{"report_id":"cc8ba041-20fd-492a-95b9-c9c3c5cebf4a","version":6,"status":"done","tags":[],"date":"2025-10-12T17:11:49Z","url":{"schema":"http","addr":"spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"104.21.84.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"title":"Xem đi đừng ngại"},"submit":{"url":{"schema":"http","addr":"spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"104.21.84.137","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-16T17:11:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-12T17:11:29Z","timestamp":1760289089,"ip_dst":{"addr":"104.21.84.137","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":55630,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-12T17:11:29.257697+0000\",\"flow_id\":1635978297060775,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":55630,\"dest_ip\":\"104.21.84.137\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"spo38.click\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://spo38.click/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":548,\"bytes_toclient\":755,\"start\":\"2025-10-12T17:11:29.241063+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"spo38.click","ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-20","domain_rank":0,"first_seen":"2025-10-12T14:48:03.097989Z","last_seen":"2025-10-12T14:48:03.097989Z","alert_count":0,"request_count":25,"received_data":1180695,"sent_data":13224,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":2,"received_data":851222,"sent_data":867,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"e.streamqq.com","ip":{"addr":"104.26.4.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-30","domain_rank":516260,"first_seen":"2025-01-05T05:51:01.584228Z","last_seen":"2025-10-12T14:48:03.541091Z","alert_count":0,"request_count":2,"received_data":46252,"sent_data":1101,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-12T17:11:29Z","timestamp":1760289089,"ip_dst":{"addr":"104.21.84.137","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":55630,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.click domain","source":"{\"timestamp\":\"2025-10-12T17:11:29.257697+0000\",\"flow_id\":1635978297060775,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":55630,\"dest_ip\":\"104.21.84.137\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858675,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.click domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"spo38.click\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://spo38.click/\",\"length\":3},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":548,\"bytes_toclient\":755,\"start\":\"2025-10-12T17:11:29.241063+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"244d17fa557bb6680b554451541e21af","sha1":"b1c726894db201d0acb92ab8c37054d2dd73d616","sha256":"9a77463ff5840a6ad3a97c51b7a33f4b1cdbc8728606cb29064928a37319f010","sha512":"c26588c67cb930c9db9750d3e96f53925e04ab28fd256be92ea35cc38efce33f4df5df1aa75debee8920d6cdb9fb16da9c50956535769cabe2284dc1d509505d","ssdeep":"","tlshash":"1ec08c88212a0cb091b627008b3fa600f4023228a490e921480a23448d20e03db54810","size":153,"data":"","first_seen":"2025-05-09T16:03:32.088354Z","last_seen":"2025-11-21T14:46:58.834195Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/bootstrap-5.3.3-dist/js/bootstrap.bundle.min.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-03T23:43:45.39573Z","times_seen":21821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd6be46486df0061c906157d0b9549e1","sha1":"8f9d552b409ea39c407e8d48e03e3bef0cdcd7ce","sha256":"3af33f543d983a7791c0bc827a08bb45e1593538f102a38a5e2a1764b6307914","sha512":"9501874cd1a4621d924658560bd0f3859ee98950bc4eff48ee85b70c8da8183ef9a7e1fc74eda04d86194395ba7dc57f0f9d469fd1d617fed74bdf692e66f9fe","ssdeep":"","tlshash":"61e0ab03a1185f45d8e00ae076023a2eab6a302b8700dd0132befb080db5780b0542ef","size":400,"data":"","first_seen":"2025-10-12T17:11:52.732023Z","last_seen":"2025-10-12T17:11:52.732023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ffef9d75612e6d5b383c393b3fb7d87","sha1":"7cfdaa40c3440efd2751d9833a768ea6953f6351","sha256":"87219a2f9be014310d195b371277e88a30d17ed287e81025bbeff604e8930bca","sha512":"ec75ed22162d939750983608e73d7918be68aa8e9d0fe5edccb4713d98c3841a4891d43bac8988db77b60d37ec242d6e7e1568951bf822b61403bbbc27b22f8e","ssdeep":"192:sabfHQ2RHMb9LFY+AxE30UWZacKfy5sWlRyyO/BT8nyuEazDnUcdQP1VAB8X55Mi:N5RHMb9LFY+AA0FYZfy5VlRyyO/BTEE1","tlshash":"6f32c66332a9683684cd55deb4347349b1351d9c330ad119f9bc28ee3628ed67129ff8","size":10922,"data":"","first_seen":"2024-11-12T12:25:03.267692Z","last_seen":"2026-04-03T17:03:45.266165Z","times_seen":2701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.streamqq.com/videos/661dde118be13559fd08ba31/play?event_id=player-wrapper","fqdn":"e.streamqq.com","domain":"streamqq.com","tld":"com"},"ip":{"addr":"104.26.4.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a87979e367d46698db9540f8cbd604d1","sha1":"df43a063db51c67def2280ec62fef1ca684f1ffb","sha256":"6920c94f3d009a24a86ecce876f4f4a156ca48135e10dcec23b5aec4327ad67b","sha512":"a3240635ab0a8ccf31a7ac4920980a71f3d4a0fb4f29a32332070022fe6cd17399c0372e1f3a4bdd7334d364c0d9ac1abb05e889ae2ecbc42ef60c054ff11cc0","ssdeep":"","tlshash":"3ff05cf310fecdb1ce4df2f5c0c7d0966a88125a85d28d4ee546de155197b89109148f","size":464,"data":"","first_seen":"2025-10-12T17:11:52.735048Z","last_seen":"2025-10-12T17:11:52.735048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.streamqq.com/videos/661dde118be13559fd08ba31/play?event_id=player-wrapper","fqdn":"e.streamqq.com","domain":"streamqq.com","tld":"com"},"ip":{"addr":"104.26.4.