| mfgnj.com/ |  172.67.165.174 | 301 Moved Permanently | 0 B |
IP172.67.165.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: mfgnj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 05 Nov 2022 07:26:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 05 Nov 2022 08:26:42 GMT
Location: https://mfgnj.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UrmcH2FGRuCNKdg5w7an6HGz%2Fw%2BLPyxztWPcqIswhPrYTNK5aeM8zMiA08uUBPefuhr6dvf%2FgF7Gh%2Bqbs2SGSfA0hCZjgdKkFlq0XGdgW%2BS8LD03PC1Ee3xHMUE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7653dcde4cabb527-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb7be8442ec1e518ccc80739495f6d047 7a9d24b9d4046262c7753c49afaf9c19f4840626 b93410a9d62da3f219796d753b61a0f730cc272c13596724aa9d20efba298b44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B93410A9D62DA3F219796D753B61A0F730CC272C13596724AA9D20EFBA298B44"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13436
Expires: Sat, 05 Nov 2022 11:10:39 GMT
Date: Sat, 05 Nov 2022 07:26:43 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashcd02b32dbc8416dcb10b468af2166c33 503a9c4cabdb19dfde769f5e2d3ef919c818c364 46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2555
Cache-Control: max-age=96417
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:43 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 10:13:40 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashcd02b32dbc8416dcb10b468af2166c33 503a9c4cabdb19dfde769f5e2d3ef919c818c364 46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2971
Cache-Control: max-age=96833
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:43 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 10:20:36 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash078950c3ba9ad01927f3da494b1d1de4 443c8a8247e4e3e04c14d21e0227fc4e8f396142 dd5dd09fec51669adf36b3014bbf65d7bff608f72018d037f9ed9b414675037c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DD5DD09FEC51669ADF36B3014BBF65D7BFF608F72018D037F9ED9B414675037C"
Last-Modified: Fri, 04 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12904
Expires: Sat, 05 Nov 2022 11:01:47 GMT
Date: Sat, 05 Nov 2022 07:26:43 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: LEyZA+W2eTUYlrgEjopEx/f+3egWOjN40oxuWv8WLDBUEYVY6g8uL0Iok4+Nu0WNLLBXT9CwHdg=
x-amz-request-id: HQAQQFB4JHNV5TPC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 05 Nov 2022 07:09:57 GMT
age: 1006
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 05 Nov 2022 07:26:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3132e40842dabf274b283e9dbba968bd 64c96c28ded751cb1d00a996eae9d969fd42f065 fa048ad6e8357062703d21133e263aef6ec38144e69feb6e2aa8aa91d670460a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "FA048AD6E8357062703D21133E263AEF6EC38144E69FEB6E2AA8AA91D670460A"
Last-Modified: Sat, 05 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 05 Nov 2022 13:26:43 GMT
Date: Sat, 05 Nov 2022 07:26:43 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash42a0adacced30df52cf7cad3e200036d f7b4114defc61f806dbb74fd228bca155d52362a e4928481739a2a75dce86c03b355c6dff507426e8d851cba5ca8537b1be87c20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5629
Cache-Control: max-age=94433
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:43 GMT
Etag: "6364c817-1d7"
Expires: Sun, 06 Nov 2022 09:40:37 GMT
Last-Modified: Fri, 04 Nov 2022 08:06:47 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3132e40842dabf274b283e9dbba968bd 64c96c28ded751cb1d00a996eae9d969fd42f065 fa048ad6e8357062703d21133e263aef6ec38144e69feb6e2aa8aa91d670460a
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "FA048AD6E8357062703D21133E263AEF6EC38144E69FEB6E2AA8AA91D670460A"
Last-Modified: Sat, 05 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 05 Nov 2022 13:26:43 GMT
Date: Sat, 05 Nov 2022 07:26:43 GMT
Connection: keep-alive
|
|
| www.mfgnj.com/ |  104.21.11.85 | 301 Moved Permanently | 0 B |
IP104.21.11.85:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: www.mfgnj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 05 Nov 2022 07:26:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 05 Nov 2022 08:26:43 GMT
Location: https://www.mfgnj.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=16goOdPlOtw40Cdh15hZEzujU%2FJJsk46iCtl%2B7UPuOB56btyalB1mxNMq2yvgnyNO3C%2FZQd%2F9BBikPE4gAdyjLqxMoLt0BdXf8NBLqrG6aFqXizEOlQ3vme93XORoaUu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7653dce4cabf0b3d-OSL
alt-svc: h2=":443"; ma=60
|
|
| push.services.mozilla.com/ | 54.149.219.22 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.149.219.22:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FColzy9Q5M1ZME4mIkc8yw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: +DKb//TXC7BVv7iSQZwabELj+tQ=
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash312b89db5e3ce10cc6c4a68ca90284f3 d9e943f5cdac14c2e9eec1edb08a241a02ff92af 50a632c48a7c876de8f57e9007b61f0d1bd1455d6860aeabdef2c02d91b8c2a1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "50A632C48A7C876DE8F57E9007B61F0D1BD1455D6860AEABDEF2C02D91B8C2A1"
Last-Modified: Fri, 04 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15415
Expires: Sat, 05 Nov 2022 11:43:39 GMT
Date: Sat, 05 Nov 2022 07:26:44 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash312b89db5e3ce10cc6c4a68ca90284f3 d9e943f5cdac14c2e9eec1edb08a241a02ff92af 50a632c48a7c876de8f57e9007b61f0d1bd1455d6860aeabdef2c02d91b8c2a1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "50A632C48A7C876DE8F57E9007B61F0D1BD1455D6860AEABDEF2C02D91B8C2A1"
Last-Modified: Fri, 04 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7071
Expires: Sat, 05 Nov 2022 09:24:35 GMT
Date: Sat, 05 Nov 2022 07:26:44 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash07319298ec3a8dd88e1314eb8150401e 2e3d3b5365fc639e4a3f1e2239f8e229aff011b3 0081e354727d4d9dc3d6f5e3e7d88d4b52b43ecd0d590fe1371badb768723486
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "0081E354727D4D9DC3D6F5E3E7D88D4B52B43ECD0D590FE1371BADB768723486"
Last-Modified: Fri, 04 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21215
Expires: Sat, 05 Nov 2022 13:20:19 GMT
Date: Sat, 05 Nov 2022 07:26:44 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash312b89db5e3ce10cc6c4a68ca90284f3 d9e943f5cdac14c2e9eec1edb08a241a02ff92af 50a632c48a7c876de8f57e9007b61f0d1bd1455d6860aeabdef2c02d91b8c2a1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "50A632C48A7C876DE8F57E9007B61F0D1BD1455D6860AEABDEF2C02D91B8C2A1"
Last-Modified: Fri, 04 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12514
Expires: Sat, 05 Nov 2022 10:55:18 GMT
Date: Sat, 05 Nov 2022 07:26:44 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash312b89db5e3ce10cc6c4a68ca90284f3 d9e943f5cdac14c2e9eec1edb08a241a02ff92af 50a632c48a7c876de8f57e9007b61f0d1bd1455d6860aeabdef2c02d91b8c2a1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "50A632C48A7C876DE8F57E9007B61F0D1BD1455D6860AEABDEF2C02D91B8C2A1"
Last-Modified: Fri, 04 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15349
Expires: Sat, 05 Nov 2022 11:42:33 GMT
Date: Sat, 05 Nov 2022 07:26:44 GMT
Connection: keep-alive
|
|
| static.bongda24h.vn/medias/thumnail/2018/12/14/bat-ngo-voi-can-nang-cua-cac-tuyen-thu-viet-nam-tham-du-asian-cup-2019.jpg | 104.18.3.22 | 200 OK | 4.9 kB |
URL HTTP/2static.bongda24h.vn/medias/thumnail/2018/12/14/bat-ngo-voi-can-nang-cua-cac-tuyen-thu-viet-nam-tham-du-asian-cup-2019.jpg IP104.18.3.22:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x100, components 3\012- data Hash9c01a2e4a6ae3c642997cda2c295bef4 d4711de8a35e1429c42f10839e22316386ecf3f0 d37bf85d41b3b249dcfd0e70d8d4a6d2a43e5f6a2432489b7c56e13c16a30bc8
GET /medias/thumnail/2018/12/14/bat-ngo-voi-can-nang-cua-cac-tuyen-thu-viet-nam-tham-du-asian-cup-2019.jpg HTTP/1.1
Host: static.bongda24h.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfgnj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:45 GMT
content-type: image/jpeg
content-length: 4854
cache-control: public, max-age=2678400
last-modified: Fri, 31 May 2019 05:44:27 GMT
etag: "80afb2e87317d51:0"
x-powered-by: ASP.NET
access-control-allow-origin: *
cf-cache-status: MISS
expires: Tue, 06 Dec 2022 07:26:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7653dceabea5b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.bongda24h.vn/medias/standard/2018/11/8/152142-3.jpg | 104.18.3.22 | 200 OK | 53 kB |
URL HTTP/2static.bongda24h.vn/medias/standard/2018/11/8/152142-3.jpg IP104.18.3.22:0
Hashb43665f9479be37dac4cebf97cba6bd0 20e20403152ef1c6a2d7d093b752397368afb0f1 a6b5c8db2885c6d6e22dc59a7112d31a50b75d7ee657c3b421017d1d98c567af
GET /medias/standard/2018/11/8/152142-3.jpg HTTP/1.1
Host: static.bongda24h.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfgnj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:45 GMT
content-type: image/jpeg
content-length: 36522
access-control-allow-origin: *
cache-control: public, max-age=2678400
cf-bgj: h2pri
etag: "801911394217d51:0"
last-modified: Thu, 30 May 2019 23:48:47 GMT
x-powered-by: ASP.NET
cf-cache-status: HIT
expires: Tue, 06 Dec 2022 07:26:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7653dceb2f28b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8ee5640e4bbe5e2c0dd4aa0698a3ce62 a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef 938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3436
Expires: Sat, 05 Nov 2022 08:24:01 GMT
