r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18307
Expires: Thu, 24 Nov 2022 11:52:18 GMT
Date: Thu, 24 Nov 2022 06:47:11 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2087
Cache-Control: max-age=101932
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:11 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 11:06:03 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2924
Expires: Thu, 24 Nov 2022 07:35:55 GMT
Date: Thu, 24 Nov 2022 06:47:11 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 06:17:15 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1796
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: tlvwEUrAw2fUs7nwIcHknv+ck9eYc3ig3ov9Px/5nB7RRAzqkhQDm0cK4sHQxLpUBMq7fFAA/1o=
x-amz-request-id: 54DYSF9AYJ6G3QS0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 06:43:18 GMT
age: 233
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 06:47:11 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 06:11:11 GMT
cache-control: public,max-age=3600
age: 2160
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 729
Cache-Control: max-age=95511
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:11 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 09:19:02 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
34.218.164.174101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.218.164.174:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SxH4+/mRpRtVjwK9KbtXOA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: m1Bz/vhiXPjqZAf3rrHpjaZAg2I=
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.min.js
104.17.25.14200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.min.js
IP 104.17.25.14:0
File type ASCII text, with very long lines (32025)
Hash 38a76bd9db7bcd61655d35a37046ad1d
b8aef4bba84d71000810736dd76f643a872ee15c
d4e1d1ccb31338384004beeef249ac102cbd298136b26dfe158ecb7bf4f62937
GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 06:47:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 26646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1499c"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1158035
expires: Tue, 14 Nov 2023 06:47:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lgNe54N6gB%2BXRiYvIQt4AI%2BvKiGDmAAsBr6GBfNIRk7l5Aytx6oI8vLRVTXd0r%2B7O%2FdKRdtys0zmh8TBXdGB%2BQYgU%2FWKlHjwvCzY5%2B5NqorP65HLXKb7eGAKlnokQwBXR3Chvp9Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76f0312039b30afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-includes/css/dist/block-library/style.min.css
103.130.216.66200 OK 10 kB URL HTTP/2 dhlvietnam-express.vn/wp-includes/css/dist/block-library/style.min.css
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (39791)
Hash 3cc7696f4c8caa2b1c7acab0c2ae1515
2df12fe5d820c9c8129c9276e2bb94f9df860331
5ec052aed0f32fed1fc31c9be24e1cd03a7bcdede8ae098af3d1997fdfb51a6a
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: text/css
last-modified: Thu, 07 Apr 2022 12:57:41 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10549
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/plugins/contact-form-7/includes/css/styles.css
103.130.216.66200 OK 621 B URL HTTP/2 dhlvietnam-express.vn/wp-content/plugins/contact-form-7/includes/css/styles.css
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
Hash 85598598d8403d6f36ffb33763088efe
13cee471c0ee733cc5ab17a995fe789b77fe63b1
5ea1e09117bb834b01b00f95d9c0f9935ed8a242987d85e65ee1929bb5b7335a
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: text/css
last-modified: Sat, 19 Dec 2020 10:43:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 621
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/plugins/font-awesome-4-menus/css/font-awesome.min.css
103.130.216.66200 OK 6.7 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/plugins/font-awesome-4-menus/css/font-awesome.min.css
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (30837)
Hash 97c6ce9b4936f66aa388ad33c39aba2d
3f14a7e78fbb4935cf35c20779dc2035531849a9
1eea453c424793fc56ef14093c10b373e3ca8388a70e847394e8084048c5ce38
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/plugins/font-awesome-4-menus/css/font-awesome.min.css HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: text/css
last-modified: Tue, 04 Jun 2019 09:40:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6658
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/plugins/button-contact-vr/css/style.css
103.130.216.66200 OK 792 B URL HTTP/2 dhlvietnam-express.vn/wp-content/plugins/button-contact-vr/css/style.css
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (314), with CRLF line terminators
Hash ae2b61b9a3623418569eb547439d46d8
269ced1346f72fe4c8b5089350d8071081e30693
50606987a6670aa09520bb4c2251e7dd006cf2f84ceb1d38443b468bf60c9dec
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/plugins/button-contact-vr/css/style.css HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: text/css
last-modified: Sat, 15 May 2021 07:13:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 792
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/themes/flatsome/assets/css/fl-icons.css
103.130.216.66200 OK 369 B URL HTTP/2 dhlvietnam-express.vn/wp-content/themes/flatsome/assets/css/fl-icons.css
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (368)
Hash 0a562076dc9cf2d69817b7fc435b06cb
42732451f6f4cae6021f39caa5457d54f3c178b3
28f4c609a2b8bc8fe9f7309107c7c9ba63d2880ff4080924dbf7ff46ab4d79f4
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/themes/flatsome/assets/css/fl-icons.css HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: text/css
last-modified: Tue, 04 Jun 2019 09:40:19 GMT
accept-ranges: bytes
content-length: 369
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/themes/flatsome%20child/style.css
103.130.216.66200 OK 2.6 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/themes/flatsome%20child/style.css
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
Hash 7e525dfd0386ae801fbd3a901a52d77c
7961eba312191105e1428f3b1cb6c5453e822989
ef4b7b05205654a32a817a280f9a3700fff7b2fbe034424b0dada3d091b89fa7
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/themes/flatsome%20child/style.css HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: text/css
last-modified: Tue, 04 Jun 2019 09:40:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2585
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-includes/js/jquery/jquery-migrate.min.js
103.130.216.66200 OK 4.0 kB URL HTTP/2 dhlvietnam-express.vn/wp-includes/js/jquery/jquery-migrate.min.js
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 07:36:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/themes/flatsome/assets/css/flatsome.css
103.130.216.66200 OK 26 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/themes/flatsome/assets/css/flatsome.css
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4823f26a927f0e4540eda711d19b4fef
efa50217e92c7140f14a183161dc20ce04d028cf
a4a9bd313d20d17c4ee6a760687497a156854b65bc895aac05850ffd89947bc5
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/themes/flatsome/assets/css/flatsome.css HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: text/css
last-modified: Tue, 04 Jun 2019 09:40:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 26465
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/uploads/2020/03/logopngdhl.png
103.130.216.66200 OK 2.0 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/uploads/2020/03/logopngdhl.png
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type PNG image data, 687 x 134, 4-bit colormap, non-interlaced\012- data
Hash 2498b27b4eac7d69b4e138b69a989d35
55dc97ee180fb1ec995149c16e128aa359fb6b9e
35c1a9b8febcacea73d5f83430ec4f447b73a19ee2e9bf43150741f970f5aa77
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/uploads/2020/03/logopngdhl.png HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: image/png
last-modified: Thu, 03 Dec 2020 02:15:56 GMT
accept-ranges: bytes
content-length: 2047
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-includes/js/jquery/jquery.min.js
103.130.216.66200 OK 30 kB URL HTTP/2 dhlvietnam-express.vn/wp-includes/js/jquery/jquery.min.js
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (65447)
Hash 34f918ada1fe4f01c5a4b90065bbc37a
a731f6ce2d413805e39ae45994012b1bd5ea1e2b
eba158d5ab26a5a54a3dcfcea1072c636f44e92fc2eb30a3f27cd5be3f891dfc
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: application/javascript
last-modified: Wed, 10 Mar 2021 13:37:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30273
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/plugins/contact-form-7/includes/js/scripts.js
103.130.216.66200 OK 3.7 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/plugins/contact-form-7/includes/js/scripts.js
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
Hash d195c191fe9bd887d9c0731b49295cc0
e3b86a888cacde393fc60365850cb4668f3e2ab2
1b91f8ebf36b0e4196a89c6560bb1e45ed6826232fe463e84c67b2502006443c
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:12 GMT
content-type: application/javascript
last-modified: Sat, 19 Dec 2020 10:43:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3700
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js
103.130.216.66200 OK 4.8 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (12801)
Hash 70cbc7ebb657b8543e7a16850bd72f06
52f910087652491f0aed0d9c23029cf9cde73e25
e001ff5cf15b6ba1d367f441370a2fad7baab087af21c7a22d009ddce1ca342b
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:13 GMT
content-type: application/javascript
last-modified: Tue, 04 Jun 2019 09:40:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4815
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/themes/flatsome/assets/js/flatsome.js
103.130.216.66200 OK 46 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/themes/flatsome/assets/js/flatsome.js
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (19155)
Hash 5bb625eec647f0941f252cb795258ff9
bcd865496213d071ea49f591fe3f89d1038f5b45
c4463babf0baf9df472b4e47928e99177b9bd443eff2d08cde5aa067f08ec663
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /wp-content/themes/flatsome/assets/js/flatsome.js HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:13 GMT
content-type: application/javascript
last-modified: Tue, 04 Jun 2019 09:40:19 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 45669
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-includes/js/hoverIntent.min.js
103.130.216.66200 OK 667 B URL HTTP/2 dhlvietnam-express.vn/wp-includes/js/hoverIntent.min.js
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type ASCII text, with very long lines (1465)
Hash 9c11b8496983473569adb5572dbfc33c
eaa0325a005c0f399a336a34bd31938d334b6cb7
46e7f5427c98ecffa46d1e9fddedcb90ca4e9ac2d8dd583ba6ba1f6dedfb9f13
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /wp-includes/js/hoverIntent.min.js HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:13 GMT
content-type: application/javascript
last-modified: Mon, 03 Jan 2022 13:33:18 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 667
date: Thu, 24 Nov 2022 06:47:13 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/plugins/button-contact-vr/img/zalo.png
103.130.216.66200 OK 4.0 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/plugins/button-contact-vr/img/zalo.png
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type PNG image data, 100 x 95, 8-bit colormap, non-interlaced\012- data
Hash 5b983baae6dbf4b632e7a4694d4076b4
c7b1cafc2270a73ad31975be2c9a7fad38568d73
3a60f04d2c74a4eadad3c5bad7bd0a6d9e038f7725fd31ed03a0e93091362dd1
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/plugins/button-contact-vr/img/zalo.png HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:13 GMT
content-type: image/png
last-modified: Sat, 15 May 2021 07:13:55 GMT
accept-ranges: bytes
content-length: 3998
date: Thu, 24 Nov 2022 06:47:13 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
dhlvietnam-express.vn/wp-content/uploads/2020/03/c26dcf49b605-694x400.jpg
103.130.216.66200 OK 41 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/uploads/2020/03/c26dcf49b605-694x400.jpg
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 694x400, components 3\012- data
Hash 692887853cfa34ce6c6029277e15c9ff
de0ca855020aadf5858eb6d09cc400dd4da70cf2
a5b9ebd7f10550cf17d8ec66c349e86517d86c78f2dac640f18df79d118281d6
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/uploads/2020/03/c26dcf49b605-694x400.jpg HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:47:13 GMT
content-type: image/jpeg
last-modified: Thu, 03 Dec 2020 02:16:06 GMT
accept-ranges: bytes
content-length: 41003
date: Thu, 24 Nov 2022 06:47:13 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash f7801fe8b983652ae788bc952856c2ed
f3898da21792b146a9f856e87ed3520d76277fb8
faa1bc8a9887e2dc694ff645546ea16cb96ac4bd1b0c460aef95f2cced100d6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b6e7c5faf2d24e0d958ab10ee95f6791
16b68ad4b4a2776571697dff8edc9369a3c5c451
1431771f6fd4ad8c028d53a7489acc16b829e32e01d92df5e8c923723024b75a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5321
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:13 GMT
Last-Modified: Thu, 24 Nov 2022 05:18:32 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
dhlvietnam-express.vn/wp-content/uploads/2019/05/logopngdhl.png
103.130.216.66404 Not Found 20 kB URL HTTP/2 dhlvietnam-express.vn/wp-content/uploads/2019/05/logopngdhl.png
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 63061d4e817769743f884821689b0f14
a58cf4c774da3d5e74a640b7a4aefd46010fa270
ec9ad949d4e92dca06e09a25a60a3a2151a2174a27803433f5106a0f6ed63037
Analyzer Verdict Alert openphish DHL Airways, Inc.