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cd399b7c2492ccd3eae92311c4866f1","sha1":"9401863f140b5aba54ce107b7b3a7fb58af5fd3e","sha256":"95a2af69e904e52bdb636110c5df25beecfffc9ac2a2c57104c079d7ab5a7168","sha512":"384ff497808557bd92da473ff39612f5b70d707d58e7b77faadb5dffa9b52d222bb023c8b7115c1600c160baf66e5978fcbf80a185fd82aa97625d3eef2320f0","ssdeep":"","tlshash":"19c08c8c210b0db051b72a010b6fa600b04a321395d4d9213d0e63844f21e0bd764814","size":181,"data":"","first_seen":"2025-04-22T23:40:55.693644Z","last_seen":"2025-12-02T05:27:55.06663Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/js/lazy.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea4c63b8ad41ffc5c5a4d9d4d2c06f91","sha1":"058007ec43ab417cf45aa07d74b0f0867a467bcc","sha256":"605c626aebde014b1e636d3160ce7d3c1d400ebca356616e752bc82d74cb63d5","sha512":"f64ef5e8021f38d8f9e0a7163ae788d4a21e73d9f637d372a5873a144e2dabf63a35c6616639ace1d2acdffe6c09ec9a270f5fcbe080446af9cf84113e1196cf","ssdeep":"","tlshash":"6ff0e289a53760ae8c3377f2261ac209ff681043040183063f0c829f6fb872c5d91f9a","size":539,"data":"","first_seen":"2025-05-09T16:03:32.065846Z","last_seen":"2025-11-21T14:46:58.773718Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/js/jquery-3.7.1.min.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-03T23:31:47.434277Z","times_seen":136125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FGLB6SBQ1P","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a54e83b48cdf298a0172ed931fcb871","sha1":"4a495b87487ccb91aeaf7685502ebd3dc20366e0","sha256":"ed429d8b5b351ad81cc928d3b97f43fc533aa7dbc912c5670145847cd7bdbaf4","sha512":"a187f1352b02adbba3a71d6cdec66e38f04d9bba786a181cef12960d9eae9975df6dd036b1c87f4530d0c1d51ac14324428c53d7bab58038ec99ad72833ad33c","ssdeep":"6144:zB99/yp2a4tk0uwbWZJT+Nju5204O0NsYXdXAQY:FKYJm0KZJu0O8","tlshash":"769419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":424870,"data":"","first_seen":"2025-10-12T10:11:46.576144Z","last_seen":"2025-10-12T17:11:52.683483Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.streamqq.com/videos/661dde118be13559fd08ba31/play?event_id=player-wrapper","fqdn":"e.streamqq.com","domain":"streamqq.com","tld":"com"},"ip":{"addr":"104.26.4.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d3514d7378e1944601640ddf33f72c6","sha1":"27257eb35c9551906edb002b5f4cd23d4fe44b5c","sha256":"508c8c2d2da0f8811200a32faaaebe7c23330efc00f9e649f9b3fe92c3245041","sha512":"c1a173f2986d2c41e93292032689dd3aa65405032b149688454afef4cb02d2e05ff5c9756a941e054cb0d5b7a2202dca9072ab2b32a4df782fe59d491076a7f5","ssdeep":"96:YPQE7BHUZyqzy4yUayK6w3QX9Q4zR9KKoxLA67v8YDCcNwNXcFljojQyeiCOLdh:Y4QBGyqzy4yUaySQiP+x6izh","tlshash":"22b172fee74815705ddb42de957b134e3b308849ac014b45ca2dc844a47edebd2e3ab9","size":5330,"data":"","first_seen":"2025-04-22T23:40:55.701866Z","last_seen":"2025-12-14T15:16:26.423545Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4HCBEK3MH5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03e28da4612e488e34162780951b0540","sha1":"333117abdeec793bf1ed941b507d42501baca0a6","sha256":"7317d64f2189ee38d2096439f433d5f5e885ee3818e4166a2fa38146084a9504","sha512":"22c538caf2236b98bca214d750785f11b766e29338326400d9bfab1ce799ff0c7459656e183d8b3e4f57f3c2e9348e810a6e82bb3189b0ac610efab97cb5849e","ssdeep":"6144:TB6v/yp2a4tk0uwbWZJT+Nju5204O0NsYXdXAQY:lFYJm0KZJu0O8","tlshash":"089419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","size":425164,"data":"","first_seen":"2025-10-12T14:48:06.705307Z","last_seen":"2025-10-12T17:11:52.661804Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/js/jquery-3.7.1.min.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 11 May 2024 03:39:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"663ee872-155ed\"\r\nexpires: Mon, 13 Oct 2025 02:47:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8625\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wu2EVB%2BkQWF5i8pyEPQMh3iheQbMwzg3nq%2BOc4FuBA9P2SvBa6RCPd2b9t17213wFI36otxnQhpi5lfTVjdFLMnHrk%2FuLy9msQ%3D%3D\"}]}\r\ncf-ray: 98d837c7f9c8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-03T23:31:47.434277Z","times_seen":136125,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/bi-bong-gan-thue-anh-tho-ve-nha-mat-xa-nhung-kieu-gi-no-la-lam-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/bi-bong-gan-thue-anh-tho-ve-nha-mat-xa-nhung-kieu-gi-no-la-lam-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Nov 2024 17:23:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672a548d-3b32\"\r\nexpires: Tue, 11 Nov 2025 17:11:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NV1FZfFFFYxe508LFdhPDs3P7v%2Fu3P4Ku6P0UbukIX1cKS6SftPtdwl9tvhr9Z6HjGGWmvFCtlWUdbgwtJf6Gv2egMkTKHWF4A%3D%3D\"}]}\r\ncf-ray: 98d837c959dc568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15154,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"3e4646b155c8ff547598f1ab02fa0367","sha1":"0d4f0d3c4ef5b0283ada58cdbb38bc5614281a03","sha256":"ae22f9ef4ee2db5d15059693bb84c6373500f1bef27d3bc9a305d948db42e23e","sha512":"606e123bc30b785c78a660021e7e2df99e6be54bdb2f9609571936139138ffda65edc1e994a80b695ce91e8fe9b1a5ff0e8d0d09448b90ccac9d3be8acb87546","ssdeep":"384:JerDxYzQF9FsAeVqg5ZPXPS0atN4Zm+6Oh:JerDGzwFbe5kHj2","tlshash":"a362d1b29b055118e10fefa93dd353364291fd7822dc9a8faeb5f2710f801d79561a0d","first_seen":"2025-10-12T17:11:52.629927Z","last_seen":"2025-10-12T17:11:52.629927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1548,"receive":568,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/nghe-em-ren-suong-anh-khong-the-ham-noi-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/nghe-em-ren-suong-anh-khong-the-ham-noi-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 