Date: Sat, 05 Nov 2022 07:26:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8ee5640e4bbe5e2c0dd4aa0698a3ce62 a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef 938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3436
Expires: Sat, 05 Nov 2022 08:24:01 GMT
Date: Sat, 05 Nov 2022 07:26:45 GMT
Connection: keep-alive
|
|
| static.bongda24h.vn/medias/thumnail/2018/10/4/qarabag-vs-arsenal-uefa-europa-league-4102018.png | 104.18.3.22 | 200 OK | 38 kB |
URL HTTP/2static.bongda24h.vn/medias/thumnail/2018/10/4/qarabag-vs-arsenal-uefa-europa-league-4102018.png IP104.18.3.22:0
File typePNG image data, 150 x 100, 8-bit/color RGBA, non-interlaced\012- data Hash080a2ce920edfaeb1dfae6ff3e873e35 fd8c75227ae9448714eb452c2d2b715d038ce940 4c37c720a7d72f8f6622ca562d849220f758cf99856573e4cd32978c27bd99d2
GET /medias/thumnail/2018/10/4/qarabag-vs-arsenal-uefa-europa-league-4102018.png HTTP/1.1
Host: static.bongda24h.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfgnj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:45 GMT
content-type: image/png
content-length: 37731
cache-control: public, max-age=2678400
last-modified: Fri, 31 May 2019 05:38:44 GMT
etag: "0a411c7317d51:0"
x-powered-by: ASP.NET
access-control-allow-origin: *
cf-cache-status: MISS
expires: Tue, 06 Dec 2022 07:26:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7653dceaceb8b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8ee5640e4bbe5e2c0dd4aa0698a3ce62 a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef 938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3436
Expires: Sat, 05 Nov 2022 08:24:01 GMT
Date: Sat, 05 Nov 2022 07:26:45 GMT
Connection: keep-alive
|
|
| static.bongda24h.vn/medias/standard/2019/1/17/anh-hlv-yemen-buc-doc-vi-man-an-mung-cua-dt-viet-nam.jpg | 104.18.3.22 | 200 OK | 29 kB |
URL HTTP/2static.bongda24h.vn/medias/standard/2019/1/17/anh-hlv-yemen-buc-doc-vi-man-an-mung-cua-dt-viet-nam.jpg IP104.18.3.22:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 480x322, components 3\012- data Hashf22cb8f5e48eb882f3f5b70d773b5ecc 41c6f35d51af8117ce68d91d35ad89b43dc6d1c6 16a3bc45806461400b6e003520b43a6c38a813c962f4c96883681faadf558135
GET /medias/standard/2019/1/17/anh-hlv-yemen-buc-doc-vi-man-an-mung-cua-dt-viet-nam.jpg HTTP/1.1
Host: static.bongda24h.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfgnj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:45 GMT
content-type: image/jpeg
content-length: 28716
cache-control: public, max-age=2678400
last-modified: Fri, 31 May 2019 00:30:27 GMT
etag: "80d32eb4817d51:0"
x-powered-by: ASP.NET
access-control-allow-origin: *
cf-cache-status: MISS
expires: Tue, 06 Dec 2022 07:26:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7653dceaceb3b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8ee5640e4bbe5e2c0dd4aa0698a3ce62 a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef 938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3436
Expires: Sat, 05 Nov 2022 08:24:01 GMT
Date: Sat, 05 Nov 2022 07:26:45 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4e2853cc6ec6223160471401e6871f4b f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: z6Lnru_eeTvRGdsz-q37-HGFgFfIT6fLSFcJBvT3oPjAPilszTWkDw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 20:21:33 GMT
age: 39912
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 1.0 kB |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashe8042ba9b156bbfca0624b2bc70e65fa de985e9761f9b2b447294a5925ab2096b0342ce5 2c2f412dc54ff78d6bef5cbcc49e32628d551d277f06f5aa14f35f065123b1a5
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "50A632C48A7C876DE8F57E9007B61F0D1BD1455D6860AEABDEF2C02D91B8C2A1"
Last-Modified: Fri, 04 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15348
Expires: Sat, 05 Nov 2022 11:42:33 GMT
Date: Sat, 05 Nov 2022 07:26:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash8ee5640e4bbe5e2c0dd4aa0698a3ce62 a175340e4e1a0a2e3d33fa5b113e3990e5a6dfef 938899f21fdf4e477f02c6f7f32cbed05bb1df35e3b221c3a37e8c214b2dc946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "938899F21FDF4E477F02C6F7F32CBED05BB1DF35E3B221C3A37E8C214B2DC946"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3436
Expires: Sat, 05 Nov 2022 08:24:01 GMT
Date: Sat, 05 Nov 2022 07:26:45 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg | 34.120.237.76 | 200 OK | 9.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc7c9c908e891e7277f21a914fea9aa25 596c3c084ae3d850a5dc28e549b4e22f2b8cc71f 709c217b3ac09712d2af4366316c8977b1a4e2a73f887b3e30f10df1ed50bacd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255683f8-a0b6-411a-a41e-4d042746780e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9150
x-amzn-requestid: 7c179507-20a7-4fa3-993b-f79b3e7949ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apwiGHD_IAMFQZw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2e0d-337623ce79dc53c864632c72;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:06:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OM3hc6Jfl5pDWPikIlcQOexIScQavqJh9h-N-EvIGNpicWJwHMPKIA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 19:29:40 GMT
age: 43025
etag: "596c3c084ae3d850a5dc28e549b4e22f2b8cc71f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52bfe915-baee-403a-9240-12d17207ec94.jpeg | 34.120.237.76 | 200 OK | 4.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52bfe915-baee-403a-9240-12d17207ec94.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd12961439cd33c86c7b8041ed9d42321 ddb7b18fae0082ce22d8ffa537c7367e1da404a5 d2cc0f7735f04a07c681eb2eae7c52e9f4c75b6d475b3ad4de587899089850a7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52bfe915-baee-403a-9240-12d17207ec94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4662
x-amzn-requestid: 32199e11-d856-4403-ad55-65076eac83ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: amd5UFJQIAMFf-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358dd08-1761126e37ed504e46896b4d;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 07:08:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Nu2uC3we8aHv4ERvh7QcmiErm4Ax-NNmdWFovpdU9Or9DguzrIcn5g==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 22:00:38 GMT
age: 33967
etag: "ddb7b18fae0082ce22d8ffa537c7367e1da404a5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| static.bongda24h.vn/medias/standard/2017/12/11/Champions-League-tro-lai-Nha-vo-dich-vinh-cuu-cua-danh-gia-va-hap-dan-hinh-anh-2.jpg | 104.18.3.22 | 200 OK | 23 kB |
URL HTTP/2static.bongda24h.vn/medias/standard/2017/12/11/Champions-League-tro-lai-Nha-vo-dich-vinh-cuu-cua-danh-gia-va-hap-dan-hinh-anh-2.jpg IP104.18.3.22:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 480x270, components 3\012- data Hash47a93aced2d0c65de1a4e97a6de0f37e f2711e46c706e5b4224e6d3c3d79d82dfec94043 a32e3ee1e028a01cf7ea578e6b0bd025d9220d92039f3e3ef4958438eba700d0
GET /medias/standard/2017/12/11/Champions-League-tro-lai-Nha-vo-dich-vinh-cuu-cua-danh-gia-va-hap-dan-hinh-anh-2.jpg HTTP/1.1
Host: static.bongda24h.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfgnj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:45 GMT
content-type: image/jpeg
content-length: 23449
access-control-allow-origin: *
cache-control: public, max-age=2678400
cf-bgj: h2pri
etag: "808cca53a17d51:0"
last-modified: Thu, 30 May 2019 22:50:05 GMT
x-powered-by: ASP.NET
cf-cache-status: HIT
expires: Tue, 06 Dec 2022 07:26:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7653dceb3f38b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7a3b1551512640bb8f5e7deb80c32272 75805b9f03aef14cfad025259936ae5f217d25ca 5baa90853202e78cf9b59e9ab597e16ccfbf143d7e124583e64dc1ad1ee2c2df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28a5f5ce-bd81-4e56-bd1b-460e13379581.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7783
x-amzn-requestid: c8f73eac-612d-48e3-a655-41525e97331c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apxM8H7aoAMFT3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2f1f-5470c77a30a11b9423f56837;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:11:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FLFsF-1gAeN0HiZnS03oNMNajnwk12P-5Aro-QOcQNFtkjknh9g5FA==
via: 1.1 0c04e836dfe22246a870a0f54a2d4746.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 19:19:17 GMT
age: 43648
etag: "75805b9f03aef14cfad025259936ae5f217d25ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ba524bd-ef85-4f86-8f19-39ca866c6ef3.jpeg | 34.120.237.76 | 200 OK | 3.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ba524bd-ef85-4f86-8f19-39ca866c6ef3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe6627701fe981336792076df0c21937b 39da4f78058b565bfcaad4ced6f1b59a2bf6a421 aad9c8d5dbf34cbfc79bd5a69eb84e83880991f6765b955195b8ab515cab076b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ba524bd-ef85-4f86-8f19-39ca866c6ef3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3898
x-amzn-requestid: aa30ce03-5fea-431d-a8ba-f1f1f6a7313d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a5se8GMjIAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63608df9-5f607dee71fc5ea4688e10ad;Sampled=0
x-amzn-remapped-date: Tue, 01 Nov 2022 03:09:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: M117Djj2kKvQjSBxg_-Wjy9wr6gS-B8nZg-DW6-mduh-Py4fpw_0hg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 23:55:48 GMT
age: 27057
