4cxcaocTnJPx8FwSKd0AAhWxZZh8fjsLCJ61o8cDAWHBEnxP2HHEkuMF5DuvLxsYxdyIaZ3JSzHhtDX%2BDJskvncO6rcHQpDmZ6PQ%2FnJfBGrd5A0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b33953b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 27 May 2023 07:44:41 GMT
expires: Sun, 26 May 2024 07:44:41 GMT
cache-control: public, max-age=31536000
age: 169670
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.35:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://motphimle.vip
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 21:39:40 GMT
expires: Wed, 22 May 2024 21:39:40 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 465171
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
188.114.96.1200 OK 154 kB URL User Request GET HTTP/2 motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
Size 154 kB (154481 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 29 May 2023 06:52:29 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92; expires=Tue, 28-May-2024 06:52:29 GMT; Max-Age=31536000; path=/
link: <https://motphimle.vip/wp-json/>; rel="https://api.w.org/", <https://motphimle.vip/?p=3245>; rel=shortlink
x-frame-options: allowall
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kz3hTK%2BII6TsNNdip4BxxpSw92n2LRVZwVn%2FkR0yQh4oxBSp5oh1ws863Hja50MgqRKe%2FamcPGQchRJr9SiHOazeXIW4AjX0ipR0TX%2BtNIGGeelLzIrNR0ZNiPUW0Bsn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd08d4ecab4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
motphimle.vip/wp-content/uploads/2021/08/Dao-Duc-Chet-Nguoi-Deadly-Virtues-2014-poster-90x135.jpg
188.114.96.1200 OK 3.4 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2021/08/Dao-Duc-Chet-Nguoi-Deadly-Virtues-2014-poster-90x135.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 90x135, components 3\012- data
Hash 32f2ef0d96bea634b4aa06e1eaa840b0
784d74603b900ccdf2d48decb2c2913c4eac8405
133aafe2980eb6737f62146bdd19dcf22ea5fbab6ea2493ee6a5bf8a21d015dd
GET /wp-content/uploads/2021/08/Dao-Duc-Chet-Nguoi-Deadly-Virtues-2014-poster-90x135.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92; _ga_E2HMSLG4KD=GS1.1.1685343151.1.0.1685343151.0.0.0; _ga=GA1.1.33334610.1685343152
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/jpeg
content-length: 3434
last-modified: Tue, 31 Aug 2021 15:06:59 GMT
etag: "612e4593-d6a"
expires: Wed, 28 Jun 2023 06:52:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jc4HSkYjjMcHpVLjIGL%2BE5gjUgjJjRHMB2wp71j0fAty6yW0%2FAr9qmNc3%2FnAyT%2BlnLVa96hhKDrnqD7VEkJ4K8y7%2B5se0w5Vl%2FQBohW8fOZr2cXh9aqnsTgl1PVEoBBo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0af49dab518-OSL
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/03/Nhim-Sonic-2-Sonic-2-2022-poster-90x135.jpg
188.114.96.1200 OK 6.5 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/03/Nhim-Sonic-2-Sonic-2-2022-poster-90x135.jpg
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 90x135, components 3\012- data
Hash dcac508066e49fb49ef009626dc30e27
70d4f715a7194875051329f046fb0d534e96a2ee
02e2dce1792620786c5daee0547e77a129ef68089691061ba80be13c70a9b846
GET /wp-content/uploads/2022/03/Nhim-Sonic-2-Sonic-2-2022-poster-90x135.jpg HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92; _ga_E2HMSLG4KD=GS1.1.1685343151.1.0.1685343151.0.0.0; _ga=GA1.1.33334610.1685343152