02 Nov 2024 22:03:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6726a19c-2c18\"\r\nexpires: Tue, 11 Nov 2025 17:11:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPPoyPtPlS9OUhP0vYpQjtglnDvq5Wbw6%2F%2FCY4aS4ICVaoWyEbbVScKqxZTtbhBAjx0D%2FPuM4MtPgAIbnut89Ts8Zbk%2BwJbRkQ%3D%3D\"}]}\r\ncf-ray: 98d837c959dd568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11288,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"e08a830b2d7a6c53b21285b0e932f293","sha1":"9b855474de8329e7f67f607217be2976e996625c","sha256":"b47a74f6bee9f582df5eac7ff54e64ef7d508e6503986117a62b4498099e9e40","sha512":"3fc70a97f9034e0057d61a75e17298571db8c6e4624e363e9c253d76954a632f54047d6dd275555534a09762a802623a52c54297a5957de6a550f8b7f47b2eed","ssdeep":"192:35/MDg58PGnBzdEzJO41K9BJpJUH3YLJic/RRWIuAkAm34QC6ep350+V:J18Pux2K9BDJ79d/RQFRA8G35n","tlshash":"6432b027a3885dd64a374dd82683f365a449024b26b0400a9f7dcfd2eb438ddee84267","first_seen":"2025-10-12T17:11:52.633198Z","last_seen":"2025-10-12T17:11:52.633198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1557,"receive":557,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/bootstrap-5.3.3-dist/css/bootstrap.min.css","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/bootstrap-5.3.3-dist/css/bootstrap.min.css HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 20 Feb 2024 15:04:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d4bf8d-38d63\"\r\nexpires: Mon, 13 Oct 2025 02:47:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8625\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFOhkLWFSBrVmM4wdj9BDJXt7PVqDXTcrKHxERfoS6oNG58EU52lPxnI4WLsY7te%2BrcwjAR9sMesZI1KT9R7svmQqIjcYGaVXQ%3D%3D\"}]}\r\ncf-ray: 98d837c7e9c4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-03T22:59:38.689245Z","times_seen":17935,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/default-poster.png","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/default-poster.png HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 12 Oct 2024 18:15:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"670abcde-439a\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8624\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hSOnOE6io8MJVeXsn5ZeZ6fmDy3d9dZPeEHhrW39om4EJyhe%2BmQqXkZfTfFmIcQj%2Bg091p7LkMAplf4z1Diu5c34v4DN4XGEJw%3D%3D\"}]}\r\ncf-ray: 98d837c959da568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17306,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 312 x 209, 8-bit/color RGBA, non-interlaced","md5":"805191981b23fbc63b56e4cc16fc68ff","sha1":"6349734b5dc8d9c69e5c19f259bfcc49e3f5e12b","sha256":"78e9f252f0c246efa22f49ac0957c640bf1bcaf12ec2f59d9ca9b25c61c1eac8","sha512":"24cc0539332d1d0f32e50ab6dca70767100d89da924faafd57e27c02545df0b7297e4fcdadc508bc4168248eb916622c95c964f42a34271dcc96ae3c921e1dbb","ssdeep":"384:5JXE05NcmCflojjRwNNHmhmEtd3HQO4q7ukZ5:r35zV++Vtd3bBv","tlshash":"1672bf9d567a854a89dff8d4298f6209fb738c963ec215382483ffc1090e7d23b69d94","first_seen":"2025-05-09T16:03:32.086Z","last_seen":"2025-11-21T14:46:58.768153Z","times_seen":26,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/playboy-chinh-hieu-ngay-thit-vai-em-hang-ngon-p1-resize.png","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/playboy-chinh-hieu-ngay-thit-vai-em-hang-ngon-p1-resize.png HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 02 Nov 2024 21:50:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67269ea1-17f34\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8623\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gslakDa%2FIrcgTRvOyQzht%2F3AxoCznnxuT3wgZ58%2FEx%2BoFE6TMecg49ncC3agsl8LrAKaDZvGFm6ieWq2o%2Ba4JZjkkL89ADQDEg%3D%3D\"}]}\r\ncf-ray: 98d837c969e1568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 312 x 197, 8-bit/color RGBA, non-interlaced","md5":"dbd84b9b1e2d4d96cb5a1b590ae4fe90","sha1":"d84b98a13362a1e4ac29908d72aaeb65c4caa938","sha256":"393e68f89ba4a0ad4ffcb4376c6ed64590bb3e97cc12a98d43eacdf37da68e54","sha512":"a224e7bd43773c67b1b69620eeca9d636deec9edb07d286d7bc7876f837de938fc2f9fe8b96390191ca9fd8abe56ba694c013e83059b598222a727fdab7c4e89","ssdeep":"1536:LsVpAWBf36lMjUnZq39fVXlpz35XbxQXUr7QHHT0iLM81B2PkA5DaN2T:gVpDhyOfVV3XbOXs7QHHwio81gPFDI2T","tlshash":"e1a31241d652eb303aa4f47903cff18d55d191e2f6d6f86f188ddc412d2b01ea2b9e1a","first_seen":"2025-10-12T17:11:52.655434Z","last_seen":"2025-10-23T14:16:29.656836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/em-nhan-vien-van-phong-di-cong-chuyen-bi-ga-quan-ly-cao-gia-chuoc-say-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/em-nhan-vien-van-phong-di-cong-chuyen-bi-ga-quan-ly-cao-gia-chuoc-say-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Nov 2024 17:22:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672a5446-2c01\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8623\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FJsqRm9lOWQu5BSIfITODLVnmtq4ZBsDUEpPMgOY8TOkN9rNcTBXmaSrlzwvjFk5xSmKt72c9XDT5W6AqXKAGiSp2QxV37j7g%3D%3D\"}]}\r\ncf-ray: 