etag: "39da4f78058b565bfcaad4ced6f1b59a2bf6a421"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| static.bongda24h.vn/medias/standard/2018/6/3/1527967760751_lc_galleryImage_Soccer_Football_Internati.jpg | 104.18.3.22 | 200 OK | 31 kB |
URL HTTP/2static.bongda24h.vn/medias/standard/2018/6/3/1527967760751_lc_galleryImage_Soccer_Football_Internati.jpg IP104.18.3.22:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 49x49, segment length 16, baseline, precision 8, 480x316, components 3\012- data Hashfcc7f9d77e5298bcd7da133949030f19 3e474ff7740e0ffac7caf7b32c6be00d84909b0e 1a6708d71918ca1bc95c3e7c8afc06e8c2e91f3850cececb2a9fc6ea2e056579
GET /medias/standard/2018/6/3/1527967760751_lc_galleryImage_Soccer_Football_Internati.jpg HTTP/1.1
Host: static.bongda24h.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfgnj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:45 GMT
content-type: image/jpeg
content-length: 31150
access-control-allow-origin: *
cache-control: public, max-age=2678400
cf-bgj: h2pri
etag: "80f7d1e64517d51:0"
last-modified: Fri, 31 May 2019 00:15:07 GMT
x-powered-by: ASP.NET
cf-cache-status: HIT
expires: Tue, 06 Dec 2022 07:26:45 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7653dceb3f3ab4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60f419f1-9fac-4d40-ab08-9e4c8d715092.jpeg | 34.120.237.76 | 200 OK | 13 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60f419f1-9fac-4d40-ab08-9e4c8d715092.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3ef4c410bf60b7be505437f6bd0741cc fc8efa7e342e486fc03eba5f4b9a13897e3d6184 c4d4748d9997f417da33dc27c283280fa662f20af21b5f723864b08a98375cb4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60f419f1-9fac-4d40-ab08-9e4c8d715092.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13204
x-amzn-requestid: 17c52ec3-3ba2-455b-b191-bc4716a80c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bGHlcEhLIAMFomg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63658622-4c003bdf6874045753a27045;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 21:37:38 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 2wMtj6owsrfYWrOfjUWMvtJnQmAAv7KCBWYfMGaR70ByMlYmHCUsqQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 22:09:12 GMT
age: 33453
etag: "fc8efa7e342e486fc03eba5f4b9a13897e3d6184"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| zerossl.ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 728 B |
URL HTTP/1.1zerossl.ocsp.sectigo.com/ IP172.64.155.188:0
Hasha5d543561e6249e48cc716c31971d6f5 ad1dbe16ee6301b012a7f30b8b394136d004c350 05ae6cdb1d87b198b2718f77842ff18d5539fad0e219debd9d118f30991fc9e9
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 07:26:46 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 06:53:15 GMT
Expires: Fri, 11 Nov 2022 06:53:14 GMT
Etag: "ad1dbe16ee6301b012a7f30b8b394136d004c350"
Cache-Control: max-age=515787,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7653dcf32a8fb4ff-OSL
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hasha2f6c296003d839bdee766ef4082e376 013ae64b10cb1355ae9b6ba38dcfa79f71a9b505 703d6582ab3344d6e4a0d5b7e0c9983b8f7e8179d73dd6584c37bbccc8c84308
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| zerossl.ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 728 B |
URL HTTP/1.1zerossl.ocsp.sectigo.com/ IP172.64.155.188:0
Hasha5d543561e6249e48cc716c31971d6f5 ad1dbe16ee6301b012a7f30b8b394136d004c350 05ae6cdb1d87b198b2718f77842ff18d5539fad0e219debd9d118f30991fc9e9
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 07:26:47 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 06:53:15 GMT
Expires: Fri, 11 Nov 2022 06:53:14 GMT
Etag: "ad1dbe16ee6301b012a7f30b8b394136d004c350"
Cache-Control: max-age=515787,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7653dcf1a97eb4ff-OSL
|
|
| fonts.googleapis.com/css?family=Open%20Sans:bold,regular&display=swap | 142.250.74.10 | 200 OK | 1.1 kB |
URL HTTP/2fonts.googleapis.com/css?family=Open%20Sans:bold,regular&display=swap IP142.250.74.10:0
Hash238b397905cf83715ebffdd2d8f7c510 54b1c13e7fc566fc065b9a961a5aacf2faa112b6 217d4023c4f6b97b14f3c93bdcf2b57908174f6a26cbd84b9021267711391833
GET /css?family=Open%20Sans:bold,regular&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 05 Nov 2022 07:26:47 GMT
date: Sat, 05 Nov 2022 07:26:47 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash656a355c6cb333c5554fa65748d3d165 15e6dc206e412e258ca49e2eec46e67b831ea4a6 3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash656a355c6cb333c5554fa65748d3d165 15e6dc206e412e258ca49e2eec46e67b831ea4a6 3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash656a355c6cb333c5554fa65748d3d165 15e6dc206e412e258ca49e2eec46e67b831ea4a6 3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.195 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.taixiu.cc
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 05:42:51 GMT
expires: Fri, 03 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 179036
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hash4783e9770ef33379c46f7698ced8875b 82177021976d716c4adf140d564db88f19bce763 b01f9e36b6113068af9cf9fab367faf312f9a160b693078692e9eea746cd180f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 07:26:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 03 Nov 2022 02:15:27 GMT
Expires: Thu, 10 Nov 2022 02:15:26 GMT
Etag: "82177021976d716c4adf140d564db88f19bce763"
Cache-Control: max-age=412718,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7653dcfc281cb51e-OSL
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.195 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data Hash3fe71527811fbfedd2c07962e1bc49e7 f63e158a0480c5d711b5e268db0e75e57d87a8a5 24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.taixiu.cc
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 31 Oct 2022 18:57:58 GMT
expires: Tue, 31 Oct 2023 18:57:58 GMT
cache-control: public, max-age=31536000
age: 390529
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 | 216.58.207.195 | 200 OK | 14 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 14040, version 1.0\012- data Hasheadd44d829d43ddf48870c2073f1a7ca fc04b04f37e0988001c81be96bca33c4d866450f 84197a92671b7b7c8715220cea35354699c6221113c0ff531ff087ab8a8aa9e6
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.taixiu.cc
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 21:11:09 GMT
expires: Fri, 03 Nov 2023 21:11:09 GMT
cache-control: public, max-age=31536000
age: 123338
last-modified: Mon, 15 Aug 2022 18:14:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s450x350/61416d65d1330500bc1e1272/ios_tai-app-20220525070238.png |  138.199.37.231 | 200 OK | 33 kB |
URL HTTP/2w.ladicdn.com/s450x350/61416d65d1330500bc1e1272/ios_tai-app-20220525070238.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
Hash6564fefae5365b61c1b064864b6bef65 6ff06798dba323b07e050e19a651f058923b0dc4 4c1c00a4342da56edc30c6ef02cfec9ce1ba392d1f2920d9ef56d66193dd1c7c
GET /s450x350/61416d65d1330500bc1e1272/ios_tai-app-20220525070238.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 694
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628dd734-2b6"
last-modified: Wed, 25 May 2022 07:13:56 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: 7f1ca47f373da9708270d48c7a0aa98f
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 471 B |
IP142.250.74.35:0
Hash656a355c6cb333c5554fa65748d3d165 15e6dc206e412e258ca49e2eec46e67b831ea4a6 3bdcb16737f73a6985f7cfe3b221882d91b27ab3ec6f940f14477f94a0e40720
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| w.ladicdn.com/s2750x450/61416d65d1330500bc1e1272/i-footer-bg_02-20220522085752.png | 138.199.37.231 | 200 OK | 46 kB |
URL HTTP/2w.ladicdn.com/s2750x450/61416d65d1330500bc1e1272/i-footer-bg_02-20220522085752.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 1920 x 81, 8-bit colormap, non-interlaced\012- data Hash81c876d021e2ba5f38cdb690f240a38b 8f9b4d5fd377c7cd9eaeda081a15b6ad5ae814d3 a859c251119118312475dbea57b2db38e34126aee276af520dadd97b638726cc
GET /s2750x450/61416d65d1330500bc1e1272/i-footer-bg_02-20220522085752.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 46470
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628a0122-b586"
last-modified: Sun, 22 May 2022 09:23:46 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:54
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 7e55eb129ac5e20ce4e5cba074041f03
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s500x500/61416d65d1330500bc1e1272/qr_adroind_nhacaisodo_net-20220526052018.png | 138.199.37.231 | 200 OK | 8.7 kB |
URL HTTP/2w.ladicdn.com/s500x500/61416d65d1330500bc1e1272/qr_adroind_nhacaisodo_net-20220526052018.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 180 x 179, 8-bit colormap, non-interlaced\012- data Hash162f2251eebcbdb877db7fc4ad752a6b 26290d778dded23b5665412adfe20cad1249d2c7 618b9191b587042d5bf8f8fa7ca1fdce298946ffa0cd8099ec5c74f4a9540adc
GET /s500x500/61416d65d1330500bc1e1272/qr_adroind_nhacaisodo_net-20220526052018.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 8692
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628f1001-21f4"
last-modified: Thu, 26 May 2022 05:28:33 GMT
cdn-storageserver: NY-354
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: f5249ba8f5739684cdd8266cfb2a95a4
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s500x350/61416d65d1330500bc1e1272/android_tai-app-20220525070229.png | 138.199.37.231 | 200 OK | 840 B |