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/jpeg
content-length: 6544
last-modified: Wed, 16 Mar 2022 09:25:07 GMT
etag: "6231acf3-1990"
expires: Wed, 28 Jun 2023 06:52:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TkT7ZqFB3JiP1ZGRTUNs9AI%2FRL23wA0CNmdXq8%2F3A1wBvXIIeZlqpTI83smxr%2Fpf0XKBYXktnNYDSy7f0QQkz7fVBMw1wiZKnTNMCMIAlOHioitnfubJYPUIQckyQuce"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0af49dbb518-OSL
alt-svc: h3=":443"; ma=86400
zzplay.buzz/assets/vendor/crypto-js/crypto-js.js
104.21.14.185200 OK 192 kB URL GET HTTP/3 zzplay.buzz/assets/vendor/crypto-js/crypto-js.js
IP 104.21.14.185:443
Requested by https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
Size 192 kB (191936 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/vendor/crypto-js/crypto-js.js HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: application/javascript
last-modified: Wed, 12 Feb 2020 18:32:32 GMT
vary: Accept-Encoding
etag: W/"5e4444c0-2edc0"
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-expose-headers: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 511926
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XEf7I06EIw2nqdKfTxtPkI4Pqd24Zfjq5eQrVyF%2F%2Bf3dLXPRXhsOrA%2B4DwAb2h3CFBJzGKXePllc0mEs6KXTfmiBDXjxlsvcxn9kQOk9FX0tONHsetLIYNQV6faVQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b33950b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
p.thoctv.com/play/css/nobi2.css
172.67.221.70200 OK 62 kB URL GET HTTP/3 p.thoctv.com/play/css/nobi2.css
IP 172.67.221.70:443
Requested by https://p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
Certificate IssuerGoogle Trust Services LLC
Subjectthoctv.com
FingerprintEE:4A:53:18:CF:F5:4E:43:40:AA:6A:BB:15:A8:46:A8:BD:A7:7E:DC
ValidityTue, 16 May 2023 01:04:17 GMT - Mon, 14 Aug 2023 01:04:16 GMT
File type ASCII text, with very long lines (61767), with no line terminators
Hash 5f64d1457d4948826d9116af90540824
4a5421ecb54f0d70f7fe7b8a21642ab1976fb7e5
5eba65a740d1cefbc674bd4f0f46a2b5ebe9cf9ce4c816954c1fd8cfc63f80d3
GET /play/css/nobi2.css HTTP/1.1
Host: p.thoctv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
cf-bgj: minify
cf-polished: origSize=66883
etag: W/"62df544b-10543"
expires: Sun, 18 Jun 2023 14:48:01 GMT
last-modified: Tue, 26 Jul 2022 02:41:15 GMT
pragma: public
vary: Accept-Encoding
cf-cache-status: HIT
age: 835469
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R9XMngjv3NFM%2FE3OaBdtwZZ%2FwLSGx7pOjpaLijGh1G7gkoy1kUOfDps9f7zJ1e3dwL5Z0mw7qfdu5D68ptQ%2BGjpxiQ%2FH%2FwwptJdEjfSEZwV4YbjRQSU6Iz7lwAPwJgI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a2de43b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/fontawesome/css/all.min.css?ver=5.15.1
188.114.96.1200 OK 174 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/fontawesome/css/all.min.css?ver=5.15.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (65393)
Size 174 kB (174333 bytes)
Hash 95fe9653f2c45892b7e58090566f510f
be3795caeaada195d12c96bb689a7f0b6f8d63b1
257418de09101ff7791d410f420f9320141ce0436c264b076d46539b0ea0f830
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/motphimle/assets/fontawesome/css/all.min.css?ver=5.15.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Sun, 04 Oct 2020 23:20:54 GMT
vary: Accept-Encoding