GET /wp-content/uploads/2019/05/logopngdhl.png HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/gioi-thieu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
link: <https://dhlvietnam-express.vn/wp-json/>; rel="https://api.w.org/"
content-length: 19672
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 06:47:13 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4889
Expires: Thu, 24 Nov 2022 08:08:42 GMT
Date: Thu, 24 Nov 2022 06:47:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4889
Expires: Thu, 24 Nov 2022 08:08:42 GMT
Date: Thu, 24 Nov 2022 06:47:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4889
Expires: Thu, 24 Nov 2022 08:08:42 GMT
Date: Thu, 24 Nov 2022 06:47:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4889
Expires: Thu, 24 Nov 2022 08:08:42 GMT
Date: Thu, 24 Nov 2022 06:47:13 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash b75c00c21f5854618bc06d14b8d83c40
ae14f585ae9682e6c2fad146c12c00ee4d83e8f3
a8e7585e49b01a64520051f8d38f499c8cb82645e3d146e6ca34378eac684e69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8E7585E49B01A64520051F8D38F499C8CB82645E3D146E6CA34378EAC684E69"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4889
Expires: Thu, 24 Nov 2022 08:08:42 GMT
Date: Thu, 24 Nov 2022 06:47:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb94ecb5881a7e49d964e4287d11e7a4
4b131a189db1b615e2519a28cad83d78297ab67f
f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K4A6bdVv0gauO3YWTEPWMS6fhuB9CZ6o5dUL-O6G5-NzqOGQRzQLUw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:04 GMT
age: 32289
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a9a0208-d5ae-4e15-bd4d-c5c19edf354e.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a9a0208-d5ae-4e15-bd4d-c5c19edf354e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1404c6b865808ea73ca5b2062fefecc0
c66fd3a955cd81ab93474fb1aabc4c19d5775bcc
0a92ca52eff8baa4ba43bdb29008c59bcd37c55e78ac657de25819e980ea8e96
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a9a0208-d5ae-4e15-bd4d-c5c19edf354e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5545
x-amzn-requestid: 215b9f9b-4941-4c13-a1d4-6fdc5b453fad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtEkIIAMF3gg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-27081b9e0dc1de6522299e4e;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: SFO53-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Xr183esurgfu-4jjQtCS5s_np_CtltrPx48zpq-NMwZbcGnAwTxtkg==
via: 1.1 68914922a694954838e87fc9b0aa10fe.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:51:07 GMT
age: 32166
etag: "c66fd3a955cd81ab93474fb1aabc4c19d5775bcc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0856fdb55f19f03a1bec38b3d6e0ac77
89accd230fba95fe0049678070817b36ead015fa
17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rrs7G6Wto6iY0rT6KsKwKAOPJjehXqD0jHZrR_eaiqpepQILFr7Dtw==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:07 GMT
age: 32286
etag: "89accd230fba95fe0049678070817b36ead015fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YJuHCuUgkLuFFiQUlrPWgv9grHznufMTU08hi4ZMpQTBmou6BGWrhQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:52 GMT
age: 32361
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:08:16 GMT
age: 31137
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8f6118fc03f31862ff68fef8a2b9a7f
318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73
cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8089
x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b0QQyECioAMFzdQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0
x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ngJvyUydpRDSiYy9kfeh8JmydmR_K8mjfZtGLgT0qeE2JaABbDMSaQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:06:51 GMT
age: 31222
etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash b6e7c5faf2d24e0d958ab10ee95f6791
16b68ad4b4a2776571697dff8edc9369a3c5c451
1431771f6fd4ad8c028d53a7489acc16b829e32e01d92df5e8c923723024b75a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5321
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:13 GMT
Last-Modified: Thu, 24 Nov 2022 05:18:32 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3919.0611740459476!2d106.6621949141054!3d10.806626761592229!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x317529640317edcb%3A0x8725280a03fd1e30!2zMjEvMzggVHLGsOG7nW5nIFPGoW4sIFBoxrDhu51uZyA0LCBUw6JuIELDrG5oLCBUaMOgbmggcGjhu5EgSOG7kyBDaMOtIE1pbmgsIFZp4buHdCBOYW0!5e0!3m2!1svi!2s!4v1603926439707!5m2!1svi!2s
142.250.74.164200 OK 1.0 kB URL HTTP/2 www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3919.0611740459476!2d106.6621949141054!3d10.806626761592229!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x317529640317edcb%3A0x8725280a03fd1e30!2zMjEvMzggVHLGsOG7nW5nIFPGoW4sIFBoxrDhu51uZyA0LCBUw6JuIELDrG5oLCBUaMOgbmggcGjhu5EgSOG7kyBDaMOtIE1pbmgsIFZp4buHdCBOYW0!5e0!3m2!1svi!2s!4v1603926439707!5m2!1svi!2s
IP 142.250.74.164:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1797)
Hash 467f4c92477020ec91db6dad11dcbf93
52cc61d268035172d97fcb95fcc10d9b066441d5
54033c0a448592aa5877fa5bc54e228b2daa83468c1d24786ba2aa8943a28c72
GET /maps/embed?pb=!1m18!1m12!1m3!1d3919.0611740459476!2d106.6621949141054!3d10.806626761592229!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x317529640317edcb%3A0x8725280a03fd1e30!2zMjEvMzggVHLGsOG7nW5nIFPGoW4sIFBoxrDhu51uZyA0LCBUw6JuIELDrG5oLCBUaMOgbmggcGjhu5EgSOG7kyBDaMOtIE1pbmgsIFZp4buHdCBOYW0!5e0!3m2!1svi!2s!4v1603926439707!5m2!1svi!2s HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Thu, 24 Nov 2022 06:47:13 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-NNn_5ygGvugh4kROwcJm8Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 1006
x-xss-protection: 0
server-timing: gfet4t7; dur=223
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yB/l/0,cross/Z8HwmBQAssQ.css?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 4.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yB/l/0,cross/Z8HwmBQAssQ.css?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (4431)
Hash b113b03774dd681750e13a29e21bb731
7f04db6a230a826eecad3667b4e770b9e72ec31e
193918cbf46245338989996fcd9c0e76f0625e1a39f5ba648a2fac2960a1b16c
GET /rsrc.php/v3/yB/l/0,cross/Z8HwmBQAssQ.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 23 Nov 2023 18:25:56 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: sROwN3TdaBdQ4Top4hu3MQ==
x-fb-debug: 2+7xHS/eDx07NmhPNkyywIjCCVloU4QlzRZJJgKsbCgCjIDfHNXfHrBmU+/Xx8tnlHsCvyab2/94fUDvDqkzFw==
priority: u=3,i
content-length: 4377
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 8.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (2905)
Hash 7734711815478192096a4df90abbfa01
ea16129c6f54227d9d01bf3421e68863e75ffd7a
22cf4b88ca3b9208f44974e02dc6f784021871877121c7d03b310d7264ced0e3
GET /rsrc.php/v3iLl54/yh/l/en_US/m3C9wUm7Rze.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 06:17:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dzRxGBVHgZIJak35Crv6AQ==
x-fb-debug: NPG7cUx7io88tftsvvRij0CszNI0CPq7sIm2xUD4riF1w4KATain+ASLapi2Soo40inw5jzizwlumjWHHhA6UQ==
content-length: 8360
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 338 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (327)
Hash 76f593e842677f73cd0a06232874b2c3
25a13f79478d5a0e286a2299dca2f3b296463079
74dcbe026002f10b703960a500b50dabe518862e568a9e689dec7afa243fa44d
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 06:18:30 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dvWT6EJnf3PNCgYjKHSyww==
x-fb-debug: DZhU5MwmbbIIVGRdiUxU0LCjP+Pg/Lu5l9kyPRqKLtZFG3Mdj7yoWkGHBpn/J6Hl6OgtOkcrGjypCwpY1KmM2A==
priority: u=3,i
content-length: 338
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 8.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (9885)
Hash 71e8e93b5e55f2010013b0814f4e3ae5
4732ba3acc539a0e9ff12d08c1b5a16f535bd594
b710ea52f812ac39c5195f0c170142bfcfcc274aa6b250a29a1ed1c59ea58556
GET /rsrc.php/v3/y-/r/y841rZ2iNa0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 06:28:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: cejpO15V8gEAE7CBT0465Q==
x-fb-debug: dx53roeeU5CWrw0j2jeWexOAWoUT/r66xg58VI72Hevb7bsVEGBXTTjyH1qf06WxMAYufHBre3cxcv6awJ+KwA==
priority: u=3,i
content-length: 8748
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fvanchuyenhangdicacnuoc&tabs=timeline&width=340&height=500&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId=587658348482843
157.240.200.35200 OK 38 kB URL HTTP/2 www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fvanchuyenhangdicacnuoc&tabs=timeline&width=340&height=500&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId=587658348482843
IP 157.240.200.35:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18901)
Hash 5cfd47900b40124791afa32b1a5490e0
9f66e24e62c9bac1c1fa20c0ac0c9b62d56dcb00
80b622cf0204a69b50615f3ccd8cd02632a43a36414fb63ded97676b8cf96586
GET /plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fvanchuyenhangdicacnuoc&tabs=timeline&width=340&height=500&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId=587658348482843 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: S+1xt8JlmhbfCsH7hDNQe/jazNP+C6stikZsS52miYoYlEAdhnNp1BJTlWXo7jDH50uedmByGukQ72VXJO/hJw==
date: Thu, 24 Nov 2022 06:47:13 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 6fe23ae41ec0cbb3d702b1c64028cd13
e0e4d852454a5eae80a797aaa6f0991834dcc19a
47a12f27ec1ec271d17295d822c69d1b49c6a24107f3f7ce06a320688fae7f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (4057)
Hash 571700b5a1e8db88d5d79007a910b962
07102cc5f2b19f190830664e1ec6718efb33c011
ecccefedaf39e094079b22880aba987993015fbf1b70fd3c63bc57dc10685f11
GET /rsrc.php/v3/yW/r/0aTHA2C1d6g.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 06:04:49 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: VxcAtaHo24jV15AHqRC5Yg==
x-fb-debug: NT+M5oXO8pwkIMnEqGwapf+WVRORcDdI9fHky/3paBQ/wwz6CTFWuVr8ViFofTrTwDWDAUG1I14mocRnBu+xzA==
content-length: 7238
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yr/l/0,cross/nWIU5H2unqI.css?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 3.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yr/l/0,cross/nWIU5H2unqI.css?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (3040)
Hash 67341f39b2ce247e697a10779f128a4d
f02c4778acb39deb48e616259ba730fd59a19fc3
7e7f121969a70cc7962e6b31531a1afca8d5492879b9b52291b2c8014ca0bf76
GET /rsrc.php/v3/yr/l/0,cross/nWIU5H2unqI.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 23 Nov 2023 18:25:56 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: ZzQfObLOJH5pehB3nxKKTQ==