98d837c979e5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11265,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"6d86956a3922174db26953170e097e7e","sha1":"2dedfe1f5f05d6274da6106d576de15583d2027e","sha256":"54b51a4d9d81ad8abd4fe44dc64e6fbf6584d31bdf80e5439d12b0331d8c4c54","sha512":"383035cfbce100143919999a21aa8cf35bfa180a43cb5f191133c9f8d3cd96deb49e25e2c5334dd60493f7de523f7c5ed7a2d6539b3d9459427aad1c5df8d49d","ssdeep":"192:355t0FSPa7a6AA5PpYzYmRlhO/hKygZj8QLJFiAQXUuLzHSctpmbNzpEE0SO:JX0FSi7a6A0PWMm3hO/hKya8QaAQksHZ","tlshash":"7732c03d920eb6c603403fefad79968d8db826600da52b05efb5d494ea3d4d4450bb2f","first_seen":"2025-10-12T17:11:52.65851Z","last_seen":"2025-10-23T14:16:29.588122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4HCBEK3MH5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://e.streamqq.com/videos/661dde118be13559fd08ba31/play?event_id=player-wrapper","date":"2025-10-12T17:11:43.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-4HCBEK3MH5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e.streamqq.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\nexpires: Sun, 12 Oct 2025 17:11:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141098\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425164,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"03e28da4612e488e34162780951b0540","sha1":"333117abdeec793bf1ed941b507d42501baca0a6","sha256":"7317d64f2189ee38d2096439f433d5f5e885ee3818e4166a2fa38146084a9504","sha512":"22c538caf2236b98bca214d750785f11b766e29338326400d9bfab1ce799ff0c7459656e183d8b3e4f57f3c2e9348e810a6e82bb3189b0ac610efab97cb5849e","ssdeep":"6144:TB6v/yp2a4tk0uwbWZJT+Nju5204O0NsYXdXAQY:lFYJm0KZJu0O8","tlshash":"089419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-12T14:48:06.705307Z","last_seen":"2025-10-12T17:11:52.661804Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T17:11:26.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /con-dau-dam-dang-them-cac-cua-bo-chong HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 17:11:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nserver: cloudflare\r\nx-pingback: https://spo38.click/xmlrpc.php\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzZaTh4DvooIpY9LeTxZ0qpy1aCnkpWWWGnw7rOjqqwYS3JAlDu%2FGufuqDq0y8c0Inp5KNNLiIQnWWR3ZFa1nqPi3pJkHbHEudJp\"}]}\r\ncf-ray: 98d837653cd9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":74411,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":13708,"timings":{"blocked":33,"dns":15,"connect":1,"send":0,"wait":13642,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/bootstrap-5.3.3-dist/js/bootstrap.bundle.min.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/bootstrap-5.3.3-dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 20 Feb 2024 15:04:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d4bf8d-13b51\"\r\nexpires: Mon, 13 Oct 2025 02:47:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8625\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyRvsxtgnJdagHqzH1qBsuwpIQkLy4iaGHN36yp5tuk2bg2i1VPf8%2BvFkzEbRe6JXlhpYhfvZU54Bc6I2qzRcm9DGm6Zapq%2Ftw%3D%3D\"}]}\r\ncf-ray: 98d837c7e9c6568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-03T23:43:45.39573Z","times_seen":21821,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/dap-lien-tuc-vao-lon-con-ghe-dam-dang-resize.jpeg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/dap-lien-tuc-vao-lon-con-ghe-dam-dang-resize.jpeg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 07 Nov 2024 22:54:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672d4531-238f\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8623\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVDwKdkglkGB65vEM%2BSpMZSmkTy%2BnRQ71gJxZXYWWtszYs6AZworCEqud5wWDk1GIdR5pN9RPNfvgkx7O9dzwH1sZlkN8ymgXg%3D%3D\"}]}\r\ncf-ray: 98d837c959de568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9103,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"aeb39d52cad4893b1deb13de8416e27f","sha1":"2afa192765474f8305f8b050a572515b16472a38","sha256":"ab59db3817842579401b273ca829338f6d62915e4aecd10232c517f36bda78c9","sha512":"5e67b6806eb7a1baa8fc63513356d5825bdb04cc01f9e2ca5dfbd5d177c8ee5fd64cae60c73f832aba0572017096a0c728357daf8b8ee94a86229e0f3aa37342","ssdeep":"192:35LlX1t8uYdLN1+YI8ILYcLCxYoh+ZleUu6ur3DD:JLkVWLIxd+GqiD","tlshash":"0d12b05ae9c5c022b62a8c2b5b4c3029510b7653f659cb25f337c447c742bc4ed6ab05","first_seen":"2025-10-12T14:48:06.724224Z","last_seen":"2025-10-23T14:16:29.648402Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/moi-sang-day-em-da-doi-quan-he-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/moi-sang-day-em-da-doi-quan-he-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Nov 2024 20:57:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672fccc2-2099\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8624\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZPNDdVNdKC1LD%2B2my0QLopRG85hQ4Gt0lO0EsCH3aBVKW%2BGXNVi%2BeLcA7LKOSLhYB%2FCjT9Gj077Ws1z8CUGJ6nukHjwlsWmhQ%3D%3D\"}]}\r\ncf-ray: 