etag: W/"5f7a58d6-2a8fd"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xKzZjgCkwuD146%2BiqrubOTgwgP6kGCnkfsXG9BAwOTvS2rJGVxAEAOP3%2FjacsWWJdZUdcR5W41krhg1S6qXs%2F2xjNMZNjS3yFDN%2BGMMsu10bnDcvU3nHnflITXuVHVgv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b917b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/uploads/2022/02/Phu-Thuy-Toi-Thuong-2-Doctor-Strange-2-2022-poster-90x135.png
188.114.96.1200 OK 29 kB URL GET HTTP/3 motphimle.vip/wp-content/uploads/2022/02/Phu-Thuy-Toi-Thuong-2-Doctor-Strange-2-2022-poster-90x135.png
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type PNG image data, 90 x 135, 8-bit/color RGBA, non-interlaced\012- data
Hash 26564bd7b69b660bb45abda0e7e8b4ff
56616974bcff1f8184f484d1782cca09eea5a0e5
355fd75fbfcf74307c37bb6452692be46ee3e3353a514b8a9bcf7ee1e6495117
GET /wp-content/uploads/2022/02/Phu-Thuy-Toi-Thuong-2-Doctor-Strange-2-2022-poster-90x135.png HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:32 GMT
content-type: image/png
content-length: 29162
last-modified: Tue, 15 Feb 2022 14:22:43 GMT
etag: "620bb733-71ea"
expires: Wed, 28 Jun 2023 06:52:32 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5tsPxhDCT1yaWlqpCH1CXN3u7jwVPaxKY4ar3lM5St0LvZP12CU5lpWlwh3LHpgXHPss%2F0zpno6NquIBHdUciOho2G1ZEhmQFJhSmOLaBOe%2B%2Fo%2FOrGNfVp2ntsSY%2FNWW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7cecd0acaf0db518-OSL
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C500%2C700&ver=2.5.1
142.250.74.106200 OK 8.5 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C500%2C700&ver=2.5.1
IP 142.250.74.106:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type ASCII text, with very long lines (8716), with no line terminators
Hash 1303310bf811cbabe52e473a56247b05
76a5d89fcefb4e769642a6636f439f3f03833429
ccc9d8c0b923b1470e8ddb0309ed98c9419fd7abb32ead3c0dcebbc30ea84778
GET /css?family=Roboto%3A300%2C400%2C500%2C700&ver=2.5.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 29 May 2023 06:52:30 GMT
date: Mon, 29 May 2023 06:52:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
motphimle.vip/wp-content/plugins/wp-tab-widget-pro/js/wp-tab-widget.js?ver=6.2.2
188.114.96.1200 OK 4.7 kB URL GET HTTP/3 motphimle.vip/wp-content/plugins/wp-tab-widget-pro/js/wp-tab-widget.js?ver=6.2.2
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (4890), with no line terminators
Hash e510d1c98bec81630d89673c501ac2c4
c07f40a838f2a7ac6b6c4f4cb43a0e3fc5a888a9
1eea4c63e62aeb6c32b731a08583801e170525d81f38625cde97a28af983dc06
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-tab-widget-pro/js/wp-tab-widget.js?ver=6.2.2 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:31 GMT
content-type: application/javascript
last-modified: Mon, 07 Oct 2019 18:21:16 GMT
vary: Accept-Encoding
etag: W/"5d9b821c-123a"
expires: Wed, 28 Jun 2023 06:52:31 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2BNLu7i3jcAiVmRGG0Zyof2Xw7e5MCRePv3mxAADOONZecpf%2F7UBipzrSPB1vJ3Xvkf57isRogdbkhXuLdevRiNFHTCwCCIdotZefdB1yhXWKYP24EQe7gBRs3h%2BuuEU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a4ddf9b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
104.21.14.185200 OK 7.2 kB URL GET HTTP/3 zzplay.buzz/e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D
IP 104.21.14.185:443