x-fb-debug: xXc3tB6KW2GlKJu1jGtCJl1gxVhj5AQ85x7wZ7SmqXL5xeWj0x3cQ1IVai2V73sS60cXq/nCIPlGg6/Y4DvsgA==
priority: u=3,i
content-length: 3399
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (1984)
Hash 16f083b23b565db9d2f20d1ad75933c1
6d74ad139c96b1e3fc9d541419788b5b4893ec9a
36b909cd9132a8996a1bbb221d05217c31506a6951bb408deeea6aa612dc4200
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 06:07:00 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FvCDsjtWXbnS8g0a11kzwQ==
x-fb-debug: bP7Hn62kFAjWr7jSa5xbIHjvtrymCc5+/BWiU8jmZWvoE9UNywvxV+fazhrnkAfvO75toNN1+8hqwJRQpK4bpw==
content-length: 1657
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (5542)
Hash 0765d76d746716156d53d36ee6f80836
17e1546f87cc6417615caa10dcbbcb699c59471a
f1e6af63ae9ff0385126b72a492b0d34709514dd4c00074a1be28272c253d4f8
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 03:38:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: B2XXbXRnFhVtU9Nu5vgINg==
x-fb-debug: wiiQpSv+hINmxdmDh50qRYLH0Cc0/G7L/Ii7uM69ujJ9255olUBP7wXxq1ttCrD/GuMczOSWMrxFCttWIBEa7Q==
priority: u=3,i
content-length: 12369
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type C source, ASCII text, with very long lines (8741)
Hash dfb29285817fca7b068ba0ec98aa2392
78cd49585da28a245a096781c8e0fada59cf2b72
2c4a3a46d7dfaf97bbc16a2b93470d1b3382c0da3f44dca0c987a3384cee43d3
GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 06:07:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 37KShYF/ynsGi6DsmKojkg==
x-fb-debug: W8oNQ20RRci19DZRKo9uDRApdh+0a2rAY6qTH85H4Hi9P5kV6tLh8k37VYg3Sb5ZwVDl6wz3D24n8ZMMRcEPrQ==
content-length: 16262
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y8/r/qc0dVyw0ZD0.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y8/r/qc0dVyw0ZD0.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (18622)
Hash 151e87d38f4f425e44d9c851c9aecf05
762111e5095f5354be95b98ad476f6e7161ce6b1
f236f289f38c8081b496e0537ed3b2c66822e7a743f5d9d4959f955c64b0b2b0
GET /rsrc.php/v3/y8/r/qc0dVyw0ZD0.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 17 Nov 2023 16:54:49 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FR6H049PQl5E2chRya7PBQ==
x-fb-debug: XKYCuFqqNH0kZrgnBK9d939R6pWs+fcIzk26id8p6lRkOvr6n2vQtYYz0yMcJoZ8xMvN0Ztyy0Cqwk+0Rwgf4Q==
content-length: 91088
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:13 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/webfont/1/webfont.js
142.250.74.42200 OK 5.4 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/webfont/1/webfont.js
IP 142.250.74.42:0
File type ASCII text, with very long lines (2134)
Hash 30ca3165d143baf2835023bfcf463450
62c662c0873b79a314c040fef28dcd29abb14480
4f405d00e8ced09d5826e3e070b7e4d3f3556f856ca790b0b4a2c2eaaf58d33b
GET /ajax/libs/webfont/1/webfont.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 5437
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:34:16 GMT
expires: Wed, 22 Nov 2023 18:34:16 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 130377
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto+Condensed:regular,700%7CRoboto+Condensed:regular,regular%7CRoboto+Condensed:regular,700%7CRoboto+Condensed:regular,regular
142.250.74.42200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto+Condensed:regular,700%7CRoboto+Condensed:regular,regular%7CRoboto+Condensed:regular,700%7CRoboto+Condensed:regular,regular
IP 142.250.74.42:0
Hash 54e85e150d732ab043aadb9b0911a5b8
8c422f122e2f41021c390e0104121cea49ddf4d6
88e86150a7cab410a533717143ca8d644aa84250c38b7a37e70943c494752392
GET /css?family=Roboto+Condensed:regular,700%7CRoboto+Condensed:regular,regular%7CRoboto+Condensed:regular,700%7CRoboto+Condensed:regular,regular HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 06:47:13 GMT
date: Thu, 24 Nov 2022 06:47:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yw/r/UXtr_j2Fwe-.png
157.240.200.14200 OK 573 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yw/r/UXtr_j2Fwe-.png
IP 157.240.200.14:0
File type PNG image data, 13 x 39, 8-bit colormap, non-interlaced\012- data
Hash d3b686ff6004b431d5019e4b51a8cc0d
34ec288bdcad2eada81c75960439bf60b95eb285
96e3e8dfde6b1042514824bac1b44282d4a76bac028f2d767f6534dce2cf3db0
GET /rsrc.php/v3/yw/r/UXtr_j2Fwe-.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yB/l/0,cross/Z8HwmBQAssQ.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: 07aG/2AEtDHVAZ5LUajMDQ==
expires: Tue, 14 Nov 2023 03:55:53 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: TZBiwXkso8D8sFxlRc9hc3Ub2zLVnEiqfFwHmX4NcqhX8L0lLNh5EAnRfU65yLiWN5UxgVTPe4b8IryD0mHk6g==
content-length: 573
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:14 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ye/r/gXIkvKySvHd.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 48 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ye/r/gXIkvKySvHd.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (65436)
Hash e6a1c2b72561acc34e73ee6c6e66c5cb
8a3faa653dc483c422d17de2bd10651a50a92b0e
44a06a90a189a42702274306c21fd30ae6e9a017ddcf687d3643e7b57ed2161b
GET /rsrc.php/v3/ye/r/gXIkvKySvHd.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 16 Nov 2023 21:50:38 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 5qHCtyVhrMNOc+5sbmbFyw==
x-fb-debug: qnyFVicEAg/x3jSRGz9Enxqkuq2rosSCCRfEhjpWdegcaxPL6TIPXOpwNKc+c9o5JhL05E+Smk98UwF0zv944A==
content-length: 47718
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:14 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
142.250.74.42200 OK 23 B URL HTTP/2 maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
IP 142.250.74.42:0
File type JSON data\012- , ASCII text
Hash e3981ca10169a319d5aa062bf43a5fa1
2c6ed584767b65688ce99b1ebe1a3b7448a67421
8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 24 Nov 2022 06:47:14 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.google.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15660, version 1.0\012- data
Hash d7b0b953a50fddaa88089b5b787cf719
2f85bc568b27659a3d6452f58f9fd7678450326d
e79c1c1a140e6afb861074c70392db54cc65a06050de2a69162ab94eb95b0516
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dhlvietnam-express.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15660
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:17:43 GMT
expires: Wed, 22 Nov 2023 22:17:43 GMT
cache-control: public, max-age=31536000
age: 116971
last-modified: Tue, 19 Apr 2022 18:42:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.gstatic.com/maps-api-v3/embed/js/51/1/intl/vi_ALL/init_embed.js
142.250.74.163200 OK 69 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/51/1/intl/vi_ALL/init_embed.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (2669)
Hash 498dedf799b4e0586b341423237d226e
4e7678af5b75b9f974d098b5b31d688fab71784f
4a2952a47e6df066b16d68b6f44dd8ce68584e5d2fe87b517d900bbcf10df949
GET /maps-api-v3/embed/js/51/1/intl/vi_ALL/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 69073
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 07:17:28 GMT
expires: Thu, 23 Nov 2023 07:17:28 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 21:36:22 GMT
content-type: text/javascript
age: 84586
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCoYb8td.woff2
216.58.207.195200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCoYb8td.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 11760, version 1.0\012- data
Hash f54251ea804647e0203e453359a69fb1
c02db1a2028be922135239168d270579220844a0
b7eaf0683081d1ec178eafefff2c407475fe4e69e0d7104e0121f72dcdd1c4d2
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCoYb8td.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dhlvietnam-express.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11760
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 22:20:16 GMT
expires: Wed, 22 Nov 2023 22:20:16 GMT
cache-control: public, max-age=31536000
age: 116818
last-modified: Tue, 19 Apr 2022 19:07:19 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yH/r/xgVgalBG80z.png
157.240.200.14200 OK 1.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/r/xgVgalBG80z.png
IP 157.240.200.14:0
File type PNG image data, 24 x 24, 8-bit colormap, non-interlaced\012- data
Hash ac1e1c4d6f16359701b059ed4e8246b4
ff19b30a3b3d8d1765c239b25dbc98cb3263786a
45444d590a67d30e8b2fde01bb6482f829383b64bf14a4b19b86e22fdc319fbb
GET /rsrc.php/v3/yH/r/xgVgalBG80z.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yr/l/0,cross/nWIU5H2unqI.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: rB4cTW8WNZcBsFntToJGtA==
expires: Tue, 14 Nov 2023 06:15:41 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: tLV0iZ5x8wbibQGutXzZAbz2cNnsdjvdseCnR26ARY+2VvhwKXj2tGcRbdZTLPE0+uEcKNbjMo3XBV6YcajN4A==
content-length: 1315
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:14 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCsYb8td.woff2
216.58.207.195200 OK 5.6 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCsYb8td.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 5564, version 1.0\012- data
Hash d4d88a25c6405b91c0d8cb3fa6c9ca7b
06a7623d5b742d64372240e2c63c1c1330e63b90
bf3fbb19e9654fa5727bc1312cd4b8bd54d23adb70168da4315cead4666f7dc8
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-32meGCsYb8td.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dhlvietnam-express.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 15:23:54 GMT
expires: Fri, 17 Nov 2023 15:23:54 GMT
cache-control: public, max-age=31536000
age: 573800
last-modified: Tue, 19 Apr 2022 19:11:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-1927DRs5.woff2
216.58.207.195200 OK 5.7 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-1927DRs5.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 5696, version 1.0\012- data
Hash 85fc330e5d5f44827f71c9c87e20fc08
a12bad7ed537f664c3b4ec0c501b3cce2df55921
a443599b665cfcd9a13fc46056624c65f518c06ee47925c4a940c58164b1b799
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-1927DRs5.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dhlvietnam-express.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5696
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 05:45:07 GMT
expires: Thu, 23 Nov 2023 05:45:07 GMT
cache-control: public, max-age=31536000
age: 90127
last-modified: Tue, 19 Apr 2022 18:51:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15700, version 1.0\012- data
Hash 3d7f7413fca69bff4d231ebdc50aaab0