98d837c959df568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8345,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"27ba84abfa3800a0f5bc32302162f0ab","sha1":"9b3a0fae03580c797bd39fe759d4761373524f93","sha256":"5ff665f2d1bccf00c411d6389b4acde9a354485d325fcbb208268c5eb0dc8a6f","sha512":"c81f7ca38f779367349b32d6c39d189f07cdffcf5347aaade24c2de13377c43c9c60e046c58c3f504e56d22e138943c9d4b4330607c9e7e8db1b03059e8e540e","ssdeep":"192:35mk6B9xXwEcGLeOvCMhwKzZQq0rVGcmpceWaMXdVE:JF6rxXXvxhxzWqe3mpceWrE","tlshash":"6702b0b1025ecf10f4abed7e4e173c66c15a3545f4e81909a971f21c57509c8642ff2a","first_seen":"2025-06-20T21:50:55.032953Z","last_seen":"2025-10-23T14:16:29.628164Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/swamp-stamp-anime-edition-1-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/swamp-stamp-anime-edition-1-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 10 Nov 2024 21:52:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67312b34-36ad\"\r\nexpires: Tue, 11 Nov 2025 14:47:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8624\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBjK7Pa9a2m8cSJaPiijqIPmiX6qJQ21FuOmS2sy2So0FfU0YqDg31oqJj6hSwfRLBAe4zS5ib52Vt8p6P%2FHijPhEycbpQc9uw%3D%3D\"}]}\r\ncf-ray: 98d837c979e7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13997,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"e3f9045d370283273c62360da63b7c64","sha1":"2729d1977f7641410aa7c2b5b6d16535ca6dffa1","sha256":"7ba44ff6b41c18d0348bc0b9a82e91a3cbdcc59dbde8a34311d0470108d9d9e7","sha512":"31d84d9e9659e4dfb7b5b0cb72a0b73bfceecf8fcbc4a83a31d8b9ecf9008f970d22b6753efea995212de1319e58559f4e91a03248dd2439a61aa00e2c29e307","ssdeep":"384:JHMpsyVE2hehyblNCMzL3/0yqtmbt7Ztn:JHMOGVhAyvCMH3/0WHtn","tlshash":"b552c0336712675d89aaadbf0e69189e53c9b4c4ccc4be4ce8b5e043e2801cc45969af","first_seen":"2025-10-12T14:48:06.714465Z","last_seen":"2025-10-23T14:16:29.665533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/css/all.css","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/css/all.css HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Apr 2024 07:32:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660bb4a0-227d1\"\r\nexpires: Mon, 13 Oct 2025 02:47:55 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8626\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2JMUiahXAxAibaDAO%2FO0VLBKsyda%2F%2FHyIFdRgdwjmDX3Vqk4EvMZYQ6MBaaHBK9ijpYIb9vmfdsA6Go1lFoJ1s4EzJ6XbofqQ%3D%3D\"}]}\r\ncf-ray: 98d837c7e9c5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141265,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"4d039a527e8976dc1a3f3f2fde049e73","sha1":"ab9ac9c284125bf89a12578dd733834fbb191533","sha256":"2d0ea9247b2dfce75fe145875aa489e7121a60ea0691e60b02b6a45b46a90382","sha512":"53d635b06077b0b229666dde3dcaca6d75615e59d035cbb01902765a33e39e9e971ea5537602256da0f325724802e093a77cb6dadfa7848e01f3c17fe6576314","ssdeep":"1536:tDmSm4mSmKmSm/mSmHXmSmumSmymSmLspOUB7WEHFJeJsEypRB5nOxdFnYnS+WqJ:JPB7WEHFJeJID/gYnS+Wqh+xazyPi","tlshash":"efd376fad0ff10d48311e0892647e3a4b739b62c9c4a4c58e2a67d8de6c165cb1c6bdd","first_seen":"2024-06-03T21:53:27Z","last_seen":"2026-04-03T16:07:13.293029Z","times_seen":495,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/anh-trai-co-bap-test-buom-ba-nguoi-yeu-xinh-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/anh-trai-co-bap-test-buom-ba-nguoi-yeu-xinh-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Nov 2024 20:22:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672fc494-3c05\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8623\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gL0LtZ3PDAJlk3DMFP2xoJVfx5lQZ7v0%2BkcvxWPYQgzLxYsYC5wEeMKNh4soGWgy97a2whYLLGbtXWXcin8FXr08BUl30iH0fw%3D%3D\"}]}\r\ncf-ray: 98d837c979e6568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15365,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"62f0daa024a073d1f0863bae74ab9a6d","sha1":"3c6fbb1562936bb2a6e4533d94149efb5cf24246","sha256":"7d1df3cdecdc46983242820d04774c7dc2a495ddd4dbfafa31a88846f7ac8ead","sha512":"6130f562cd05abd9f11cf83aee229c3fc3f7eafd42f80b1a7f131ce675c8ef249268235e33e2e0f18f5b719b1d6fd5aa6ed49257e561d550029c1baaf4ecfba7","ssdeep":"384:JCYc93XxYqEeTXtLDAxw1UgbUTRSwEwpFeWX8ueuNZuql9wBD:JUQhkFIgwTRXE8YsIKyV","tlshash":"b162d0c25c54c9bfa08dac78367794fdde8769f4ac4097c6c9faec1a0031addd165424","first_seen":"2025-10-12T17:11:52.68075Z","last_seen":"2025-10-23T14:16:29.591802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FGLB6SBQ1P","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-FGLB6SBQ1P HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\nexpires: Sun, 12 Oct 2025 17:11:42 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141282\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"1a54e83b48cdf298a0172ed931fcb871","sha1":"4a495b87487ccb91aeaf7685502ebd3dc20366e0","sha256":"ed429d8b5b351ad81cc928d3b97f43fc533aa7dbc912c5670145847cd7bdbaf4","sha512":"a187f1352b02adbba3a71d6cdec66e38f04d9bba786a181cef12960d9eae9975df6dd036b1c87f4530d0c1d51ac14324428c53d7bab58038ec99ad72833ad33c","ssdeep":"6144:zB99/yp2a4tk0uwbWZJT+Nju5204O0NsYXdXAQY:FKYJm0KZJu0O8","tlshash":"769419de73d674225396f078503f018ba57b28a2b44cc89af189cde42e74a9a4177f7c","first_seen":"2025-10-12T10:11:46.576144Z","last_seen":"2025-10-12T17:11:52.683483Z","times_seen":2,"resource_available":true,"data":null}},"time_used":480,"timings":{"blocked":185,"dns":0,"connect":22,"send":0,"wait":40,"receive":60,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Nov 2024 11:03:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6735d8ed-2aaa\"\r\nexpires: Mon, 13 Oct 2025 02:47:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8625\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9aoWd4Tdmd%2FTJVnPZ1q6LLno8R%2B6vum%2FMrqjNesl1tN5hkqKPRsaZnimTpJt%2BnndgxgLnQVQbcmT3Wz6TNTJgxN2L8X54RwhDw%3D%3D\"}]}\r\ncf-ray: 