Requested by https://p.thoctv.com/play/mKeloaxqY1-co6KvlWGYoKiXoJVmlKimX5manZ5fmF-zl6KllW1Tma2kpKNyYGitZKmkpauVlZ1mqbKzX2WVk5tgZGNvZG1wlZVolJtfaGBuamhyZZeSZmqTZ5WcYm1rY2NklHKUaWhtk2mbkWdmlptjbZKZamucYJhnlGtlbWBraJ1sZmSSlp6WaWSdZnFpaWNiU2WkraCda1uvmZeWoGidpGRarmivmZio
Certificate IssuerGoogle Trust Services LLC
Subjectzzplay.buzz
FingerprintAB:19:0E:3A:59:66:DA:8B:34:CE:BC:51:AC:5A:C7:2F:A4:EC:DA:55
ValiditySat, 29 Apr 2023 12:45:17 GMT - Fri, 28 Jul 2023 12:45:16 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8151), with no line terminators
Hash eeaab02992f14a433ff38c00d66cbb5e
923de09f34a9d4e0d1515ad68749be25645e7833
78a911c7e97f80ecd399dd8b353513f8c3604d5743f8823cd4843edcce0ffc77
GET /e/?bjc2NXZyYjBTNEZwM2h2S1d0aTRDa1M3aDRudWQ1bjNXOHJJSDFGSzE0L1ZBaTV3enJVakJmVWp5dHpOdTZ2ODo6PzdJTDs8uaoTF2X2NPaPaA%3D%3D HTTP/1.1
Host: zzplay.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://p.thoctv.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:33 GMT
content-type: text/html; charset=UTF-8
referrer-policy: same-origin, no-referrer, strict-origin-when-cross-origin
cache-control: no-cache, max-age=0
origin-agent-cluster: ?0
access-control-allow-credentials: false
access-control-allow-origin: *
access-control-allow-headers: *
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-methods: GET, POST, HEAD, OPTIONS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PXL%2B4XEvakErremnYJiasoMr7MUB2HoKRLBwUzldXC1hMC6BHVDufKhCNHsnZB5H8fxm1IqbwGNkxrRtuQa%2FTHRNei0BCuCDlOdX%2FBKaZlWsEXSaWpJ4TBKHs1EJmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0b29875b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
motphimle.vip/wp-content/themes/motphimle/assets/css/front.gallery.min.css?ver=2.5.1
188.114.96.1200 OK 4.3 kB URL GET HTTP/3 motphimle.vip/wp-content/themes/motphimle/assets/css/front.gallery.min.css?ver=2.5.1
IP 188.114.96.1:443
Requested by https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Certificate IssuerGoogle Trust Services LLC
Subjectmotphimle.vip
Fingerprint5E:99:9E:ED:7A:A1:DF:D3:64:91:E4:0F:83:0C:E0:BE:05:DB:EF:A6
ValidityWed, 24 May 2023 07:28:19 GMT - Tue, 22 Aug 2023 07:28:18 GMT
File type ASCII text, with very long lines (4259), with no line terminators
Hash a4febf8af7d106150b52a7abd8a79f1d
61d5c4a1924aaf04fcabf1dac0f0846cc3decfe9
ad4f124e0e20f06e87733f08920b8a1d5b43477755e181f1ff9426a512ee0c03
GET /wp-content/themes/motphimle/assets/css/front.gallery.min.css?ver=2.5.1 HTTP/1.1
Host: motphimle.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://motphimle.vip/xemphim/co-hau-gai-ban-viet-nam-i2/c3yZlaE.html
Cookie: starstruck_91e52cdbbcecf5f48af013ad54c1cb2a=902eafcff0882add53e2c1b3888e5f92
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 29 May 2023 06:52:30 GMT
content-type: text/css
last-modified: Mon, 08 Mar 2021 21:20:52 GMT
vary: Accept-Encoding
etag: W/"60469534-10a0"
expires: Wed, 28 Jun 2023 06:52:30 GMT
cache-control: public, max-age=2592000, must-revalidate, proxy-revalidate
pragma: public
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lss%2FcPSghXyVxt5apTV6GKsQm0o3%2FtV%2BJe8X2vLZNaTc9PCYjGEk0IOlLeaSxtttLyHR8bCOYAP5fiPMNzNZb1kC0ArCO1GuTSBKKyvz0RMqJBJC%2B%2B19rg3k9VWLNFzU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7cecd0a0b927b518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400