URL HTTP/2w.ladicdn.com/s500x350/61416d65d1330500bc1e1272/android_tai-app-20220525070229.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 129 x 25, 8-bit colormap, non-interlaced\012- data Hashb3311c6d86c02499a7e0c2e9569cfd33 65b03464a7b0157e23b6d34d0444e3007e50dabd 8906e1658e5b842f8648363325b8e6e6752ddb8a0009e9c534e504eae0f60d9d
GET /s500x350/61416d65d1330500bc1e1272/android_tai-app-20220525070229.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 840
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628dd736-348"
last-modified: Wed, 25 May 2022 07:13:58 GMT
cdn-storageserver: NY-353
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 10:42:03
cdn-edgestorageid: 601
cdn-status: 200
cdn-requestid: da249fb357b7dc3de970487dbcb26013
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s500x500/61416d65d1330500bc1e1272/qr_ios_nhacaisodo_net-20220526052024.png | 138.199.37.231 | 200 OK | 8.6 kB |
URL HTTP/2w.ladicdn.com/s500x500/61416d65d1330500bc1e1272/qr_ios_nhacaisodo_net-20220526052024.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 180 x 179, 8-bit colormap, non-interlaced\012- data Hash3307ad82e7211d0da7b15385afb8daa4 438969ca7b72b0762df3937a84604bef76ffb563 3eb1cfcb5740da1455d4c1102bd9c599fbcf846f8e6fca4132c6c8e54b57a9d0
GET /s500x500/61416d65d1330500bc1e1272/qr_ios_nhacaisodo_net-20220526052024.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 8555
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628f1001-216b"
last-modified: Thu, 26 May 2022 05:28:33 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2022 17:00:45
cdn-edgestorageid: 601
cdn-status: 200
cdn-requestid: 20251daf1640a6ad5619f4e494a6a0ab
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/61416d65d1330500bc1e1272/button_km-20220526124706.gif | 138.199.37.231 | 200 OK | 9.2 kB |
URL HTTP/2w.ladicdn.com/61416d65d1330500bc1e1272/button_km-20220526124706.gif IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typeGIF image data, version 89a, 219 x 80\012- data Hash62ba21a813da9b8dd1f4ddc57c61e419 1d9912ddf99b105b860190e8dee972f8d7abd458 823e7d68d1f8be8a2b5b6e7fecd1bfaad900c635942f5015299ed34b14979761
GET /61416d65d1330500bc1e1272/button_km-20220526124706.gif HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/gif
content-length: 9160
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628f76d0-23c8"
last-modified: Thu, 26 May 2022 12:47:12 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 863
cdn-status: 200
cdn-requestid: f958a6a6404fd68bca9b44976fd8329f
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s750x400/61416d65d1330500bc1e1272/nut_vui-cuoc-to-20220525012005.png | 138.199.37.231 | 200 OK | 5.7 kB |
URL HTTP/2w.ladicdn.com/s750x400/61416d65d1330500bc1e1272/nut_vui-cuoc-to-20220525012005.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 355 x 71, 8-bit colormap, non-interlaced\012- data Hash3e1238d0294a049de1bdfd27e8e28b0b 2db3ad62411833a174962d3d3981fed18f1459a8 6849f341e8f3fc93ff82dee9099c7f73facb317120dbdc3c9d1e206ea3c72e9d
GET /s750x400/61416d65d1330500bc1e1272/nut_vui-cuoc-to-20220525012005.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 5728
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628d84e1-1660"
last-modified: Wed, 25 May 2022 01:22:41 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: b79fe7ee9d8772103c6c612fca655abc
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s800x400/61416d65d1330500bc1e1272/buttons3-20220525031506.png | 138.199.37.231 | 200 OK | 6.6 kB |
URL HTTP/2w.ladicdn.com/s800x400/61416d65d1330500bc1e1272/buttons3-20220525031506.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 466 x 83, 8-bit colormap, non-interlaced\012- data Hashe47bfb72e7c00792d9de5afd6b033b31 0f5a855ec2816b4d84549a4c9e0812df5c88fd4d 974e2114267b4936e03a8a9aaecbc26e1a336d44c42f1eaa0bc61ab2da78897e
GET /s800x400/61416d65d1330500bc1e1272/buttons3-20220525031506.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 6551
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628debb4-1997"
last-modified: Wed, 25 May 2022 08:41:24 GMT
cdn-storageserver: NY-353
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: e3dd5ba3e46977b8a927685b81f38a2e
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/zl-20220526032409.png | 138.199.37.231 | 200 OK | 3.9 kB |
URL HTTP/2w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/zl-20220526032409.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 82 x 82, 8-bit colormap, non-interlaced\012- data Hash64c0cf683634a67cb36865c841c5b397 e81e874529db1e057888b7cb4bc3bc95fa2e42c7 4906b47508abe50380ba842c6fc06cc9ac1f3931f0e3623688121847e361b97c
GET /s400x400/61416d65d1330500bc1e1272/zl-20220526032409.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 3886
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628f1642-f2e"
last-modified: Thu, 26 May 2022 05:55:14 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 10:42:04
cdn-edgestorageid: 601
cdn-status: 200
cdn-requestid: 6d2d8b368b19c119952c865a2442a24d
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_trang-chu-20220524134034.png | 138.199.37.231 | 200 OK | 5.2 kB |
URL HTTP/2w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_trang-chu-20220524134034.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 219 x 80, 8-bit colormap, non-interlaced\012- data Hashba648feb5171f1c327cd1717da2beaaa d10f46fda68968a36375d4b68852ca92f7014e9f 68911e0f0677178e20d0a3c8e0637bd1643e31e4857a9493ad9c3d9c912a45b1
GET /s450x400/61416d65d1330500bc1e1272/header_bar_trang-chu-20220524134034.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 5246
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ce0e0-147e"
last-modified: Tue, 24 May 2022 13:42:56 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 723
cdn-status: 200
cdn-requestid: 18e4b8dff01df53489b430e739889747
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/fb-20220526032409.png | 138.199.37.231 | 200 OK | 3.1 kB |
URL HTTP/2w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/fb-20220526032409.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 82 x 82, 8-bit colormap, non-interlaced\012- data Hash4ceeafb6b78dca1b9ed4778b8711cb00 ff2bed742920a3b87dc1e0ec9eb350117f7ca349 69a76819308e905e16804ac84f44f2291184426a745328af2a67329522c8e406
GET /s400x400/61416d65d1330500bc1e1272/fb-20220526032409.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 3114
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ef4f5-c2a"
last-modified: Thu, 26 May 2022 03:33:09 GMT
cdn-storageserver: NY-266
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: c8d431d0bad37f050d1f9ffed2b21649
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/ytb-20220526032409.png | 138.199.37.231 | 200 OK | 3.7 kB |
URL HTTP/2w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/ytb-20220526032409.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 82 x 82, 8-bit colormap, non-interlaced\012- data Hashbb60e6f09dae29a47a35011a9c1f4731 cd297a5eabeda099dc2a9f8f73fe0191ab6819ff 733ffc68c2639674c5af10ee19b9db4e7c7c05417151483a4bbd9cc09b969ea7
GET /s400x400/61416d65d1330500bc1e1272/ytb-20220526032409.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 3729
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ef934-e91"
last-modified: Thu, 26 May 2022 03:51:16 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 10/30/2022 20:21:32
cdn-edgestorageid: 874
cdn-status: 200
cdn-requestid: 8f277452d2dbb86682e262bf5947dd25
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/tl-20220526032409.png | 138.199.37.231 | 200 OK | 3.8 kB |
URL HTTP/2w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/tl-20220526032409.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 82 x 82, 8-bit colormap, non-interlaced\012- data Hash451920cc12b2c366df1e1b7e55ec1d39 a38089ad57231f106ffbeb8bd155c6b59f47a6fe a952ba87255df9b6178008f62d3b96bebe350eaeaf2faf8daf298ffa99d72e94
GET /s400x400/61416d65d1330500bc1e1272/tl-20220526032409.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 3762
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ef4f5-eb2"
last-modified: Thu, 26 May 2022 03:33:09 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2022 16:39:38
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: f4f512738ca1c34615821e223c1884a1
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/web-20220526032409.png | 138.199.37.231 | 200 OK | 3.3 kB |
URL HTTP/2w.ladicdn.com/s400x400/61416d65d1330500bc1e1272/web-20220526032409.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 83 x 83, 8-bit colormap, non-interlaced\012- data Hash1fc8bc4f609b8531706b996043968d91 12c848d78a2caf3d0ca2fffb32605bcb40ff1ed0 0a22796c499879543057d06cc5435040f5f5d1771f91a863156d6e20c2115cd7
GET /s400x400/61416d65d1330500bc1e1272/web-20220526032409.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 3285
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628f1644-cd5"
last-modified: Thu, 26 May 2022 05:55:16 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 756
cdn-status: 200
cdn-requestid: 47573a9b04ea0131b9d4fbc4d6d597a6
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_dang-nhap-20220524133952.png | 138.199.37.231 | 200 OK | 5.3 kB |
URL HTTP/2w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_dang-nhap-20220524133952.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 219 x 80, 8-bit colormap, non-interlaced\012- data Hash99b2f08de0d2872150139e5ab8df3f89 8333d52f28f8d198fa85c369ecc3faa7eb64efa7 859fa5fe3c02407733868fa37936580db9d156a7eac86c5d2ba930c36aae602a