98d837c7f9ca568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10922,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10878)","md5":"3ffef9d75612e6d5b383c393b3fb7d87","sha1":"7cfdaa40c3440efd2751d9833a768ea6953f6351","sha256":"87219a2f9be014310d195b371277e88a30d17ed287e81025bbeff604e8930bca","sha512":"ec75ed22162d939750983608e73d7918be68aa8e9d0fe5edccb4713d98c3841a4891d43bac8988db77b60d37ec242d6e7e1568951bf822b61403bbbc27b22f8e","ssdeep":"192:sabfHQ2RHMb9LFY+AxE30UWZacKfy5sWlRyyO/BT8nyuEazDnUcdQP1VAB8X55Mi:N5RHMb9LFY+AA0FYZfy5VlRyyO/BTEE1","tlshash":"6f32c66332a9683684cd55deb4347349b1351d9c330ad119f9bc28ee3628ed67129ff8","first_seen":"2024-11-12T12:25:03.267692Z","last_seen":"2026-04-03T17:03:45.266165Z","times_seen":2701,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.streamqq.com/videos/661dde118be13559fd08ba31/play?event_id=player-wrapper","fqdn":"e.streamqq.com","domain":"streamqq.com","tld":"com"},"ip":{"addr":"104.26.4.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamqq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 23:46:26 GMT","end":"Mon, 17 Nov 2025 00:46:19 GMT"},"fingerprint":{"sha1":"9C:46:01:40:B1:43:73:A7:5B:53:B0:0D:83:F1:55:A8:3D:C5:ED:29","sha256":"6B:9E:BA:90:4C:5B:66:F8:EA:BE:04:59:FC:5C:80:FE:C1:47:B5:09:72:2B:99:5A:57:C5:17:3D:9E:3F:AC:65"}}},"request":{"raw":"GET /videos/661dde118be13559fd08ba31/play?event_id=player-wrapper HTTP/1.1\r\nHost: e.streamqq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKQZI02%2B8kAtSexEIKmOe8X4fKVvRgff7sDNg6KQISC157nWN7DIstBOmwviDltRnm%2FxqAAMb8JwU2QwD6AdaRnoMKtzmjXLEMk50yY%3D\"}]}\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-encoding: br\r\ncf-ray: 98d837ca4d7e2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9603,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (5351)","md5":"50427b33eb0a87a265739b56745106a5","sha1":"808836731fd7787cf7628cf10d136b9781add363","sha256":"fc7d54828a5a02624d62680c3171cf15094884ceedee72e0ecb330715b4054dc","sha512":"5d83258c03dfa239f58ea81318f977a029ec04c377528ab2818beae4eb65819cd8a834e8924ac0ee1b46c98e2b6bd596be5bac730945f2f3c4f5dcb736872c49","ssdeep":"192:RvaJ5oABbOgfAvI+FCsvr4QBGyqzy4yUaySQiP+x6izW:R9AB4LvVGyqzy4yUayq+xnW","tlshash":"2a12f9f6f68902308adf82ca99ab530e36758447f9410f49f91dd800867addab1f6df4","first_seen":"2025-10-12T17:11:52.688867Z","last_seen":"2025-10-12T17:11:52.688867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1173,"timings":{"blocked":284,"dns":5,"connect":1,"send":0,"wait":605,"receive":0,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/dua-con-cac-to-gan-vao-mieng-em-nguoi-yeu-xinh-dep-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/dua-con-cac-to-gan-vao-mieng-em-nguoi-yeu-xinh-dep-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Nov 2024 22:58:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672fe932-3eee\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8623\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1i16T23o0UeyXeqIvLOMZfiujaWx6Shr2oOs9c1Ocggq3GKYp6haG1KAwC7AFXEGQeHRNZmiMyKHkJ5Df5jbZxUfbcH5AUHww%3D%3D\"}]}\r\ncf-ray: 98d837c969e0568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16110,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"dbfc613f401989ef83c266acffd747a3","sha1":"ee81e8779ae98748c4758fed6c27c3b9cbc076da","sha256":"2ac877cedaa8731f6cd1fe65d3228410b25b802eddd7e8c9632e1ffa204b88ae","sha512":"cc612c596f981766948d8c86afaec599e7206e37246ef7281e05b98774002d499c183c6c4fb8238611887c4bc49aebfb6b8abd0e207f852bed1ba7f8c1faf4fc","ssdeep":"384:JsDBO/jc53oIVP7kJlpqq9UP9jP5ftmSu/cLGCJdTlFhF68G:JsDArU3o0jan79Ul+HELl5A8G","tlshash":"1572cf9bc94225f5ac6dbebc84106073c1015cf32a746bd03efbea942945ed9c4ea290","first_seen":"2025-10-12T17:11:52.691588Z","last_seen":"2025-10-23T14:16:29.632631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/kyonyuu-daikazoku-saimin-2-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/kyonyuu-daikazoku-saimin-2-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 10 Nov 2024 21:48:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67312a1c-43bc\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8624\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezUq49FCsE0grZaiYM6SxsTPSovhbyusW99SDM%2BOEyQ7jhsFiJPGiVlIusrY9GW9cME9xydXytinvHTOG0H8d1J1ojAIQOujRw%3D%3D\"}]}\r\ncf-ray: 98d837c969e3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17340,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"ec4a8287032299275a687183bdf41757","sha1":"ba31084d682e7ee75a70f064444d1905f8c314e0","sha256":"1bd3102c358b143211d6bcb549c9b60a20cfa1d0512dcbc05e3d0490e92abdef","sha512":"5b9f5c3af11f5c5e0872e9981932e1af9f6abb4f520b6078ab1d2d8075146336b261382e22d25927d2a51a21b70d0153ff632e41f98f3e93836b4fd0df425f28","ssdeep":"384:JqHA8Z8n0CCjX4vDozaBcrTrPOBl18UIgZNy92:JqHr20CjszicrPOmPqW2","tlshash":"a272d0a14be2d391b911cd745489402b0a1db2c8544cae6c3a70c49cf7778ffce9b819","first_seen":"2025-10-12T14:48:06.689087Z","last_seen":"2025-10-23T14:16:29.661231Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/webfonts/fa-solid-900.woff2","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156400\r\nlast-modified: Tue, 02 Apr 2024 07:32:48 GMT\r\netag: \"660bb4a0-262f0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixdkHKO6DRJ%2BiK3Ge6cEXF4we5%2F993z1KMjo0D%2F%2FfdRiXi4ih4qJqI6G8oBqh4opApAJbrQLKaBZY8QvZNv%2BPicRnx0CkfI31A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d837c8d9d3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-04-03T23:41:02.501681Z","times_seen":8799,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1062,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T17:11:39.