cb18e7943b6a8a0e3672d7242197c19a226b92e8
6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
GET /s/robotocondensed/v25/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dhlvietnam-express.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:51:51 GMT
expires: Thu, 23 Nov 2023 18:51:51 GMT
cache-control: public, max-age=31536000
age: 42923
last-modified: Tue, 19 Apr 2022 18:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 572 B IP 142.250.74.3:0
Hash 1d0030fbe1f10313a6efffb136e68f28
4c085640392709d13b2d6b34d6197701a1b074ca
82279d2270506c6d60b321876d08cb127c9f7aa6649f476144790c44fb937239
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 06:47:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/wjovvOdFhE4.css?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 3.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/wjovvOdFhE4.css?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type assembler source, ASCII text, with very long lines (2642)
Hash 9997cc1cfe1fb36e7672a0c847cc32d2
b4020349331045ac954b275105722375d4a7cfe5
34c8b6ae21bcadd2dc9881ee934388a27247b125a5f70e48fa940a3bf4d29f7d
GET /rsrc.php/v3/yY/l/0,cross/wjovvOdFhE4.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 21 Nov 2023 17:07:35 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: mZfMHP4fs252cqDIR8wy0g==
x-fb-debug: 90FXHgIr7LgdyW54GqSMQoG0wQtO4tukUhljbWkixiA7PUmmFd7keSDZkbhXRtrj0+7oZzj5B5EzPT3e4ucIbA==
priority: u=2
content-length: 3411
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yJ/r/qnSc4RA_g8a.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 30 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yJ/r/qnSc4RA_g8a.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0b1eb83effbda77a4cfad3c662952622
2a2d5699ef9088105a099a89d47ae3b018d8790c
0951735c0750b152f9de4dc16e309223bfc163abb28dad2401e5276bfcdc8bae
GET /rsrc.php/v3/yJ/r/qnSc4RA_g8a.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 20 Nov 2023 17:50:35 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: GGBiDoZfKdKDyP/m+gpS5g==
x-fb-debug: enRBDeuIuOzHda+T6ZKAtlVW1powkVjpEGI4tmtPXoq+kOtT/XNVsZ/TBVMDBMGmdPvJZcnrT33NJSbOD2lBGA==
priority: u=3,i
content-length: 1022
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yD/r/u-BBUt81dFY.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yD/r/u-BBUt81dFY.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (15336)
Hash 1a57684b1bbad1c3239fa33bfb7bf4c9
5e2fc164f520b2e61813da6103e1026ff078c779
4a6c3da8ef6e418a2a3eabb2c60512dc28ce3b5daff71e3c2d1fa93af50b75ba
GET /rsrc.php/v3/yD/r/u-BBUt81dFY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 16 Nov 2023 23:59:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: GldoSxu60cMjn6M7+3v0yQ==
x-fb-debug: ddaPRBL+2G5b7FAwz4+y0/kjDW+z+AfkcCszusmpVHnFmd1YyULVV7FH0z+MPflFsAfzryYY7REoOw8uBrYmeA==
priority: u=3,i
content-length: 16255
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yk/r/lNQKzORH_3o.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 7.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yk/r/lNQKzORH_3o.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (4643)
Hash 3d04fb0bfeec2de76f7a043b3c9d381d
42f49d096e57efaf7d7fe8332d40c4c72da97f7e
81b535cf6d8acd9c9841ae1fc8750ef9c4ee0892e11ed6edb30747f9a4b5d3d2
GET /rsrc.php/v3/yk/r/lNQKzORH_3o.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 18:09:51 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: PQT7C/7sLedvegQ7PJ04HQ==
x-fb-debug: ww0Xi9Utahc6hfg2xq/bjaIJgBYj5x/K092WWy7BPcHdcUiu+01AuLYO0MegWkvHa7KEuokuXE+PYXbytro7RQ==
priority: u=3,i
content-length: 7564
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 1.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (1491)
Hash e0e53f8b49bf0ffb37c775b9c288a5c2
ade21104d506e6c9d4946e1afc9b88d80da7333c
5aa28d70ec74ee4b45e03fb453bb4adc23da65fbeb93c581411f0076b1444eb0
GET /rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 14 Nov 2023 05:41:53 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 4OU/i0m/D/s3x3W5woilwg==
x-fb-debug: GQYUhx/vnAkhYEJuTKdd+TPEhoXlxLFvlcSxuNJuFvOu74tHH3chlA9TtOM13V2U3HX7e2VpEbF41orIqlBM2Q==
priority: u=3,i
content-length: 1286
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yP/r/UDmYwShqrj4.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 6.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yP/r/UDmYwShqrj4.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (4488)
Hash e1fd0906cb6f69a93c5a8d63a103bd5b
e0eae24eee2fdffa9675690d7afb66206ac58bf2
a0e3ab716081eba89c66fcac1803018b9ab26945db58bcd48eec34f0a5ad2d5c
GET /rsrc.php/v3/yP/r/UDmYwShqrj4.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 23 Nov 2023 18:15:24 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 4f0JBstvaak8Wo1joQO9Ww==
x-fb-debug: K4sMxFzRJ6uBKLjwtnYv3PHD7nca3WG371ClCTTGiQNIT69yg14hM933k2CEW8bCLgmkvwrzFTidKg0FGWhCPg==
priority: u=3,i
content-length: 6378
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yq/r/6pd4iTcqYl_.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 5.0 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yq/r/6pd4iTcqYl_.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type C source, ASCII text, with very long lines (10494)
Hash 092b5c28d77f2d11674919ed34ea81a0
4c4f97066f7b733e29643697757417a0e2bee99d
1533d3e4e835168cd2456621fe6cf46db9255586262b7703b182155fa90e33d7
GET /rsrc.php/v3/yq/r/6pd4iTcqYl_.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 16 Nov 2023 23:29:02 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: CStcKNd/LRFnSRntNOqBoA==
x-fb-debug: yJCEkZ80cU8IKuvrUr4gjhyiwvMADyZ34gwf/JrGP0B3pcOOqAAdaCdnxsuzsj7MTwccOv3ZSXqhPbnGBk/0eQ==
priority: u=3,i
content-length: 5016
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 6.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (5962)
Hash ba1e18b79724944f946c55a1dc9d4682
f8298c56161c54c767a04a7d6536c62c5214d497
149e9937131b6e28ab9b176a7b5e52780b3bcf86befbdc1f9e6ca7157a756965
GET /rsrc.php/v3iEBX4/yg/l/en_US/L3rRYxmZ_M5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 06:21:23 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: uh4Yt5cklE+UbFWh3J1Ggg==
x-fb-debug: I4OI/YyAqyNT9urRbC22CjVh9TSnvPs6Wb/8xgAylwc09Lq1nTTWpBSA2FIoa7DDk9DHLBet8CP0COpP5zR/eA==
priority: u=3,i
content-length: 6746
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yH/r/MDNj1eUK5bV.js?_nc_x=Ij3Wp8lg5Kz
157.240.200.14200 OK 10 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yH/r/MDNj1eUK5bV.js?_nc_x=Ij3Wp8lg5Kz
IP 157.240.200.14:0
File type ASCII text, with very long lines (18915)
Hash fa4ad18d1fc36fa88e3680c20e1d1a61
bde4d3abf73cbd341a347979ac28fad8b2835910
141314a07b3470d7bbbec5a711fb10382865d915a1450620c15de95501b96606
GET /rsrc.php/v3/yH/r/MDNj1eUK5bV.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 04:02:35 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: +krRjR/Db6iONoDCDh0aYQ==
x-fb-debug: lGYYo8474lNJHVtrYzQWFvzNtVup4R20M2oYa/2uI0LJszkPSutvtdI9epKRWo3+X9tUfygp5zaCnmogyxhLLQ==
priority: u=3,i
content-length: 10426
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/301592539_616301136758582_484840713923802203_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=IuYOXUNT-7MAX9OY9Pd&_nc_ht=scontent-arn2-1.xx&oh=00_AfDMBJnZDJeSHJhZK-WTwC76GAFAsrl7iYetQjKrRmHKmw&oe=63833A5A
31.13.72.12200 OK 5.5 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/301592539_616301136758582_484840713923802203_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=IuYOXUNT-7MAX9OY9Pd&_nc_ht=scontent-arn2-1.xx&oh=00_AfDMBJnZDJeSHJhZK-WTwC76GAFAsrl7iYetQjKrRmHKmw&oe=63833A5A
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 2feb08c81946239a8f6b0de7bbd44321
a0555fa0e979822d0622c55c005b2e5a9eed65e4
645efdebb2990a4688bf9e76579787b7e1d6f379c6ec1bc8e29942f3d1d8298c
GET /v/t39.30808-6/301592539_616301136758582_484840713923802203_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=IuYOXUNT-7MAX9OY9Pd&_nc_ht=scontent-arn2-1.xx&oh=00_AfDMBJnZDJeSHJhZK-WTwC76GAFAsrl7iYetQjKrRmHKmw&oe=63833A5A HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Fri, 26 Aug 2022 03:05:26 GMT
x-haystack-needlechecksum: 149496488
x-needle-checksum: 1312231415
content-type: image/jpeg
content-digest: adler32=2882124626
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 5515
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yD/r/MKQzjVd1bVq.png
157.240.200.14200 OK 548 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yD/r/MKQzjVd1bVq.png
IP 157.240.200.14:0
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 976d05eb572dff7402dab33e7868d1a3
6de347f502856325e90de1fd137382cc2f61dc75
83b7d2afe243941c2527b2d875836ad2cb864290690dd1b253389de3f7bc7da4
GET /rsrc.php/v3/yD/r/MKQzjVd1bVq.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yr/l/0,cross/nWIU5H2unqI.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: l20F61ct/3QC2rM+eGjRow==
expires: Tue, 14 Nov 2023 06:21:31 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: j+csjbnGhwnMq1Z+QZJcVY5Gs6orx6lZ0HmAmWDJmX9iKWYUMu5Maq0JFIuLupBOGtITevrqna3ip/Lwf3VzRw==
content-length: 548
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/298566131_609517687436927_317029339719206748_n.jpg?stp=dst-jpg_p118x118&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=KhpZO3l-ct4AX-QH6mA&_nc_ht=scontent-arn2-1.xx&oh=00_AfAiwoXQQKZmEhJoSZO9t_Rm3rOhtYYqQ-UXg_DivBv7-w&oe=63841349
31.13.72.12200 OK 6.8 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/298566131_609517687436927_317029339719206748_n.jpg?stp=dst-jpg_p118x118&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=KhpZO3l-ct4AX-QH6mA&_nc_ht=scontent-arn2-1.xx&oh=00_AfAiwoXQQKZmEhJoSZO9t_Rm3rOhtYYqQ-UXg_DivBv7-w&oe=63841349
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 157x118, components 3\012- data
Hash 02f539362655a5af95225ba53eaca672
1876600fb269acf10c3fdaea76579dd5f70964f2
2a35161271adb39ac814ac28612fe2a4895b62f95e75a6163e23c34f5d1c12e0
GET /v/t39.30808-6/298566131_609517687436927_317029339719206748_n.jpg?stp=dst-jpg_p118x118&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=KhpZO3l-ct4AX-QH6mA&_nc_ht=scontent-arn2-1.xx&oh=00_AfAiwoXQQKZmEhJoSZO9t_Rm3rOhtYYqQ-UXg_DivBv7-w&oe=63841349 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Tue, 16 Aug 2022 01:52:32 GMT
x-haystack-needlechecksum: 3557441252
x-needle-checksum: 3417095100
content-type: image/jpeg
content-digest: adler32=1952911677
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 6828
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yx/r/re1hPxQECWj.png