GET /s450x400/61416d65d1330500bc1e1272/header_bar_dang-nhap-20220524133952.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 5322
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ce0dc-14ca"
last-modified: Tue, 24 May 2022 13:42:52 GMT
cdn-storageserver: NY-353
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: 8ecf5ded922ca225e38509cf873a3edc
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_dang-ky-20220524133942.png | 138.199.37.231 | 200 OK | 5.2 kB |
URL HTTP/2w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_dang-ky-20220524133942.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 219 x 80, 8-bit colormap, non-interlaced\012- data Hashd706e902c0353d33b8ac9c2c1fe5bac1 48d53f3ae42af7d0429bfc401266e3140ff73b9d ea6909da24f92478e26a73b856894f7fd30131644444927dcb838674f22c6582
GET /s450x400/61416d65d1330500bc1e1272/header_bar_dang-ky-20220524133942.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 5163
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ce0de-142b"
last-modified: Tue, 24 May 2022 13:42:54 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:54
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 903c3a886ee23be6c2af07a4482b0407
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/61416d65d1330500bc1e1272/header_bar_dang-ky-20220525031433.png | 138.199.37.231 | 200 OK | 5.8 kB |
URL HTTP/2w.ladicdn.com/61416d65d1330500bc1e1272/header_bar_dang-ky-20220525031433.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 219 x 80, 8-bit colormap, non-interlaced\012- data Hashc3130ec32adc60f7bcb5f8f02158b625 f7180a087996db9ea96ec45d29c089c637d43a39 4f51cd308b5798c5d3ff7fb06d8f4f8fdb5ff145337922cfc3dbb9f26c598e72
GET /61416d65d1330500bc1e1272/header_bar_dang-ky-20220525031433.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 5783
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628db204-1697"
last-modified: Wed, 25 May 2022 04:35:16 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 10/06/2022 00:42:38
cdn-edgestorageid: 860
cdn-status: 200
cdn-requestid: 70ed6259cf3930f6a15d19cc455782aa
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_cskh-24-7-20220524133839.png | 138.199.37.231 | 200 OK | 5.2 kB |
URL HTTP/2w.ladicdn.com/s450x400/61416d65d1330500bc1e1272/header_bar_cskh-24-7-20220524133839.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 219 x 80, 8-bit colormap, non-interlaced\012- data Hash3a0d63a04c394cca05f996c2ec2e1c8f 7d5f74c8171e760aa16fc96158b0d161dc47b54d 06e45b7aa155cd222970b7de458a0a74c88f1fea068ae02c88adea23dfca897b
GET /s450x400/61416d65d1330500bc1e1272/header_bar_cskh-24-7-20220524133839.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 5163
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ce0db-142b"
last-modified: Tue, 24 May 2022 13:42:51 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 860
cdn-status: 200
cdn-requestid: 9ec08cf112505485f05727ff5b83c385
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s950x600/61416d65d1330500bc1e1272/khung-20220524133815.png | 138.199.37.231 | 200 OK | 27 kB |
URL HTTP/2w.ladicdn.com/s950x600/61416d65d1330500bc1e1272/khung-20220524133815.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 600 x 260, 8-bit colormap, non-interlaced\012- data Hash32097a3bdb2013f9e28c059f67df99fd 138c3da440eb49aae5f9381defadbe14e77efedb 68856b1c06dd9cbb247f178445bb52158389c00b123f91182fab5c7695cd5eec
GET /s950x600/61416d65d1330500bc1e1272/khung-20220524133815.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 27016
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628ce5a8-6988"
last-modified: Tue, 24 May 2022 14:03:20 GMT
cdn-storageserver: NY-353
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/25/2022 05:50:40
cdn-edgestorageid: 860
cdn-status: 200
cdn-requestid: ab6780d28b30f593e36af62bd18f5d35
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s2350x450/61416d65d1330500bc1e1272/i-topbg2_01-20220522085752.png | 138.199.37.231 | 200 OK | 43 kB |
URL HTTP/2w.ladicdn.com/s2350x450/61416d65d1330500bc1e1272/i-topbg2_01-20220522085752.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 1920 x 124, 8-bit colormap, non-interlaced\012- data Hash98dffa49fda78e28eae09e1c34350bda 63c8e712cfbe27eec16645cc21fd14d142217fcc 7665dde099f89d4b2dd919576c66280c912f71297fbf37b8719b86c6b84f1776
GET /s2350x450/61416d65d1330500bc1e1272/i-topbg2_01-20220522085752.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 42606
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628a0124-a66e"
last-modified: Sun, 22 May 2022 09:23:48 GMT
cdn-storageserver: NY-266
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2022 16:39:37
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: 75266b2464c47bbd6f0cb997c30e9e70
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s600x400/61416d65d1330500bc1e1272/chu-20211203021229.png | 138.199.37.231 | 200 OK | 51 kB |
URL HTTP/2w.ladicdn.com/s600x400/61416d65d1330500bc1e1272/chu-20211203021229.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 497 x 128, 8-bit/color RGBA, non-interlaced\012- data Hashfabf0514b44c2005395ecad87f203ef8 6bd9b60410f8e35e12d5f14154f29766f5587580 83af20694b0ba3483e18372bdc3e3975634a0646a2a4ef68b87ab0d46579ffeb
GET /s600x400/61416d65d1330500bc1e1272/chu-20211203021229.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 50624
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "6291ade8-c5c0"
last-modified: Sat, 28 May 2022 05:06:48 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 756
cdn-status: 200
cdn-requestid: 86a092d30e0a8cca7758b882f7e5ecb8
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s1050x550/61416d65d1330500bc1e1272/text_woldcup-4-20220525013140.png | 138.199.37.231 | 200 OK | 66 kB |
URL HTTP/2w.ladicdn.com/s1050x550/61416d65d1330500bc1e1272/text_woldcup-4-20220525013140.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 800 x 280, 8-bit colormap, non-interlaced\012- data Hash39127040c901d0d05c45ccfc328b6d80 72e8e3148f902e62375ae2c133cc5258571f8d6c 40a498a3f614789c0107010a582aa94069e9f6bd489929626f6a6ee6521259af
GET /s1050x550/61416d65d1330500bc1e1272/text_woldcup-4-20220525013140.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 66023
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628d8761-101e7"
last-modified: Wed, 25 May 2022 01:33:21 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 10:42:03
cdn-edgestorageid: 601
cdn-status: 200
cdn-requestid: cd1edd79544015ba8a3147e634a7d824
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s550x450/61416d65d1330500bc1e1272/light-20220525074907.png | 138.199.37.231 | 200 OK | 94 kB |
URL HTTP/2w.ladicdn.com/s550x450/61416d65d1330500bc1e1272/light-20220525074907.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 800 x 450, 8-bit/color RGBA, non-interlaced\012- data Hashea02e011b6b041b6d71e07c022a29d1f 0d2871dc17ec73723ed4721b0136865700725cbf c48a534e1ea06d9ed1ec3219a16a30acfaf8d057215d80505ac0869a62ac9895
GET /s550x450/61416d65d1330500bc1e1272/light-20220525074907.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 93656
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628de16f-16dd8"
last-modified: Wed, 25 May 2022 07:57:35 GMT
cdn-storageserver: NY-266
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 10:42:03
cdn-edgestorageid: 601
cdn-status: 200
cdn-requestid: 662de30a3cb721cb63af25fb182f8cd7
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s900x750/61416d65d1330500bc1e1272/7812f3937d38b1e1-20220517100602.png | 138.199.37.231 | 200 OK | 256 kB |
URL HTTP/2w.ladicdn.com/s900x750/61416d65d1330500bc1e1272/7812f3937d38b1e1-20220517100602.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typeRIFF (little-endian) data, Web/P image\012- data Size256 kB (256498 bytes) Hash9170d1c2555543cb6f0f24d622259751 15caf7ac3ad35692bf443c46465a583dbab884d4 5574e15c03a9bbbb668fe241e39b2a0b01cc621320dc35ebee10efbd541bdb0b
GET /s900x750/61416d65d1330500bc1e1272/7812f3937d38b1e1-20220517100602.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 256498
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628376c9-3e9f2"
last-modified: Tue, 17 May 2022 10:19:53 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2022 16:39:38
cdn-edgestorageid: 863
cdn-status: 200
cdn-requestid: c67ab183f3bd72f9270572121c7bd096
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s900x800/61416d65d1330500bc1e1272/b73517df090300fd-20220517100602.png | 138.199.37.231 | 200 OK | 125 kB |
URL HTTP/2w.ladicdn.com/s900x800/61416d65d1330500bc1e1272/b73517df090300fd-20220517100602.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typeRIFF (little-endian) data, Web/P image\012- data Size125 kB (125074 bytes) Hasheaba5570e4a4ce51e7bacdbb845c8c5b 8d5e2dc7d33e7a74b2b9f14b9b43f233336807f6 e694792d1717d096965b11f75a548787c263dfdd1b90825b1019dd5317017ed5
GET /s900x800/61416d65d1330500bc1e1272/b73517df090300fd-20220517100602.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 125074
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628376c8-1e892"
last-modified: Tue, 17 May 2022 10:19:52 GMT
cdn-storageserver: NY-353
cdn-requestpullsuccess: True
cdn-fileserver: 354
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 76328364930f0d898fb8d7df3cca415e
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s950x800/61416d65d1330500bc1e1272/f4cd4605646e8f45-20220517100602.png | 138.199.37.231 | 200 OK | 170 kB |