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /con-dau-dam-dang-them-cac-cua-bo-chong/ HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 17:11:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 12 Oct 2025 09:49:56 GMT\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3HMbB5oMSD%2BtLSASOYSz29%2FAj%2FzySGHzBelt2lX4pzljMteca6gdEjqCJ3ipKqSMKQ0yA%2B2ULbmD4NUTg8Na%2BgPlaUN00pSgJau\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d837ba8da5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":74411,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"5d0403b4919ad8e068b955f0e4558eac","sha1":"3958f3a4ed5aa95b05c9c6fa7c61e8ec7e19d213","sha256":"e63ff0ebaa51944b9833dd308370d3a6f47a8e07cbc33a8a5f9e4d7d6e510916","sha512":"939c48793a7d044a162ee9488ca428e30d5b2aed815adb07e082a8c5b05ee9ef24821afda4591911bebca4763f24ad24083a174c130c9120549f3fc3e6b1cdb8","ssdeep":"384:ooOos7UHljdSEt2ZEVr3ZdqZUaAWkWp6oKkPYPkBkrkGkm46A/idPJpU4iQmBGAY:ooOHsZdapzp6N3qCh5tQQeNkbfOexJ","tlshash":"aa73867281d8402a8677c2d84561372cfd818107cb1aeb5a72fd179b5fbefa098a375c","first_seen":"2025-10-12T17:11:52.700522Z","last_seen":"2025-10-12T17:11:52.700522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1868,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/style.css?ver=6.8.3","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/style.css?ver=6.8.3 HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 04:30:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"670c9e5c-1bab\"\r\nexpires: Mon, 13 Oct 2025 02:47:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8625\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSjfqmOALL6jWsc9Xly3t%2Fur3v3jXpmBiUfJ6er7Y%2F2F8RitR7MT6y99xMHAdWA69jZRHwAvKuEkE%2FtNoQGiOhGksjcJJ0tEtg%3D%3D\"}]}\r\ncf-ray: 98d837c7e9c3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7083,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"7c53e3097a4458f0d5fa828da00d116b","sha1":"ec23c9e7728d7b07c1aedffc284935fa09713964","sha256":"1976cf8fd6688784f8456a0f4c8c9399d0861ecf6b28e74d4df661c7632ba8d8","sha512":"abdf2417a2b6e81b6d00cc2c40c7752ef8b4633ffe0c5dd3796bd9a14420d2049a40372adcf7f1ea75c7efbb902416f24f10c3ea5acd6409dac6771c6471add9","ssdeep":"48:6k0w+8xw+QfLaLnriX3o5O0tfwisH4FQ3L5St2giwyTbQL59vtf6dOPG98vtOfeA:6NWPSeoiTFD1lwQwX1uq1Fnlni8glF0H","tlshash":"57e143a8e610108231375ea97be6962debbd8083de02167c7fd6a7514fb11e451b1f8c","first_seen":"2025-05-09T16:03:32.073386Z","last_seen":"2025-11-21T14:46:58.812013Z","times_seen":28,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/webfonts/fa-regular-400.woff2","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/wp-content/themes/Heovl/assets/fontawesome-free-6.5.2-web/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25392\r\nlast-modified: Tue, 02 Apr 2024 07:32:48 GMT\r\netag: \"660bb4a0-6330\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=352nxAIEXarp7H0SVkOYn0aCUvZDfG4qjcQpdsQZqFrnen11kywTA%2Bt1SEEKFUizlAjz4f5WheySu4tXKB7Cp0BA7JkQVfIbmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d837c8f9d5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25392, version 773.1280","md5":"aa7c5fa494807f7a9ec907defee083e8","sha1":"8c9331bf363872cd84f2d1089b4d72fc21784cbd","sha256":"c27da6f833431da5aa295c44540bfac0fd8270ba6a3c4346427006d8a7b34b76","sha512":"67762c4dcf59c2e2989d3bd7294b9f80cf61e00b437230a94a30993af60e060fe2ecdc34510a3c37b026c6d16b7151e311a1cce99fffd5c1771b6332f2e0c53f","ssdeep":"768:P4XxqHUwrxhT2ZYg+pQZizxLhcgUlLPpxN:PHbdVxLoVl","tlshash":"16b2e0ce0a4e788bd827853d6ad45d4e9cb3c1c26bad90aedd3f06dd132b388e56d441","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:54:55.051329Z","times_seen":2387,"resource_available":false,"data":null}},"time_used":1059,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1058,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/em-cao-sach-long-tu-suong-chay-day-nuoc-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/em-cao-sach-long-tu-suong-chay-day-nuoc-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Nov 2024 20:59:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672fcd42-241d\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8623\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OM9%2FGEb3nwYgfKTAFXKRVDvwELUfwOEgZekOg0kXpCrojiBY0UA2gNsT2CGIOmOmLVI3OEoet3VbyqUSmKVa5AkA5BP%2FW779Nw%3D%3D\"}]}\r\ncf-ray: 98d837c969e2568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9245,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"77d0c3c689daad22640371b38cb17d86","sha1":"203a83b9b185ee90fe1763f4a54856682a215257","sha256":"03988bba03e7e1fafd3bdd318e40fffd788590f5c3edd13687aac1835c0d0326","sha512":"30ec6dea85340ff57a2b06da11d095a76f97d9a2f11e911a6ee219f1d0fab8b62accb2718857f13d599735d72ac8dcc9c4f0126c2d7ca49e0935adbc410834cb","ssdeep":"192:35AmktcFGa0JNkU3sWAvLycooud5kBDPQAtW0ZGoVpe:JAmJGa0JP8WAL8o250Y1RoVpe","tlshash":"d112ae585a970053ec2a6cd522cb333a574e195bb62c937079b0e48af868dc2d54cff8","first_seen":"2025-10-12T14:48:06.685148Z","last_seen":"2025-10-23T14:16:29.65404Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/co-sep-dam-dang-o-cong-ty-la-vo-cua-toi-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/co-sep-dam-dang-o-cong-ty-la-vo-cua-toi-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 