157.240.200.14200 OK 2.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yx/r/re1hPxQECWj.png
IP 157.240.200.14:0
File type PNG image data, 25 x 281, 8-bit colormap, non-interlaced\012- data
Hash 8bb456647dce20d407811b3ddcae0999
c4df3fb38a35fd018a2f0f7a7009fa9aacac40db
fcdaa4a9116d5ab88233e3349fea2428f2a4c46b3538900117cef9c8c1d31f0c
GET /rsrc.php/v3/yx/r/re1hPxQECWj.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yY/l/0,cross/wjovvOdFhE4.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: i7RWZH3OINQHgRs93K4JmQ==
expires: Tue, 14 Nov 2023 06:13:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: ty6I6yUzBnCtUpPsL/223uIgFBo5Yb0RD+rqPgc2JHDstYItuOV3HL1IwhLWQk32zodp3hXO3w57Y+6Jn1b1XQ==
priority: u=3,i
content-length: 2674
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292619560_586063783115651_2429685617612456693_n.jpg?stp=dst-jpg_p118x118&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=gU4q2wPfDYYAX8rX7Kc&_nc_ht=scontent-arn2-1.xx&oh=00_AfCxq6Qml96ZO6P14QBLt8D1KQaataNdpNIcjWh6aa4z_g&oe=6383CE94
31.13.72.12200 OK 6.3 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292619560_586063783115651_2429685617612456693_n.jpg?stp=dst-jpg_p118x118&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=gU4q2wPfDYYAX8rX7Kc&_nc_ht=scontent-arn2-1.xx&oh=00_AfCxq6Qml96ZO6P14QBLt8D1KQaataNdpNIcjWh6aa4z_g&oe=6383CE94
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 157x118, components 3\012- data
Hash 8c047ca5e2c6cae804219bfb836b43a8
a23ad076c270001230492d48f31cb9b1deed155b
0c9fb3b6195d560a1ef468eac3f8d8fcd63f8308485caa9b6eb54b9e534c4e50
GET /v/t39.30808-6/292619560_586063783115651_2429685617612456693_n.jpg?stp=dst-jpg_p118x118&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=gU4q2wPfDYYAX8rX7Kc&_nc_ht=scontent-arn2-1.xx&oh=00_AfCxq6Qml96ZO6P14QBLt8D1KQaataNdpNIcjWh6aa4z_g&oe=6383CE94 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 11 Jul 2022 01:36:09 GMT
x-haystack-needlechecksum: 2386946242
x-needle-checksum: 806332544
content-type: image/jpeg
content-digest: adler32=4006425130
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 6326
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t72/1/16/1f538.png
157.240.200.14200 OK 226 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t72/1/16/1f538.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e82e47c36913fc7946b03cca026e758
dab6dd30aea4ec6e3ef4da32ca4a0325dfc8f750
9468934858a22bff7c1aa268146e8097d141095f73cbbc3366e8883c9c79e44f
GET /images/emoji.php/v9/t72/1/16/1f538.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: LoLkfDaRP8eUawPMoCbnWA==
expires: Mon, 13 Nov 2023 06:26:55 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: 7AosSDU5g/RVQSN5PDyoBC3VeRpXi+3snYlxYvlNVsc7WTsqM01iif7BbcMmIZli6QGzcPQLj4ac+BH7DhYNDQ==
content-length: 226
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/300588977_616300843425278_39314081029540348_n.jpg?stp=dst-jpg_p118x118&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=OGNqpjHbcfsAX8js5G3&_nc_ht=scontent-arn2-1.xx&oh=00_AfBQO5cGEAgPItQqCoNg0AXTUdrIVQMKgquSpFVw3eUbDA&oe=6384B15E
31.13.72.12200 OK 7.6 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/300588977_616300843425278_39314081029540348_n.jpg?stp=dst-jpg_p118x118&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=OGNqpjHbcfsAX8js5G3&_nc_ht=scontent-arn2-1.xx&oh=00_AfBQO5cGEAgPItQqCoNg0AXTUdrIVQMKgquSpFVw3eUbDA&oe=6384B15E
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 157x118, components 3\012- data
Hash bc6076a2fc575dfe023ab118452972b9
0067f72bd2bc4256e6ef405faea8c3a86733e75d
35aa30c27ef0cd97e5dc6745b1fb23ed1a527e72ecbf525fb5c2d87d4236f39b
GET /v/t39.30808-6/300588977_616300843425278_39314081029540348_n.jpg?stp=dst-jpg_p118x118&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=OGNqpjHbcfsAX8js5G3&_nc_ht=scontent-arn2-1.xx&oh=00_AfBQO5cGEAgPItQqCoNg0AXTUdrIVQMKgquSpFVw3eUbDA&oe=6384B15E HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Fri, 26 Aug 2022 03:05:09 GMT
x-haystack-needlechecksum: 331647940
x-needle-checksum: 759276735
content-type: image/jpeg
content-digest: adler32=654710548
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 7550
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/tf3/1/16/1f539.png
157.240.200.14200 OK 238 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/tf3/1/16/1f539.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 354ea12e889925f9512919a86c1f70f5
1122ef09453cc2ac21fb99b9d5921eddb02c60ce
e2514b7a658e3ceb618fb271d6232cbce51dfd3946dae0698b9f72e4d93e0d4f
GET /images/emoji.php/v9/tf3/1/16/1f539.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: NU6hLoiZJflRKRmobB9w9Q==
expires: Mon, 13 Nov 2023 00:56:18 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: CHFtH7iyJMwDsvBvT96pYeIWcpjydk/s9Xpgb+EmAKr4XMV3yZZQ84ZvHolsBrTFs++fIKzNmMX/Px92q0uHDQ==
content-length: 238
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/304850641_481084834026345_5897921498853729325_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=109&ccb=1-7&_nc_sid=110474&_nc_ohc=TbZXhhSZrLgAX_peGIS&_nc_oc=AQl4D_yuVpneph70povV-VV5kYVCKjplrEzTKghQpHMwSCwgkhNWn3BmFTkKA0Lex8M&_nc_ht=scontent-arn2-1.xx&oh=00_AfCMNhsgfINDpbXIojQIfzA4ig9aBRMhV4Kv2geahDRVNA&oe=638368F2
31.13.72.12200 OK 6.7 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/304850641_481084834026345_5897921498853729325_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=109&ccb=1-7&_nc_sid=110474&_nc_ohc=TbZXhhSZrLgAX_peGIS&_nc_oc=AQl4D_yuVpneph70povV-VV5kYVCKjplrEzTKghQpHMwSCwgkhNWn3BmFTkKA0Lex8M&_nc_ht=scontent-arn2-1.xx&oh=00_AfCMNhsgfINDpbXIojQIfzA4ig9aBRMhV4Kv2geahDRVNA&oe=638368F2
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 72bad1a0fd36a8fb6c5bce2f5f71b7f0
70adece6eed42305e691e08cf4314ee15754670a
28b70942c29238ade7ffebad41d09b70a651a9db9c7101b77533ab5143254987
GET /v/t39.30808-6/304850641_481084834026345_5897921498853729325_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=109&ccb=1-7&_nc_sid=110474&_nc_ohc=TbZXhhSZrLgAX_peGIS&_nc_oc=AQl4D_yuVpneph70povV-VV5kYVCKjplrEzTKghQpHMwSCwgkhNWn3BmFTkKA0Lex8M&_nc_ht=scontent-arn2-1.xx&oh=00_AfCMNhsgfINDpbXIojQIfzA4ig9aBRMhV4Kv2geahDRVNA&oe=638368F2 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 12 Sep 2022 03:02:33 GMT
accept-ranges: bytes
x-haystack-needlechecksum: 1775949738
x-needle-checksum: 1741827485
content-type: image/jpeg
content-digest: adler32=1646633256
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 6708
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t40/1/16/1f4a5.png
157.240.200.14200 OK 523 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t40/1/16/1f4a5.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 4a2b147498a76250bc58d3a3089e2402
f914df91c59ef6cd5d9b6c9ab4239952899a8330
4271180ba0af819893771cfc4b96ff607278e3de726019f3af58f8696192f6cd
GET /images/emoji.php/v9/t40/1/16/1f4a5.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: SisUdJinYlC8WNOjCJ4kAg==
expires: Mon, 13 Nov 2023 06:11:14 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: ipRiDTBWAu5ETI75tK8Db+vwN8fM2tpGn2U0ZnjmFOH/+/L61qMuy+p6rZavLRnyYOMCmVDqrDkXpD9L0CeWDg==
priority: u=3,i
content-length: 523
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292483069_586063666448996_2848661841479477511_n.jpg?stp=dst-jpg_s206x206&_nc_cat=107&ccb=1-7&_nc_sid=110474&_nc_ohc=avfpceJa9sUAX8UiQSe&_nc_ht=scontent-arn2-1.xx&oh=00_AfAo6V8l2euda1-2aVdzBYmJDI0X35nfHe-HSWiCHp-fEQ&oe=63845C92
31.13.72.12200 OK 9.0 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292483069_586063666448996_2848661841479477511_n.jpg?stp=dst-jpg_s206x206&_nc_cat=107&ccb=1-7&_nc_sid=110474&_nc_ohc=avfpceJa9sUAX8UiQSe&_nc_ht=scontent-arn2-1.xx&oh=00_AfAo6V8l2euda1-2aVdzBYmJDI0X35nfHe-HSWiCHp-fEQ&oe=63845C92
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 206x116, components 3\012- data
Hash 909e904f006b800b7b7b776a1cafc3b6
888080d95b82cc1e68337608467147839c61dcae
748cc1c9af0c22d8c242e3434371c443ba653705a710a6781d56b446a31cbd4f
GET /v/t39.30808-6/292483069_586063666448996_2848661841479477511_n.jpg?stp=dst-jpg_s206x206&_nc_cat=107&ccb=1-7&_nc_sid=110474&_nc_ohc=avfpceJa9sUAX8UiQSe&_nc_ht=scontent-arn2-1.xx&oh=00_AfAo6V8l2euda1-2aVdzBYmJDI0X35nfHe-HSWiCHp-fEQ&oe=63845C92 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 11 Jul 2022 01:36:07 GMT
x-haystack-needlechecksum: 1685769278
x-needle-checksum: 2531479795
content-type: image/jpeg
content-digest: adler32=175917587
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 8999
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/305053453_481084964026332_3439894445314113716_n.jpg?stp=dst-jpg_p110x80&_nc_cat=111&ccb=1-7&_nc_sid=110474&_nc_ohc=Ua9ZfQfaw_UAX9g1a7G&_nc_ht=scontent-arn2-1.xx&oh=00_AfArQaTJGsOo7AxvXNlZXuZKWJuJpeI-9TyX0NvS99Tghw&oe=638421F1
31.13.72.12200 OK 5.7 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/305053453_481084964026332_3439894445314113716_n.jpg?stp=dst-jpg_p110x80&_nc_cat=111&ccb=1-7&_nc_sid=110474&_nc_ohc=Ua9ZfQfaw_UAX9g1a7G&_nc_ht=scontent-arn2-1.xx&oh=00_AfArQaTJGsOo7AxvXNlZXuZKWJuJpeI-9TyX0NvS99Tghw&oe=638421F1
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 0fa040faaa13db5d6604ad9d6b4b36d7
ca3a060b7857f7416d2941b1bcdede94f1b8c6ad
0433cdf84386e5417a00b1774ffb90e0e67b3c7317862e2cb453041357eb6d23
GET /v/t39.30808-6/305053453_481084964026332_3439894445314113716_n.jpg?stp=dst-jpg_p110x80&_nc_cat=111&ccb=1-7&_nc_sid=110474&_nc_ohc=Ua9ZfQfaw_UAX9g1a7G&_nc_ht=scontent-arn2-1.xx&oh=00_AfArQaTJGsOo7AxvXNlZXuZKWJuJpeI-9TyX0NvS99Tghw&oe=638421F1 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 12 Sep 2022 03:02:36 GMT
x-haystack-needlechecksum: 2105331465
x-needle-checksum: 1562057535
content-type: image/jpeg
content-digest: adler32=2501839032
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 5672
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t51/1/16/1f449.png
157.240.200.14200 OK 418 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t51/1/16/1f449.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash d04f99c4267b849779807b657476960d
43550dde6119e411a19f3c381af3bba5b15bbb45
fec2a2387e7c6b149542ec31480b2ff01c645b55017504a8b27ba506acf9c1a7
GET /images/emoji.php/v9/t51/1/16/1f449.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: 0E+ZxCZ7hJd5gHtldHaWDQ==
expires: Mon, 13 Nov 2023 04:29:18 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-ua-compatible: IE=edge