URL HTTP/2w.ladicdn.com/s950x800/61416d65d1330500bc1e1272/f4cd4605646e8f45-20220517100602.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typeRIFF (little-endian) data, Web/P image\012- data Size170 kB (170074 bytes) Hash9e8377942515de197f6aff88df17e19c 15d00c5abd294ccca365e03487903d90fa7aceaf a7619024b92a853d0eebc9e6e03ccfca47b966ed223cf5f21ae67e3b509df433
GET /s950x800/61416d65d1330500bc1e1272/f4cd4605646e8f45-20220517100602.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 170074
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628b4e7b-2985a"
last-modified: Mon, 23 May 2022 09:06:03 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 10/04/2022 16:39:37
cdn-edgestorageid: 863
cdn-status: 200
cdn-requestid: e964399ad94dd118220fb9c95a9d53c6
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s1150x400/61416d65d1330500bc1e1272/footer-20220816033838.png | 138.199.37.231 | 200 OK | 444 kB |
URL HTTP/2w.ladicdn.com/s1150x400/61416d65d1330500bc1e1272/footer-20220816033838.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 1920 x 210, 8-bit/color RGBA, interlaced\012- data Size444 kB (443643 bytes) Hash021020b7589e05f0768da5c12ee11068 9807bce98b0a4065107cc6f00ac3a436b0a489cc a55c01fc8902e2716b93bb0d805003244d68e6c7b46ba7ad62905ba9d3bf6aec
GET /s1150x400/61416d65d1330500bc1e1272/footer-20220816033838.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 443643
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "62fb1801-6c4fb"
last-modified: Tue, 16 Aug 2022 04:07:29 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 267
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 09/24/2022 23:37:58
cdn-edgestorageid: 874
cdn-status: 200
cdn-requestid: 35ca7392c80d0a8f411a4d661edbd0dc
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s950x800/61416d65d1330500bc1e1272/b9ffec264b939c9a-20220517100602.png | 138.199.37.231 | 200 OK | 364 kB |
URL HTTP/2w.ladicdn.com/s950x800/61416d65d1330500bc1e1272/b9ffec264b939c9a-20220517100602.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typeRIFF (little-endian) data, Web/P image\012- data Size364 kB (364370 bytes) Hash97e4ad5679abff8f348ac5c9aef34737 a61c883a0d7520da6dc79dcfb5db5b522dde65f1 9753222c471fac0be13d48b7d33d1c898c398ce781f13571ea4340dee857b70b
GET /s950x800/61416d65d1330500bc1e1272/b9ffec264b939c9a-20220517100602.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 364370
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628b4e7c-58f52"
last-modified: Mon, 23 May 2022 09:06:04 GMT
cdn-storageserver: NY-354
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:54
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: 1f394a5b69d094dde17d2e865045dc21
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s2350x1250/61416d65d1330500bc1e1272/body-bg3-20220522085751.png | 138.199.37.231 | 200 OK | 1.5 MB |
URL HTTP/2w.ladicdn.com/s2350x1250/61416d65d1330500bc1e1272/body-bg3-20220522085751.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 1920 x 1080, 8-bit colormap, non-interlaced\012- data Size1.5 MB (1519346 bytes) Hashf560c1c77e36101bf72efbf7950c336a 61b1bf00c85146cd00b1a784fbd3b58bd1112922 67b9ed602d43d7918ecf9ffd90a3af331108579a75a216a38882c9e242e52161
GET /s2350x1250/61416d65d1330500bc1e1272/body-bg3-20220522085751.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 1519346
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628c51fe-172ef2"
last-modified: Tue, 24 May 2022 03:33:18 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 864
cdn-status: 200
cdn-requestid: a8027c14a28f79648b5abbeb6cfae5b8
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s950x950/61416d65d1330500bc1e1272/i-right-pic-20220522085931.png | 138.199.37.231 | 200 OK | 947 kB |
URL HTTP/2w.ladicdn.com/s950x950/61416d65d1330500bc1e1272/i-right-pic-20220522085931.png IP138.199.37.231:0 ASN#60068 Datacamp Limited
File typePNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced\012- data Size947 kB (946558 bytes) Hash4ed2855a8c9a8404e58d034f2384d87f 8a42a93792d23d38a31264eeb62775cf69153e80 6af600b6b456ff5afe7181c08a4e5d46a58fc92ec23aae63f6bb69e44c8290e3
GET /s950x950/61416d65d1330500bc1e1272/i-right-pic-20220522085931.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: image/png
content-length: 946558
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "628a0124-e717e"
last-modified: Sun, 22 May 2022 09:23:48 GMT
cdn-storageserver: NY-354
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/20/2022 03:31:53
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: ab8505347d19440ee355cdd71c0251f4
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash1c183bf4216bf379f5558452a1b5182e 4dc20ed0b73947e2595ed9a03a18023c1c535078 e4f0f38f9d25a7f79b6c2c5e098b6e826af6d911a7564fb3fcd36f470a9f881f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 07:26:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 22:04:32 GMT
Expires: Fri, 11 Nov 2022 22:04:31 GMT
Etag: "4dc20ed0b73947e2595ed9a03a18023c1c535078"
Cache-Control: max-age=570462,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7653dd004bf6b51e-OSL
|
|
| core.vchat.vn/code/tracking.js |  42.112.21.2 | 200 OK | 41 kB |
URL HTTP/2core.vchat.vn/code/tracking.js IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeUnicode text, UTF-8 text, with very long lines (740) Hash6fd89afdd10d6e2e6b8f7064d471ed1b b3692a65b744128f784fe288974c1b48eea04c7a 837f0647359c3d60e5d675a2d360e979b43ed72b343f72c1e8c13bacb9c001b4
GET /code/tracking.js HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:48 GMT
content-type: application/javascript
content-length: 40838
last-modified: Fri, 12 Aug 2022 05:37:34 GMT
etag: "62f5e71e-9f86"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hash4783e9770ef33379c46f7698ced8875b 82177021976d716c4adf140d564db88f19bce763 b01f9e36b6113068af9cf9fab367faf312f9a160b693078692e9eea746cd180f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 05 Nov 2022 07:26:49 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 03 Nov 2022 02:15:27 GMT
Expires: Thu, 10 Nov 2022 02:15:26 GMT
Etag: "82177021976d716c4adf140d564db88f19bce763"
Cache-Control: max-age=412717,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7653dcfaaef61bfe-OSL
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
Hash995b9da3ad761bc0e400c0ca55f55e3b ee00c3118e24d1dea199d6c547beb74aa1a31de4 919ca5385bb5c04ca7237e142e5c103e99e1e4d15ebaff24e1315ef7cd5d44bf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=156857
Date: Sat, 05 Nov 2022 07:26:49 GMT
Etag: "6365d1f2-1d7"
Expires: Mon, 07 Nov 2022 03:01:06 GMT
Last-Modified: Sat, 05 Nov 2022 03:01:06 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: j7QxnQnlxZELTDw7YUBba3mjqh3nBYxetQZ8bU5DhT6K7knkzfEzxg==
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
Hash995b9da3ad761bc0e400c0ca55f55e3b ee00c3118e24d1dea199d6c547beb74aa1a31de4 919ca5385bb5c04ca7237e142e5c103e99e1e4d15ebaff24e1315ef7cd5d44bf
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=161559
Date: Sat, 05 Nov 2022 07:26:49 GMT
Etag: "6365d1f2-1d7"
Expires: Mon, 07 Nov 2022 04:19:28 GMT
Last-Modified: Sat, 05 Nov 2022 03:01:06 GMT
Server: ECS (dcb/7EEA)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _YEvvwekZoPI4QEjFzulcJBY4GYtcHjxl9zxBnUwvj8cyFEWhv03Jg==
Age: 4702
|
|
| core.vchat.vn/assets/css/main.css?version=251291 | 42.112.21.2 | 200 OK | 25 kB |
URL HTTP/2core.vchat.vn/assets/css/main.css?version=251291 IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeASCII text, with very long lines (379) Hashb4d8dbe6f755405ca8c47f7f216c5bac 49d3e4416fe682387ff3e49c693e11bfbc09ab8e 1214b6a3714ff13a3c41c55761b81442cd57ec4413efbb985e0ad8887e01785b
GET /assets/css/main.css?version=251291 HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: text/css
content-length: 24949
last-modified: Wed, 07 Sep 2022 03:38:18 GMT
etag: "6318122a-6175"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/assets/flaticon/font/flaticon.css | 42.112.21.2 | 200 OK | 5.1 kB |
URL HTTP/2core.vchat.vn/assets/flaticon/font/flaticon.css IP42.112.21.2:0 ASN#18403 FPT Telecom Company
Hash5955a3bffc5866b18f99919f7708675a ce44d60cb5bb786bf8bf63c7db2f73ce0deff860 4fe59e2ffb8d6349c7583d16eb1f52b5ae36279e1d8edb75d1f607bb33930f74
GET /assets/flaticon/font/flaticon.css HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: text/css
content-length: 5094
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-13e6"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashd65c94a3bfe8605059e5e626ea0fa57e b0fbc3577331b82efc8e320095b8d8705a6360d3 0878edd256a972f526d7053cdebceb28241db5662cc7660a10f1b4c3430c43c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22 | 42.112.21.2 | 200 OK | 230 kB |
URL HTTP/2core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22 IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (17916) Size230 kB (230322 bytes) Hashe204ec03385053ff9e9009fa00b435c4 a82de45aa60b3ed8daf028476823e5c0c64609f7 8dda95b3665a1ace0e8008a1b4c704d296f9dd0a8188031bf95602b9a3ed2c6a
GET /service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22 HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.34
set-cookie: _gta_uni=20221105.132425266.2895535; expires=Fri, 01-Aug-2025 07:26:49 GMT; Max-Age=86400000; path=/; samesite=None; domain=.vchat.vn; secure; HttpOnly
vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49; expires=Mon, 13-Feb-2023 07:26:49 GMT; Max-Age=8640000; path=/; samesite=None; domain=.v3.vn; secure; HttpOnly
vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49; expires=Mon, 13-Feb-2023 07:26:49 GMT; Max-Age=8640000; path=/; samesite=None; domain=.vchat.vn; secure; HttpOnly
cache-control: no-cache, private
date: Sat, 05 Nov 2022 07:26:49 GMT
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, PATCH
access-control-allow-credentials: true
access-control-max-age: 86400
access-control-expose-headers: *
access-control-allow-headers: Access-Control-Allow-Headers,Origin,Accept,Content-Type, Authorization, X-Custom-Header, Upgrade-Insecure-Requests, token, X-Requested-With, Application
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/assets/js/jquery.js | 42.112.21.2 | 200 OK | 93 kB |
URL HTTP/2core.vchat.vn/assets/js/jquery.js IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeUnicode text, UTF-8 text, with very long lines (65481) Hash1d14cd3798bc4d6aaf65dd625870723f 0809f9f5caa2642b9dea8bf59133180bfd7c1d6f 04bebecfb9f7ce92cf947ce283fccf067cf6870f65af3456dd22b6c102447c83
GET /assets/js/jquery.js HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: application/javascript
content-length: 93434
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-16cfa"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashd65c94a3bfe8605059e5e626ea0fa57e b0fbc3577331b82efc8e320095b8d8705a6360d3 0878edd256a972f526d7053cdebceb28241db5662cc7660a10f1b4c3430c43c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 05 Nov 2022 07:26:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| core.vchat.vn/assets/js/axios.min.js | 42.112.21.2 | 200 OK | 14 kB |
URL HTTP/2core.vchat.vn/assets/js/axios.min.js IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeASCII text, with very long lines (14099) Hash38d761de833dac4e6e929951cc8f1f1c b6f4033fb28206ea9018e22ab7c77038e7764478 7d950014f08aab41621a1cbcbeb06a9cde95c8bb4c70019e63f79c0193abad50
GET /assets/js/axios.min.js HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: application/javascript
content-length: 14189
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-376d"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/assets/js/main.js?version=251291 | 42.112.21.2 | 200 OK | 38 kB |
URL HTTP/2core.vchat.vn/assets/js/main.js?version=251291 IP42.112.21.2:0 ASN#18403 FPT Telecom Company
Hash5aeee45243d28f0e20c1852ecdfa0ff2 8b9ea7cfefc556c8c01fcb24c58ded4c71d1231c 2e57364db5f9a93c3c4cab67a67264cf5006619ae38c62bf018f23c0f851651b
GET /assets/js/main.js?version=251291 HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: application/javascript
content-length: 37646
last-modified: Thu, 27 Oct 2022 03:39:00 GMT
etag: "6359fd54-930e"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/assets/js/vue.2.3.js | 42.112.21.2 | 200 OK | 255 kB |
URL HTTP/2core.vchat.vn/assets/js/vue.2.3.js IP42.112.21.2:0 ASN#18403 FPT Telecom Company
Size255 kB (254793 bytes) Hashf3304bbb2d5973eed6b0422a293c58b6 016775168e6a48b61a1009fb9bbf067b9add3dd4 b1ac0fd6c2e471a038610250580b636a16a6806e9bac699a209591858c037e7a
GET /assets/js/vue.2.3.js HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: application/javascript
content-length: 254793
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-3e349"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/code/socket.io.2.3.0.js | 42.112.21.2 | 200 OK | 69 kB |
URL HTTP/2core.vchat.vn/code/socket.io.2.3.0.js IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeASCII text, with very long lines (32094) Hash9d982cf80aa2a6e09d791809e48cd82f ed5bdb9f91879730e833f6b95f1960afd5a72c37 cc9c49fda0fdb365078fd84798f91fa86a3a93e942137c5f85b058e1f697e102
GET /code/socket.io.2.3.0.js HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: application/javascript
content-length: 68692
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-10c54"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/assets/image/typing.gif | 42.112.21.2 | 200 OK | 40 kB |
URL HTTP/2core.vchat.vn/assets/image/typing.gif IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeGIF image data, version 89a, 47 x 22\012- data Hashafd569048af918c2eda6fc054df82c1e b31953a3155ab5e3bbf7188d61fe4d57fc31fe85 7c68d052273f0b30a08b3316d64698810b594a7765de0b190078f55a0950c509
GET /assets/image/typing.gif HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: image/gif
content-length: 40271
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-9d4f"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/assets/image/loading.gif | 42.112.21.2 | 200 OK | 4.8 kB |
URL HTTP/2core.vchat.vn/assets/image/loading.gif IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeGIF image data, version 89a, 28 x 28\012- data Hash71f0518dad0c74927f3bf3d4a5fb6fb2 dfb7339dcfea2f4d8963066a6773b92501a7c1ba a07d1cebd390b2820257e108c20a012950126fbe4178a3a10efe3a1b217044ce
GET /assets/image/loading.gif HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: image/gif
content-length: 4782
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-12ae"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 | 216.58.207.195 | 200 OK | 22 kB |
URL HTTP/2fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 21464, version 1.0\012- data Hash923a543cc619ea568f91b723d9fb1ef0 6f4ade25559645c741d7327c6e16521e43d7e1f9 bf7344209edb1be5a2886c425cf6334a102d76cbea1471fd50171e2ee92877cd
GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://core.vchat.vn
Connection: keep-alive
Referer: https://core.vchat.vn/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21464
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 01 Nov 2022 15:17:39 GMT
expires: Wed, 01 Nov 2023 15:17:39 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2019 23:42:59 GMT
content-type: font/woff2
age: 317351
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 05 Nov 2022 06:41:09 GMT
expires: Sat, 05 Nov 2022 08:41:09 GMT
cache-control: public, max-age=7200
age: 2741
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/upload/brand/2022/05/14/vc-627f29c552770-1652500933.png | 42.112.21.2 | 200 OK | 22 kB |
URL HTTP/2core.vchat.vn/upload/brand/2022/05/14/vc-627f29c552770-1652500933.png IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typePNG image data, 219 x 250, 8-bit colormap, non-interlaced\012- data Hashce66290d842ae55e0d6b687b2fa733c5 6d131de6cf5a6c85a12bcf6050172b74239bef82 624343ce61246c6ad2228e9f63ec546b1f40441a39c9cdbdca46c86f85cfea1d
GET /upload/brand/2022/05/14/vc-627f29c552770-1652500933.png HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:50 GMT
content-type: image/png
content-length: 21576
last-modified: Sat, 14 May 2022 04:02:13 GMT
etag: "627f29c5-5448"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/upload/eyechat/2022/05/14/vc-627f2b3fa7f50-1652501311.png | 42.112.21.2 | 200 OK | 22 kB |
URL HTTP/2core.vchat.vn/upload/eyechat/2022/05/14/vc-627f2b3fa7f50-1652501311.png IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typePNG image data, 219 x 250, 8-bit colormap, non-interlaced\012- data Hashce66290d842ae55e0d6b687b2fa733c5 6d131de6cf5a6c85a12bcf6050172b74239bef82 624343ce61246c6ad2228e9f63ec546b1f40441a39c9cdbdca46c86f85cfea1d
GET /upload/eyechat/2022/05/14/vc-627f2b3fa7f50-1652501311.png HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:50 GMT
content-type: image/png
content-length: 21576
last-modified: Sat, 14 May 2022 04:08:31 GMT
etag: "627f2b3f-5448"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hrt4 | 42.112.21.2 | 200 OK | 103 B |
URL HTTP/2wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hrt4 IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeASCII text, with no line terminators Hash1497a46f8268eb40c7c1c32c0542fc00 16b32ca96e2cd64ac9b7386395f8fddbf83a57f5 a861d24c19995b019b3fc4522a1ee6127a981ad5dcfcf1bc0f48fc4fabfec482
GET /socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hrt4 HTTP/1.1
Host: wss1.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://core.vchat.vn
Connection: keep-alive
Referer: https://core.vchat.vn/
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:50 GMT
content-type: text/plain; charset=UTF-8
content-length: 103
access-control-allow-credentials: true
access-control-allow-origin: https://core.vchat.vn
set-cookie: io=_N4CttP2OXKjsykRq5IC; Path=/; HttpOnly; SameSite=Strict
X-Firefox-Spdy: h2
|
|
| wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hr-z&sid=_N4CttP2OXKjsykRq5IC | 42.112.21.2 | 200 OK | 2 B |
URL HTTP/2wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hr-z&sid=_N4CttP2OXKjsykRq5IC IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hr-z&sid=_N4CttP2OXKjsykRq5IC HTTP/1.1
Host: wss1.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain;charset=UTF-8
Content-Length: 164
Origin: https://core.vchat.vn
Connection: keep-alive
Referer: https://core.vchat.vn/
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:50 GMT
content-type: text/html
content-length: 2
access-control-allow-credentials: true
access-control-allow-origin: https://core.vchat.vn
set-cookie: io=_N4CttP2OXKjsykRq5IC; Path=/; HttpOnly; SameSite=Strict
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Awp5MKg.woff2 | 216.58.207.195 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Awp5MKg.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 15620, version 1.0\012- data Hash4828ba09d4e14055459ad5b3044f3a96 c73fb1f9f827c047c4953263d7112cc33df30252 d190b33e3768d3d52e4ace23765ec377bbb939773376813d72cc22c298a59f3c
GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Awp5MKg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://core.vchat.vn
Connection: keep-alive
Referer: https://core.vchat.vn/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 01:26:06 GMT
expires: Sun, 05 Nov 2023 01:26:06 GMT
cache-control: public, max-age=31536000
age: 21645
last-modified: Mon, 22 Apr 2019 23:42:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 | 216.58.207.195 | 200 OK | 22 kB |
URL HTTP/2fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 21700, version 1.0\012- data Hash7d75a9eb3b38b5dd04b8a7ce4f1b87cc 68f598c84936c9720c5ffd6685294f5c94000dff 6c24799e77b963b00401713a1dbd9cba3a00249b9363e2c194d01b13b8cdb3d7
GET /s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://core.vchat.vn
Connection: keep-alive
Referer: https://core.vchat.vn/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 30 Oct 2022 00:59:52 GMT
expires: Mon, 30 Oct 2023 00:59:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 Apr 2019 23:43:33 GMT
content-type: font/woff2
age: 541619
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Bwp5MKg.woff2 | 216.58.207.195 | 200 OK | 9.2 kB |
URL HTTP/2fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Bwp5MKg.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 9244, version 1.0\012- data Hashd9a0a4c9215c5a3ea3984214933bc7c3 a76d2921046b94462523e1ecec4bdaad83cd0c73 7de05785c5fcfc8680569077741375e23017e524c9fd97d4ff05766f4a70e9ee
GET /s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Bwp5MKg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://core.vchat.vn
Connection: keep-alive
Referer: https://core.vchat.vn/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 30 Oct 2022 19:01:16 GMT
expires: Mon, 30 Oct 2023 19:01:16 GMT
cache-control: public, max-age=31536000
age: 476735
last-modified: Mon, 22 Apr 2019 23:42:57 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=websocket&sid=_N4CttP2OXKjsykRq5IC | 42.112.21.2 | 101 Switching Protocols | 0 B |
URL HTTP/1.1wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=websocket&sid=_N4CttP2OXKjsykRq5IC IP42.112.21.2:0 ASN#18403 FPT Telecom Company
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=websocket&sid=_N4CttP2OXKjsykRq5IC HTTP/1.1
Host: wss1.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://core.vchat.vn
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Rmprhx1Oa3Ehu0sIvep61g==
Connection: keep-alive, Upgrade
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx/1.21.6
Date: Sat, 05 Nov 2022 07:26:51 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tdn6LnkNzWoAt+zOC0BENKYByY8=
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3819323-4f77-4bb2-bbbb-6926d5bc62aa.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3819323-4f77-4bb2-bbbb-6926d5bc62aa.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6ee20d59c5ac266f8eb9c47057271a10 61dc4e78907f114519ff3fdd3c806b36557ab744 2cba117cfe96fa5e1b53981f98d42eb3e5f956083c3435a1d44d1d40784614bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3819323-4f77-4bb2-bbbb-6926d5bc62aa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11427
x-amzn-requestid: 0dcc7ef4-d7fa-492e-8ddf-4342b4bc44e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bGHxJGJZoAMFWlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365866d-7c3de2ed509a640f37c52843;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 21:38:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gAHLlJ0JzB6TfEUNw_sCNmrjMK-EX1hZbCY34i99xQok7R-wvcpqug==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 21:59:04 GMT
age: 34068
etag: "61dc4e78907f114519ff3fdd3c806b36557ab744"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hr--&sid=_N4CttP2OXKjsykRq5IC | 42.112.21.2 | 200 OK | 3 B |
URL HTTP/2wss1.vchat.vn/socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hr--&sid=_N4CttP2OXKjsykRq5IC IP42.112.21.2:0 ASN#18403 FPT Telecom Company
File typeASCII text, with no line terminators Hash9b9065b3ba2c3c87f1e30fdf998d791e cc471c1ac39e9f79d65111b47de18d7bf187f1ed 62325dfc1fc675255519674da6e2c4aad5f51cc6c3217ed3c6fbf6cabe0d86b0
GET /socket.io/?data=%7B%22channel%22%3A%5B132425266%5D%2C%22checksum%22%3A%22bd9e84c5fa134b0de65f8ac99903b5fc%22%2C%22check_id%22%3A%22d2287f0da18f98717f87a82811a21f96%22%2C%22data%22%3A%22%22%7D&EIO=3&transport=polling&t=OH6hr--&sid=_N4CttP2OXKjsykRq5IC HTTP/1.1
Host: wss1.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://core.vchat.vn
Connection: keep-alive
Referer: https://core.vchat.vn/
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:52 GMT
content-type: text/plain; charset=UTF-8
content-length: 3
access-control-allow-credentials: true
access-control-allow-origin: https://core.vchat.vn
set-cookie: io=_N4CttP2OXKjsykRq5IC; Path=/; HttpOnly; SameSite=Strict
X-Firefox-Spdy: h2
|
|
| a.ladipage.com/event |  52.220.126.168 | 200 OK | 0 B |
IP52.220.126.168:0
POST /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
LADI_CLIENT_ID:
LADI_PAGE_VIEW: 0
LADI_FORM_SUBMIT: 0
LADI_CAMP_ID:
LADI_CAMP_NAME:
LADI_CAMP_TYPE:
LADI_CAMP_TARGET_URL:
LADI_CAMP_ORIGIN_URL:
LADI_CAMP_PAGE_VIEW: 0
LADI_CAMP_FORM_SUBMIT: 0
Content-Length: 212
Origin: https://www.taixiu.cc
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: text/plain; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
X-Firefox-Spdy: h2
|
|
| mfgnj.com/ | 104.21.11.85 | 301 Moved Permanently | 0 B |
IP104.21.11.85:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: mfgnj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Sat, 05 Nov 2022 07:26:43 GMT
content-type: text/html; charset=utf-8
location: http://www.mfgnj.com/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uv9Jwn3t4RuKLoyeeBMQ%2BZXKI1uGoGJLB%2F72zYAu1T5m8HpjHS3%2F%2BYwfSErT1tBMzR51MF3JelBC8M8xjbasi1h13FxNo0ttikxYleRd8KmB9ICC%2F5jUCcFwpCg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7653dce15ff51c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.taixiu.cc/ | 18.138.206.213 | 200 OK | 0 B |
IP18.138.206.213:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: www.taixiu.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.mfgnj.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sat, 05 Nov 2022 07:26:47 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
set-cookie: LADI_DNS_CHECK="2022-11-05 07:26:47.143273606 +0000 UTC m=+260397.024941012"; Expires=Tue, 02 Nov 2032 07:26:47 GMT
LADI_CLIENT_ID=c6696b24-da73-475a-473f-dd50df614b67; Expires=Tue, 02 Nov 2032 07:26:47 GMT
LADI_PAGE_VIEW=0; Expires=Tue, 02 Nov 2032 07:26:47 GMT
LADI_FORM_SUBMIT=0; Expires=Tue, 02 Nov 2032 07:26:47 GMT
LADI_PAGE_VIEW=1; Expires=Tue, 02 Nov 2032 07:26:47 GMT
LADI_CAMP_ID=; Max-Age=0
LADI_CAMP_NAME=; Max-Age=0
LADI_CAMP_TYPE=; Max-Age=0
LADI_CAMP_ORIGIN_URL=; Max-Age=0
LADI_CAMP_TARGET_URL=; Max-Age=0
LADI_CAMP_PAGE_VIEW=; Max-Age=0
LADI_CAMP_FORM_SUBMIT=; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW=; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT=; Max-Age=0
LADI_CAMP_CONFIG=; Max-Age=0
LADI_CAMP_END_DATE=; Max-Age=0
LADI_FUNNEL_NEXT_URL=; Max-Age=0
LADI_FUNNEL_PREV_URL=; Max-Age=0
statuscode: 200
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| core.vchat.vn/assets/image/typing_1.gif | 42.112.21.2 | 200 OK | 0 B |
URL HTTP/2core.vchat.vn/assets/image/typing_1.gif IP42.112.21.2:0 ASN#18403 FPT Telecom Company
GET /assets/image/typing_1.gif HTTP/1.1
Host: core.vchat.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://core.vchat.vn/service/chat?code=15049&jwt=569f9758dd2380c4c04e9f90c9ea3c43&key=&ref=https://www.mfgnj.com/&plf=Linux%20x86_64&url=https://www.taixiu.cc/&tit=%F0%9F%8E%96%EF%B8%8F%20NH%C3%80%20C%C3%81I%20UY%20T%C3%8DN%20NH%E1%BA%A4T%202022%20%E2%9C%94%EF%B8%8F%20NHACAISODO.NET&gid=0&gdf=%22%22&fs=%22%22
Cookie: _gta_uni=20221105.132425266.2895535; vnp_guest_15049_132425266=2022-11-05+14%3A26%3A49
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: image/gif
content-length: 2272
last-modified: Thu, 31 Mar 2022 19:36:40 GMT
etag: "624602c8-8e0"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/v2/source/ladipage.vi.min.js?v=1661321691911 | 138.199.37.231 | 200 OK | 0 B |
URL HTTP/2w.ladicdn.com/v2/source/ladipage.vi.min.js?v=1661321691911 IP138.199.37.231:0 ASN#60068 Datacamp Limited
GET /v2/source/ladipage.vi.min.js?v=1661321691911 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.taixiu.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:48 GMT
content-type: text/javascript
server: BunnyCDN-DE-863
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=31919000
etag: W/"63063b09-53755"
last-modified: Wed, 24 Aug 2022 14:51:53 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-cachedat: 08/24/2022 14:52:22
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: 21ce54ed0ec0dfcc47b9fd80331100df
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| a.ladipage.com/event | 52.220.126.168 | 200 OK | 0 B |
IP52.220.126.168:0
OPTIONS /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,ladi_camp_form_submit,ladi_camp_id,ladi_camp_name,ladi_camp_origin_url,ladi_camp_page_view,ladi_camp_target_url,ladi_camp_type,ladi_client_id,ladi_form_submit,ladi_page_view
Referer: https://www.taixiu.cc/
Origin: https://www.taixiu.cc
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 05 Nov 2022 07:26:49 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|