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: V1gpTjbZVZ1l3pbkUvEiirBoLqmwDsqxIhnYZBilJd1T74wNEDLAkLB5dVfvd0mZ89t0YYvFY2MxdM4Jy7hNOg==
content-length: 418
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292374397_586063379782358_7176883149689786909_n.jpg?stp=dst-jpg_p261x260&_nc_cat=106&ccb=1-7&_nc_sid=110474&_nc_ohc=Gh329StoKjIAX8dCh-4&_nc_ht=scontent-arn2-1.xx&oh=00_AfA9sL5EoKzLatPCHUNJlqvyGrL19Sx-4LEWR050f2BOqQ&oe=63848656
31.13.72.12200 OK 24 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292374397_586063379782358_7176883149689786909_n.jpg?stp=dst-jpg_p261x260&_nc_cat=106&ccb=1-7&_nc_sid=110474&_nc_ohc=Gh329StoKjIAX8dCh-4&_nc_ht=scontent-arn2-1.xx&oh=00_AfA9sL5EoKzLatPCHUNJlqvyGrL19Sx-4LEWR050f2BOqQ&oe=63848656
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 261x348, components 3\012- data
Hash 712c5e9e965db9d2390b7c2fd2f47fc7
aa3e72e36d62933544a18fe1f0a918c058f93f83
f1dc7bb625c4e6163290a1215dcd08edda45d9fca78d09be6b9b4ee01ee05fd3
GET /v/t39.30808-6/292374397_586063379782358_7176883149689786909_n.jpg?stp=dst-jpg_p261x260&_nc_cat=106&ccb=1-7&_nc_sid=110474&_nc_ohc=Gh329StoKjIAX8dCh-4&_nc_ht=scontent-arn2-1.xx&oh=00_AfA9sL5EoKzLatPCHUNJlqvyGrL19Sx-4LEWR050f2BOqQ&oe=63848656 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 11 Jul 2022 01:35:47 GMT
x-haystack-needlechecksum: 4222933625
x-needle-checksum: 2004903351
content-type: image/jpeg
content-digest: adler32=2810307342
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 24045
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/tb6/1/16/2708.png
157.240.200.14200 OK 588 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/tb6/1/16/2708.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 064395b7184f811669376f1116a002e4
b4bb8cb2ab9c8a3d9e1ad9167f3da9f9bc89a291
3ae4597731deacab72db0c095973dfb388c194b8f878f32c9f2b56e81714651f
GET /images/emoji.php/v9/tb6/1/16/2708.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: BkOVtxhPgRZpN28RFqAC5A==
expires: Tue, 14 Nov 2023 05:54:35 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: E/fSqPqyUNf3uFRe+C1IqxPurX9UyWL9FdvosIMyTB65uiNS4hOzlqBci8KJCw8S6WBhBacx+SAGeCwxiUIM8w==
content-length: 588
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-1/275440002_505358871186143_9055881015311790103_n.jpg?stp=cp0_dst-jpg_p50x50&_nc_cat=105&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=bUcyZ1Xhwp4AX_SGbrE&_nc_ht=scontent-arn2-2.xx&oh=00_AfCd5mZIFnAdjeCfX8eL6l7g5O6CkERUQIH061uT7JkpJg&oe=6384DEEE
157.240.194.27200 OK 1.8 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-1/275440002_505358871186143_9055881015311790103_n.jpg?stp=cp0_dst-jpg_p50x50&_nc_cat=105&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=bUcyZ1Xhwp4AX_SGbrE&_nc_ht=scontent-arn2-2.xx&oh=00_AfCd5mZIFnAdjeCfX8eL6l7g5O6CkERUQIH061uT7JkpJg&oe=6384DEEE
IP 157.240.194.27:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, components 3\012- data
Hash 91c3fef61c703f380ef158e159f3aa42
6787b1159ead1ce710471b9e907be235c311cf48
018d94246875aba8843729d3bf03390e30ae8484549eef7a98b27c6adb7a3b45
GET /v/t39.30808-1/275440002_505358871186143_9055881015311790103_n.jpg?stp=cp0_dst-jpg_p50x50&_nc_cat=105&ccb=1-7&_nc_sid=dbb9e7&_nc_ohc=bUcyZ1Xhwp4AX_SGbrE&_nc_ht=scontent-arn2-2.xx&oh=00_AfCd5mZIFnAdjeCfX8eL6l7g5O6CkERUQIH061uT7JkpJg&oe=6384DEEE HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Fri, 11 Mar 2022 04:45:51 GMT
x-haystack-needlechecksum: 1342709595
x-needle-checksum: 1640963472
content-type: image/jpeg
content-digest: adler32=2524280793
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 1810
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t50/1/16/1f525.png
157.240.200.14200 OK 478 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t50/1/16/1f525.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 51330f3e42f0095c678e453a0917822f
26e4da69ab215d85821a8c7d7d8d33593a65aaad
d5455fa80868fdd7528880b9adcb61592f8c50288214e641387219664a8cbc8a
GET /images/emoji.php/v9/t50/1/16/1f525.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: UTMPPkLwCVxnjkU6CReCLw==
expires: Mon, 13 Nov 2023 03:43:59 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: WDpgmYJ58/h1Zl2YAXsHf4yxCilhtqbp22+o443RSkSQfF4Vz1pXK/pQAgkMaHMRDT/G12Mb26vaQc0Osf159A==
content-length: 478
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t6a/1/16/1f497.png
157.240.200.14200 OK 485 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t6a/1/16/1f497.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 8ca38843b5ec26600fe886e14078ac67
bed253fe09a6a365fab962a93859c456e66ab916
85b4d67363b973530b59eaa48a1dd3d5633affdc37e20014e5dd05c9c51b6ab5
GET /images/emoji.php/v9/t6a/1/16/1f497.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: jKOIQ7XsJmAP6IbhQHisZw==
expires: Tue, 14 Nov 2023 06:13:00 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: bYKljXiFkkC7pQJFgFeMeDzYfYCaa+OF+MfOBzV7SR6nYNf2h0377giX5Qy/VGvz7stYVsG0EuqWWuFSZizfEg==
content-length: 485
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/298442868_609517620770267_6048408983708537444_n.jpg?stp=dst-jpg_p110x80&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=VGX7TODetm8AX8VGMER&_nc_ht=scontent-arn2-1.xx&oh=00_AfD4O7QWkiRzAD8ehXNP4cihAy7ZGsUr8Uf-izAmvtAxjw&oe=6384E989
31.13.72.12200 OK 6.1 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/298442868_609517620770267_6048408983708537444_n.jpg?stp=dst-jpg_p110x80&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=VGX7TODetm8AX8VGMER&_nc_ht=scontent-arn2-1.xx&oh=00_AfD4O7QWkiRzAD8ehXNP4cihAy7ZGsUr8Uf-izAmvtAxjw&oe=6384E989
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 727c647f4f739a8908be5cc68239c80f
9f6926f7bfeb130faff021bb26c38d47638bc3a2
08bf1a410812c52f11e01ed551d27c047f45fd965cdb1e0df3cb2c89850a1789
GET /v/t39.30808-6/298442868_609517620770267_6048408983708537444_n.jpg?stp=dst-jpg_p110x80&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=VGX7TODetm8AX8VGMER&_nc_ht=scontent-arn2-1.xx&oh=00_AfD4O7QWkiRzAD8ehXNP4cihAy7ZGsUr8Uf-izAmvtAxjw&oe=6384E989 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Tue, 16 Aug 2022 01:52:29 GMT
x-haystack-needlechecksum: 1329610557
x-needle-checksum: 1534869365
content-type: image/jpeg
content-digest: adler32=115972779
content-length: 6059
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: IrgYGU-d_cmqk8WKax4X5ecLt9iY6MYBIVlJSRZeJThWQYO4wWw2JE9wY6xkMCRXrwM3KVIxZDVsxJU81dSfOIidK8a4QIaTj_FCMzL1u9o
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/images/emoji.php/v9/t51/1/16/2714.png
157.240.200.14200 OK 404 B URL HTTP/2 static.xx.fbcdn.net/images/emoji.php/v9/t51/1/16/2714.png
IP 157.240.200.14:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 585027f0b0f4ca51e48767edb317d3ab
82b2c126ac3cb60400964bfb9fec695e5af075bd
025ddacf312f1c4b45d4d0ff431e1852aee90cdd05696b0366ab38b06dc06df4
GET /images/emoji.php/v9/t51/1/16/2714.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: WFAn8LD0ylHkh2ftsxfTqw==
expires: Mon, 13 Nov 2023 03:39:05 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
timing-allow-origin: *
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: Om7IXUxMY1rm294chbSdIZ8SLktWQsps5f9UpDRhhD/s6DkBe3Asj42xPZgOlPMm7NpF6sPpZ6l7QiqRf6kvbA==
priority: u=3,i
content-length: 404
x-fb-trip-id: 1679558926
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/305969107_481084917359670_2611671491846943945_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=osvndqBiGtgAX_dDICp&_nc_ht=scontent-arn2-1.xx&oh=00_AfDdxJsxfHUlYcyi78y4vUaOl_vpX2c8pGsQ4W1i51u6BA&oe=6384D41D
31.13.72.12200 OK 5.7 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/305969107_481084917359670_2611671491846943945_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=osvndqBiGtgAX_dDICp&_nc_ht=scontent-arn2-1.xx&oh=00_AfDdxJsxfHUlYcyi78y4vUaOl_vpX2c8pGsQ4W1i51u6BA&oe=6384D41D
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x146, components 3\012- data
Hash f7a07e9a1664856b2017623f55a6d60e
35ebfef2cb9637afd6aec8333bcc44329534419e
7d5974a116dd2ec55688e8581c17edd39d4fb23204f0ebda3a9dee89ad0ea861
GET /v/t39.30808-6/305969107_481084917359670_2611671491846943945_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=osvndqBiGtgAX_dDICp&_nc_ht=scontent-arn2-1.xx&oh=00_AfDdxJsxfHUlYcyi78y4vUaOl_vpX2c8pGsQ4W1i51u6BA&oe=6384D41D HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 12 Sep 2022 03:02:34 GMT
x-haystack-needlechecksum: 2270859847
x-needle-checksum: 2650196649
content-type: image/jpeg
content-digest: adler32=2853566872
content-length: 5664
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: L08KM3WVToZBZl29p3KvRpofPfIbZdiltEye4X7f5rbPQrtecGFXhxT8fwZjBcIcg2EzxDWMDisJmbJtEl0Li9hmU3KAe2ArOx4k4RDk7p0
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/309328750_499303808871114_1868396969051712546_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=9ZBOxgzsqFAAX86Gp-B&_nc_ht=scontent-arn2-1.xx&oh=00_AfCBojGwGTMNUDF5mcQeNCG7MLsJ73d_T7Uhzsx9i1CWqg&oe=6384B7A8
31.13.72.12200 OK 6.0 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/309328750_499303808871114_1868396969051712546_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=9ZBOxgzsqFAAX86Gp-B&_nc_ht=scontent-arn2-1.xx&oh=00_AfCBojGwGTMNUDF5mcQeNCG7MLsJ73d_T7Uhzsx9i1CWqg&oe=6384B7A8
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 3f30c770a670ddefac67f9928c7aa996
63c84ca60ae81dfed3bc6fba57fe526b4d3d56f8
cb1d187a2a17a3d056ac1ae1afab4e5e75c819342b8844a86c305f7647df9a15
GET /v/t39.30808-6/309328750_499303808871114_1868396969051712546_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=9ZBOxgzsqFAAX86Gp-B&_nc_ht=scontent-arn2-1.xx&oh=00_AfCBojGwGTMNUDF5mcQeNCG7MLsJ73d_T7Uhzsx9i1CWqg&oe=6384B7A8 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 03 Oct 2022 03:26:57 GMT
x-haystack-needlechecksum: 411163148
x-needle-checksum: 1868075801
content-type: image/jpeg
content-digest: adler32=2128413984
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 6009
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/306667678_481083957359766_1687432218947238572_n.jpg?stp=cp1_dst-jpg_p168x128&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=ov_HW_STiacAX8ii84o&_nc_ht=scontent-arn2-1.xx&oh=00_AfAGF2vCuYKMZHHFbPTqmihJHZ-iSjxz8h-Bp0KJd39CJg&oe=638333D8
31.13.72.12200 OK 9.7 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/306667678_481083957359766_1687432218947238572_n.jpg?stp=cp1_dst-jpg_p168x128&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=ov_HW_STiacAX8ii84o&_nc_ht=scontent-arn2-1.xx&oh=00_AfAGF2vCuYKMZHHFbPTqmihJHZ-iSjxz8h-Bp0KJd39CJg&oe=638333D8
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 168x224, components 3\012- data
Hash 01d73dd05457a6da901db8de23092c4d
96b358b1423d054170b48ce09d384560c16aa0e2
6c20c85abbd3c9b21d923f18099e92d8d3f01dc79d4802574ef88669d1eb4783
GET /v/t39.30808-6/306667678_481083957359766_1687432218947238572_n.jpg?stp=cp1_dst-jpg_p168x128&_nc_cat=103&ccb=1-7&_nc_sid=110474&_nc_ohc=ov_HW_STiacAX8ii84o&_nc_ht=scontent-arn2-1.xx&oh=00_AfAGF2vCuYKMZHHFbPTqmihJHZ-iSjxz8h-Bp0KJd39CJg&oe=638333D8 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 12 Sep 2022 03:02:08 GMT
x-haystack-needlechecksum: 3023694345
x-needle-checksum: 1478468381
content-type: image/jpeg
content-digest: adler32=3726002259
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 9736
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/310153276_499303178871177_4950436667497257837_n.jpg?stp=dst-jpg_p168x128&_nc_cat=102&ccb=1-7&_nc_sid=110474&_nc_ohc=M_8JSqPa_J4AX9TPlIq&_nc_ht=scontent-arn2-1.xx&oh=00_AfBS7GDHxcrPPowCsrgkZcl0KX1aLEGR9GXniz4zLNj-wA&oe=6384E2E2
31.13.72.12200 OK 12 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/310153276_499303178871177_4950436667497257837_n.jpg?stp=dst-jpg_p168x128&_nc_cat=102&ccb=1-7&_nc_sid=110474&_nc_ohc=M_8JSqPa_J4AX9TPlIq&_nc_ht=scontent-arn2-1.xx&oh=00_AfBS7GDHxcrPPowCsrgkZcl0KX1aLEGR9GXniz4zLNj-wA&oe=6384E2E2
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 168x224, components 3\012- data
Hash fc79a19f852587b4cfc563548d48c14f
298f69c5717e5c23bc9de28a025749b04b3c82cf
3d093eecbf63f0332e1dab9d736b56d01e57a189268f30dbdf5857ea8fde4909
GET /v/t39.30808-6/310153276_499303178871177_4950436667497257837_n.jpg?stp=dst-jpg_p168x128&_nc_cat=102&ccb=1-7&_nc_sid=110474&_nc_ohc=M_8JSqPa_J4AX9TPlIq&_nc_ht=scontent-arn2-1.xx&oh=00_AfBS7GDHxcrPPowCsrgkZcl0KX1aLEGR9GXniz4zLNj-wA&oe=6384E2E2 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 03 Oct 2022 03:26:25 GMT
x-haystack-needlechecksum: 1752218660
x-needle-checksum: 106186621
content-type: image/jpeg
content-digest: adler32=1927757793
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 12103
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/305919821_481083920693103_9168970708603571604_n.jpg?stp=dst-jpg_s235x165&_nc_cat=106&ccb=1-7&_nc_sid=110474&_nc_ohc=OqPA4W2mxRgAX-TehPW&_nc_ht=scontent-arn2-1.xx&oh=00_AfD3q651_YIU1pvHcSd_q_N9vtLAgmrGQuUSrfjfPtU9xQ&oe=638414BE
31.13.72.12200 OK 11 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/305919821_481083920693103_9168970708603571604_n.jpg?stp=dst-jpg_s235x165&_nc_cat=106&ccb=1-7&_nc_sid=110474&_nc_ohc=OqPA4W2mxRgAX-TehPW&_nc_ht=scontent-arn2-1.xx&oh=00_AfD3q651_YIU1pvHcSd_q_N9vtLAgmrGQuUSrfjfPtU9xQ&oe=638414BE
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 219x165, components 3\012- data
Hash bbb5b37cc7b612b8bbd3300a6394bd8f
9853c8e57ecabb2c62757151bd9f37c25fcbe8c0
85b64edd3d785f5146a650957bae3121fa41a6b4ca776164f3f2ad202ad9bc85
GET /v/t39.30808-6/305919821_481083920693103_9168970708603571604_n.jpg?stp=dst-jpg_s235x165&_nc_cat=106&ccb=1-7&_nc_sid=110474&_nc_ohc=OqPA4W2mxRgAX-TehPW&_nc_ht=scontent-arn2-1.xx&oh=00_AfD3q651_YIU1pvHcSd_q_N9vtLAgmrGQuUSrfjfPtU9xQ&oe=638414BE HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 12 Sep 2022 03:02:06 GMT
x-haystack-needlechecksum: 2167057703
x-needle-checksum: 248395994
content-type: image/jpeg
content-digest: adler32=1273958864
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 11332
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292937712_586063419782354_6659094303409739630_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=0-mzECTojjkAX_tWDd7&_nc_ht=scontent-arn2-1.xx&oh=00_AfCG6k9vW9bYDoEUnukPnffaq5ORQQXR0phMBnuo_azANg&oe=6383DA1D
31.13.72.12200 OK 6.9 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/292937712_586063419782354_6659094303409739630_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=0-mzECTojjkAX_tWDd7&_nc_ht=scontent-arn2-1.xx&oh=00_AfCG6k9vW9bYDoEUnukPnffaq5ORQQXR0phMBnuo_azANg&oe=6383DA1D
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 12f48a3a0b62734cd227e7c5cf946874
049883f89a91c33cc7cb4c8fa6b7894008881018
86d151c93274ea899e369f63da77651d66cad2899b87f95f4cad15dc2e43468d
GET /v/t39.30808-6/292937712_586063419782354_6659094303409739630_n.jpg?stp=dst-jpg_p110x80&_nc_cat=101&ccb=1-7&_nc_sid=110474&_nc_ohc=0-mzECTojjkAX_tWDd7&_nc_ht=scontent-arn2-1.xx&oh=00_AfCG6k9vW9bYDoEUnukPnffaq5ORQQXR0phMBnuo_azANg&oe=6383DA1D HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 11 Jul 2022 01:35:50 GMT
x-haystack-needlechecksum: 2835898121
x-needle-checksum: 423013521
content-type: image/jpeg
content-digest: adler32=303045119
content-length: 6872
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: iY-YFDVZ9hNNZSaXQOgUdoIKOc9QWiBMMzV38QIQOlZV8oDJKBp4zAuI3MdlP5gjrrekPTxcXQQhyGuWgi3I042Xo_DYNAn5Qer0XhQRgI8
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/299205054_609516390770390_7402725833980818702_n.jpg?stp=dst-jpg_s370x247&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=7dMTtYtmvE4AX9NBsIk&_nc_ht=scontent-arn2-2.xx&oh=00_AfBbKFEtW1df6GCk7yv8coBBd7X-U4zYVKxro99W1SXtHA&oe=63833BA5
157.240.194.27200 OK 19 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/299205054_609516390770390_7402725833980818702_n.jpg?stp=dst-jpg_s370x247&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=7dMTtYtmvE4AX9NBsIk&_nc_ht=scontent-arn2-2.xx&oh=00_AfBbKFEtW1df6GCk7yv8coBBd7X-U4zYVKxro99W1SXtHA&oe=63833BA5
IP 157.240.194.27:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 328x247, components 3\012- data
Hash 282757cabf950756326ab7a862fa5cff
53e06fe060606a6b2e2e686616a7055ba36aa519
7540c4a05df1e830de854d39b7326ea6d0ad4279f8ab44b27108aaa8d6186de2
GET /v/t39.30808-6/299205054_609516390770390_7402725833980818702_n.jpg?stp=dst-jpg_s370x247&_nc_cat=100&ccb=1-7&_nc_sid=110474&_nc_ohc=7dMTtYtmvE4AX9NBsIk&_nc_ht=scontent-arn2-2.xx&oh=00_AfBbKFEtW1df6GCk7yv8coBBd7X-U4zYVKxro99W1SXtHA&oe=63833BA5 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Tue, 16 Aug 2022 01:52:19 GMT
x-haystack-needlechecksum: 2764846922
x-needle-checksum: 2173931129
content-type: image/jpeg
content-digest: adler32=952258342
content-length: 18768
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: 01MoGmWqvfoDdo_1K_LQMe18-ozSaH7fjlJjPYJLTS5zNw3ijpv4bFynQwcF-w7betTM3TUgBypyPvWpMyn_bhDKK1h4AmQ0C1gC_W5XRgw
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/300626315_616300813425281_1937877177011079427_n.jpg?stp=cp1_dst-jpg_p261x260&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=9dwTvlkos-4AX_g83zJ&_nc_ht=scontent-arn2-2.xx&oh=00_AfAhByVJ6r8gCa8tPVEHDZhcYIFaXEHj4PAGbb9OUw-WJQ&oe=6384F020
157.240.194.27200 OK 27 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/300626315_616300813425281_1937877177011079427_n.jpg?stp=cp1_dst-jpg_p261x260&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=9dwTvlkos-4AX_g83zJ&_nc_ht=scontent-arn2-2.xx&oh=00_AfAhByVJ6r8gCa8tPVEHDZhcYIFaXEHj4PAGbb9OUw-WJQ&oe=6384F020
IP 157.240.194.27:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 261x348, components 3\012- data
Hash 18a35f866120ad338f9b820ef251a2aa
b0f5fb16de3a263fde858420ed97f951525d0faf
ed31542efc2f21f794c4dca53110d8e5ac0a963f01bbb432bd768ae102bd88cc
GET /v/t39.30808-6/300626315_616300813425281_1937877177011079427_n.jpg?stp=cp1_dst-jpg_p261x260&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=9dwTvlkos-4AX_g83zJ&_nc_ht=scontent-arn2-2.xx&oh=00_AfAhByVJ6r8gCa8tPVEHDZhcYIFaXEHj4PAGbb9OUw-WJQ&oe=6384F020 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Fri, 26 Aug 2022 03:05:07 GMT
x-haystack-needlechecksum: 2111901328
x-needle-checksum: 2476343749
content-type: image/jpeg
content-digest: adler32=1808709210
content-length: 27399
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: vxZim8zkklDVRSF38RUgH6a4_8K16XKLFITBJLF2xhSZW_SmZGNOGALTMYFjm7ATI7whdi2QcOtLp40tOsOPVnHIBBp7RAcNBPMOaYjx3QQ
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/309155285_499303142204514_8206189731057771941_n.jpg?stp=cp1_dst-jpg_s235x165&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=_oSvD6qmOpkAX-J1f32&_nc_oc=AQkhaymb83DxzCE9j4o5v4JY6r_rjJeIeNZ86zEgYj0tgNUjUuRaWeHDp1ZTQySmssI&_nc_ht=scontent-arn2-1.xx&oh=00_AfC_YdUShUHIjvPELTAmPt3y89B0wylkU89Tb58-mml0jw&oe=6384515D
31.13.72.12200 OK 11 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/309155285_499303142204514_8206189731057771941_n.jpg?stp=cp1_dst-jpg_s235x165&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=_oSvD6qmOpkAX-J1f32&_nc_oc=AQkhaymb83DxzCE9j4o5v4JY6r_rjJeIeNZ86zEgYj0tgNUjUuRaWeHDp1ZTQySmssI&_nc_ht=scontent-arn2-1.xx&oh=00_AfC_YdUShUHIjvPELTAmPt3y89B0wylkU89Tb58-mml0jw&oe=6384515D
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 220x165, components 3\012- data
Hash 12c16d056c0849c9a2c62fbc3426c4a8
beac325da2220b50b1c0cbff9aca48d966193a10
365257155159313a6f9b833af79d71cd9ffbe7ee6525185838a8cd323438e256
GET /v/t39.30808-6/309155285_499303142204514_8206189731057771941_n.jpg?stp=cp1_dst-jpg_s235x165&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=_oSvD6qmOpkAX-J1f32&_nc_oc=AQkhaymb83DxzCE9j4o5v4JY6r_rjJeIeNZ86zEgYj0tgNUjUuRaWeHDp1ZTQySmssI&_nc_ht=scontent-arn2-1.xx&oh=00_AfC_YdUShUHIjvPELTAmPt3y89B0wylkU89Tb58-mml0jw&oe=6384515D HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 03 Oct 2022 03:26:23 GMT
x-haystack-needlechecksum: 3023478655
x-needle-checksum: 169457096
content-type: image/jpeg
content-digest: adler32=1554383766
content-length: 11063
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: qeyBWLBtg-LQN8hokoUPSh5mlsEeToz5vJcqn4PnKbdDVPEBZ35oCJDA1HbcHSY3fhc-LUNzKpZDVNfQ4UdwqWnvq1I0cxQJgdaFabL-w2c
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/300384336_616301263425236_4589007666890676303_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=4cSqDakuR6wAX9UrNNy&_nc_ht=scontent-arn2-1.xx&oh=00_AfDo3g8D73EN-9OzhVMx4_EnD51mMpIFdMeLuF2pD8QaQg&oe=638356D5
31.13.72.12200 OK 5.5 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/300384336_616301263425236_4589007666890676303_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=4cSqDakuR6wAX9UrNNy&_nc_ht=scontent-arn2-1.xx&oh=00_AfDo3g8D73EN-9OzhVMx4_EnD51mMpIFdMeLuF2pD8QaQg&oe=638356D5
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 128d50502dfe46c0df2203ceb38a8a22
f681498dd8338e811a46435c6e73a699562354c0
050919d40bc758d626fa985331b25f7d7baf4bd8ba54b4f17072ada4d253cf12
GET /v/t39.30808-6/300384336_616301263425236_4589007666890676303_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=104&ccb=1-7&_nc_sid=110474&_nc_ohc=4cSqDakuR6wAX9UrNNy&_nc_ht=scontent-arn2-1.xx&oh=00_AfDo3g8D73EN-9OzhVMx4_EnD51mMpIFdMeLuF2pD8QaQg&oe=638356D5 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Fri, 26 Aug 2022 03:05:30 GMT
x-haystack-needlechecksum: 2330538666
x-needle-checksum: 351417591
content-type: image/jpeg
content-digest: adler32=3568248292
content-length: 5544
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: Spt-tFkpqzCmW5Y9n25P7k0qMAT1Oe5-QYNoqunXJpp58TNecpH0TSWCjAUpj0bxd4ikfos6K9EyZGfGOyv8c8O_Pxv8_9BEt06_ZwIEv5U
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/298280525_609516837437012_4515582850900442333_n.jpg?stp=dst-jpg_s206x206&_nc_cat=102&ccb=1-7&_nc_sid=110474&_nc_ohc=DFWeSnio9osAX_91egc&_nc_ht=scontent-arn2-1.xx&oh=00_AfANjgLqPrZm00tULe_iS44WVuKFZi35544Li8RORipSfQ&oe=63838A02
31.13.72.12200 OK 8.4 kB URL HTTP/2 scontent-arn2-1.xx.fbcdn.net/v/t39.30808-6/298280525_609516837437012_4515582850900442333_n.jpg?stp=dst-jpg_s206x206&_nc_cat=102&ccb=1-7&_nc_sid=110474&_nc_ohc=DFWeSnio9osAX_91egc&_nc_ht=scontent-arn2-1.xx&oh=00_AfANjgLqPrZm00tULe_iS44WVuKFZi35544Li8RORipSfQ&oe=63838A02
IP 31.13.72.12:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 206x116, components 3\012- data
Hash 0c3d872349632ff67dc1fe5d59f0b2c2
ed2e67cd5efd11d9838d25eb36572459af64039e
982c72a8a657309859cdc6a7db9707799cd098bea192725254d79d43d912c8b7
GET /v/t39.30808-6/298280525_609516837437012_4515582850900442333_n.jpg?stp=dst-jpg_s206x206&_nc_cat=102&ccb=1-7&_nc_sid=110474&_nc_ohc=DFWeSnio9osAX_91egc&_nc_ht=scontent-arn2-1.xx&oh=00_AfANjgLqPrZm00tULe_iS44WVuKFZi35544Li8RORipSfQ&oe=63838A02 HTTP/1.1
Host: scontent-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Tue, 16 Aug 2022 01:52:21 GMT
x-haystack-needlechecksum: 3236837460
x-needle-checksum: 4054719003
content-type: image/jpeg
content-digest: adler32=3970492551
content-length: 8400
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: fAhqS4mU8NhANrEEzP5ESg6bEXuBLpOr3VtWCKXNcFWHk4T8L_Tk_9Djvp19mT2Zdt9Dfuok8lV7oM5XoXb285ytGukoLN1ARFwlihgJWis
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/306162892_499304855537676_7414910996665874212_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=uV8JBtrTYXkAX_dBlPU&_nc_ht=scontent-arn2-2.xx&oh=00_AfCcSHnbSyPE0iaTlB32xfI30T-dxOJCu4Z1LUKy6M_4qw&oe=63846316
157.240.194.27200 OK 6.8 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/306162892_499304855537676_7414910996665874212_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=uV8JBtrTYXkAX_dBlPU&_nc_ht=scontent-arn2-2.xx&oh=00_AfCcSHnbSyPE0iaTlB32xfI30T-dxOJCu4Z1LUKy6M_4qw&oe=63846316
IP 157.240.194.27:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 420fd0f2d3bb2b52fdd9124e33364d88
59c2b789ba8eaced8b777d652b1e5dccf82fd3cb
5450967caa998b4394f44994617413cc81c0ee3c2fc1c6d861c1a26803b0ca37
GET /v/t39.30808-6/306162892_499304855537676_7414910996665874212_n.jpg?stp=cp1_dst-jpg_p110x80&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=uV8JBtrTYXkAX_dBlPU&_nc_ht=scontent-arn2-2.xx&oh=00_AfCcSHnbSyPE0iaTlB32xfI30T-dxOJCu4Z1LUKy6M_4qw&oe=63846316 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 03 Oct 2022 03:27:01 GMT
x-haystack-needlechecksum: 1194774673
x-needle-checksum: 2404020280
content-type: image/jpeg
content-digest: adler32=317556359
content-length: 6784
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: yASuf8NFF0HDlFfuChit2qQXoz_bnA02XQf-ssi5Fn3BsEwd5u_4fLsSzFjsX6u-MK4VSGPGIAQSkr8ItF81gne73paQhzMaxEpdTUR2ZN8
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/307569444_499304835537678_4717259120507434116_n.jpg?stp=dst-jpg_p110x80&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=9mDrz_5xAE0AX9x8e10&_nc_ht=scontent-arn2-2.xx&oh=00_AfD7ebZbrtrIE2SHnjzBqw_d12z7WdetE8imxdntC2063g&oe=63844D9E
157.240.194.27200 OK 5.3 kB URL HTTP/2 scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/307569444_499304835537678_4717259120507434116_n.jpg?stp=dst-jpg_p110x80&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=9mDrz_5xAE0AX9x8e10&_nc_ht=scontent-arn2-2.xx&oh=00_AfD7ebZbrtrIE2SHnjzBqw_d12z7WdetE8imxdntC2063g&oe=63844D9E
IP 157.240.194.27:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 110x147, components 3\012- data
Hash 49474572a2965fbec2b9e3b716bebf2a
d143a563c8ad4d91a9720b06fdffd98d7e8e7476
8a2cd5f3d715101c020890fe2d3a98e4a7e309b9cb1510e3243ed2c9209da60e
GET /v/t39.30808-6/307569444_499304835537678_4717259120507434116_n.jpg?stp=dst-jpg_p110x80&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=9mDrz_5xAE0AX9x8e10&_nc_ht=scontent-arn2-2.xx&oh=00_AfD7ebZbrtrIE2SHnjzBqw_d12z7WdetE8imxdntC2063g&oe=63844D9E HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 03 Oct 2022 03:26:59 GMT
x-haystack-needlechecksum: 881877443
x-needle-checksum: 404379695
content-type: image/jpeg
content-digest: adler32=545276208
content-length: 5308
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
x-fb-trip-id: 1904183273
date: Thu, 24 Nov 2022 06:47:15 GMT
x-fb-edge-debug: -YqLyALtfPVLiHmRBU4cjcC0GVmkd7gT407X9Ke5ejlJI37xX4201yVOBpWc9ZeFyqg6tUDoON5bBtPafDmix3qInirg-76s0aOoAiSOZNs
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5d4d55182be8bbcce0c177bbb45df2a4
f5f89569d1fd6b99cf30ae2edd725d3d0aa93a1a
3c8aba50127fb72fbba68390094c6376f2b23a9f3ebca34874e317b65c4ed1f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8ABA50127FB72FBBA68390094C6376F2B23A9F3EBCA34874E317B65C4ED1F0"
Last-Modified: Tue, 22 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21596
Expires: Thu, 24 Nov 2022 12:47:11 GMT
Date: Thu, 24 Nov 2022 06:47:15 GMT
Connection: keep-alive
azseo.vn/wp-content/uploads/2018/01/phone-call.png
125.212.217.35200 OK 3.2 kB URL HTTP/2 azseo.vn/wp-content/uploads/2018/01/phone-call.png
IP 125.212.217.35:0
ASN #38731 CHT Compamy Ltd
File type PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced\012- data
Hash 4bc195c1634fe958d6b9008b3929dcad
48dab248683ac200a195e8a71537cc5c7de6b5b6
4c8acce7c5db46820bdcfe2ebb7d0658bd82e57c33721d602cc101f096a65c98
GET /wp-content/uploads/2018/01/phone-call.png HTTP/1.1
Host: azseo.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dhlvietnam-express.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 06:44:41 GMT
content-type: image/png
last-modified: Fri, 02 Feb 2018 03:16:02 GMT
etag: "cad-5a73d7f2-494d9807dc29c7db;;;"
accept-ranges: bytes
content-length: 3245
date: Thu, 24 Nov 2022 06:44:41 GMT
server: LiteSpeed
vary: User-Agent
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 40388
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
216.58.207.195200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:35:48 GMT
expires: Thu, 23 Nov 2023 19:35:48 GMT
cache-control: public, max-age=31536000
age: 40288
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.195200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 59984
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2
216.58.207.195200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 11800, version 1.0\012- data
Hash e36fccd06262bef92e7a9841e2202225
b907dd02819497b3942220e0aa160c167195506b
7f1c829b0c90fd664a03bb714a74f7d35d9e38ee1687104abc8ad5bd9c8ccb6c
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:48:10 GMT
expires: Thu, 23 Nov 2023 18:48:10 GMT
cache-control: public, max-age=31536000
age: 43146
last-modified: Wed, 11 May 2022 19:25:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
216.58.207.195200 OK 5.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 5560, version 1.0\012- data
Hash ca3b09b62fda648a4511700413313fd0
109cd4c5435bd6614391bb8722c47c287c96b2ec
77b24796a3d4ab521f66765651875338ed50cb9306cfe4603a3e79618e429cec
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:36:26 GMT
expires: Thu, 23 Nov 2023 19:36:26 GMT
cache-control: public, max-age=31536000
age: 40250
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2
216.58.207.195200 OK 5.6 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 5604, version 1.0\012- data
Hash 7cda2cfee99d697daf8c14819d9004eb
76f4002863493c93454a9f17424942f321287cba
0948409a22b5979aa7e1ec20da9e61f12e7d403800b541ece053881bd2542b70
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Nov 2022 23:32:21 GMT
expires: Sat, 18 Nov 2023 23:32:21 GMT
cache-control: public, max-age=31536000
age: 458095
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5d4d55182be8bbcce0c177bbb45df2a4
f5f89569d1fd6b99cf30ae2edd725d3d0aa93a1a
3c8aba50127fb72fbba68390094c6376f2b23a9f3ebca34874e317b65c4ed1f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8ABA50127FB72FBBA68390094C6376F2B23A9F3EBCA34874E317B65C4ED1F0"
Last-Modified: Tue, 22 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21595
Expires: Thu, 24 Nov 2022 12:47:11 GMT
Date: Thu, 24 Nov 2022 06:47:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a16068e-5377-48a5-aaf5-19e46c86681d.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a16068e-5377-48a5-aaf5-19e46c86681d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e091109c8f54cf23b221d8d0a35d6914
a67bdea6358146f7de38d6be37e9f69a8edd5f22
362dc1665e27a4307a7ce832019a6e5e3d8edb0d18db084e4dc9dd026ea68df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a16068e-5377-48a5-aaf5-19e46c86681d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 11447
x-amzn-requestid: fb600f6e-d936-4255-b79f-528d9cb8e729
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYTEqyIAMFalg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-2bc3102e268ccdff7f960289;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mKjDkTbptvN8DvzCnw88-xjLOC6wi-72-rLF9Hp7yzCEBDVmJoHgIA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:26:09 GMT
age: 84071
etag: "a67bdea6358146f7de38d6be37e9f69a8edd5f22"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dhlvietnam-express.vn/gioi-thieu/
103.130.216.66200 OK 0 B URL HTTP/2 dhlvietnam-express.vn/gioi-thieu/
IP 103.130.216.66:0
ASN #135951 Webico Company Limited
Analyzer Verdict Alert openphish DHL Airways, Inc.
fortinet Phishing
GET /gioi-thieu/ HTTP/1.1
Host: dhlvietnam-express.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://dhlvietnam-express.vn/wp-json/>; rel="https://api.w.org/", <https://dhlvietnam-express.vn/wp-json/wp/v2/pages/406>; rel="alternate"; type="application/json", <https://dhlvietnam-express.vn/?p=406>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 06:47:12 GMT
server: LiteSpeed
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2