02 Nov 2024 22:34:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6726a8f2-2d10\"\r\nexpires: Tue, 11 Nov 2025 14:47:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 8623\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mn23Q0DcvDZoGSqeg7RX2T0johvDZ8zaNCi2dGl%2BWOsz1WqQz2yIBEsmVVqqabpsJg43qF9sat6XSPga9AVT6bOhWKG9B1HZUQ%3D%3D\"}]}\r\ncf-ray: 98d837c969e4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11536,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"af652dafb166a2dd609ce66ca7be2864","sha1":"3177e195e5d26e2156e7ea31060c6f718793948d","sha256":"f1a2d6b2c50228a4853d751ec16967adbfed808e0281fdadd0eb81f8f28ad5a0","sha512":"8271d75a8f66a7afa09233a1fe86fdbc49c1ac4554231b5faab9151d4df37664100abe8b401d92c58e45334e780d1d7b38908953b6440f4dc4824b4ad85bc1ac","ssdeep":"192:35cQ3fJoCiDNfmNET+2HjiWo1Jf5mfT6XAQ3NV+w+XgxL0AVhxjkhYAd5:JvR4lq2Hy1JfAfKAQP+XXAHwmAH","tlshash":"f232cf05431163b1d6beedfa980b2578a5a91e90ff845f242ebcf53e8f612c8c04d07a","first_seen":"2025-05-09T16:03:32.076722Z","last_seen":"2025-10-23T14:16:29.638091Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e.streamqq.com/videos/661dde118be13559fd08ba31/posters/3.jpg","fqdn":"e.streamqq.com","domain":"streamqq.com","tld":"com"},"ip":{"addr":"104.26.4.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://e.streamqq.com/videos/661dde118be13559fd08ba31/play?event_id=player-wrapper","date":"2025-10-12T17:11:43.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"streamqq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 23:46:26 GMT","end":"Mon, 17 Nov 2025 00:46:19 GMT"},"fingerprint":{"sha1":"9C:46:01:40:B1:43:73:A7:5B:53:B0:0D:83:F1:55:A8:3D:C5:ED:29","sha256":"6B:9E:BA:90:4C:5B:66:F8:EA:BE:04:59:FC:5C:80:FE:C1:47:B5:09:72:2B:99:5A:57:C5:17:3D:9E:3F:AC:65"}}},"request":{"raw":"GET /videos/661dde118be13559fd08ba31/posters/3.jpg HTTP/1.1\r\nHost: e.streamqq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://e.streamqq.com/videos/661dde118be13559fd08ba31/play?event_id=player-wrapper\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, accept-encoding\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 12 Oct 2025 17:11:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BftbZJcd7fiNoAeUfrEYoyWxvrFJUWSHFfooErIsLZHVnJqOpT6cFNu8vSMe7hSAA7CtTOmUcRq9fWFCFVfkrtWx7NIk%2ByXWy8dgdT8%3D\"}]}\r\ncf-ray: 98d837cea9932efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"Lavc58.134.100\", baseline, precision 8, 1280x720, components 3","md5":"66a05dbdc6fd8bc2f7a3f7a123186c3e","sha1":"31fcac9f01b1b53252c4e6313106e4d562e82486","sha256":"19d61293b3953c9d77542ec7417cdde197686da451d3fe5b8ba93505d0a1de81","sha512":"fb54cbc02e13283e819fb0b535a66c3edeb8cc67ef81d334ba3c619070c7f7db39890693cfd320b4f761a7f464f06a56c67be9b18bba9227e7848d4b14761fbd","ssdeep":"768:Z1PTVic77li13iut+4bwWlmPIjtmyy4z2gxR5M92kEUM:bPpi+e+iwk0t4/6gUM","tlshash":"2cf2e10e6fc2e3e5c6da0b7089c74ab0e73106f50ba6694647f35ca4987b3009e6dec5","first_seen":"2025-10-12T17:11:52.718356Z","last_seen":"2025-10-12T17:11:52.718356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/themes/Heovl/assets/js/lazy.js","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/themes/Heovl/assets/js/lazy.js HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:42 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 11 May 2024 06:09:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 13 Oct 2025 02:47:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 8625\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"663f0b89-21b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrUkpqWTud2tPaNqCo8uF2i3ji5%2B5YG1TL81YgnVya6oZvEdNLVdQdOK3tPWqjHWz6IGl5oJIlv%2BbmVac52HlwZEiK%2FFCVc2LQ%3D%3D\"}]}\r\ncf-ray: 98d837c7f9c7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":539,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ea4c63b8ad41ffc5c5a4d9d4d2c06f91","sha1":"058007ec43ab417cf45aa07d74b0f0867a467bcc","sha256":"605c626aebde014b1e636d3160ce7d3c1d400ebca356616e752bc82d74cb63d5","sha512":"f64ef5e8021f38d8f9e0a7163ae788d4a21e73d9f637d372a5873a144e2dabf63a35c6616639ace1d2acdffe6c09ec9a270f5fcbe080446af9cf84113e1196cf","ssdeep":"","tlshash":"6ff0e289a53760ae8c3377f2261ac209ff681043040183063f0c829f6fb872c5d91f9a","first_seen":"2025-05-09T16:03:32.065846Z","last_seen":"2025-11-21T14:46:58.773718Z","times_seen":28,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spo38.click/wp-content/uploads/2024/11/joshikousei-no-koshitsuki-6-resize.jpg","fqdn":"spo38.click","domain":"spo38.click","tld":"click"},"ip":{"addr":"172.67.193.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/","date":"2025-10-12T17:11:42.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spo38.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 13:42:27 GMT","end":"Fri, 09 Jan 2026 14:39:55 GMT"},"fingerprint":{"sha1":"83:EF:74:BF:38:43:8F:8A:1D:0C:4E:3E:15:98:3B:21:B6:48:DB:88","sha256":"5B:DF:0D:11:F6:71:37:4D:2A:FD:5D:50:26:D9:C6:53:D7:E0:79:D9:31:8A:9A:E3:20:AA:62:5A:0D:FE:6B:1D"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/joshikousei-no-koshitsuki-6-resize.jpg HTTP/1.1\r\nHost: spo38.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spo38.click/con-dau-dam-dang-them-cac-cua-bo-chong/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 17:11:43 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 10 Nov 2024 22:13:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67313021-3f2e\"\r\nexpires: Tue, 11 Nov 2025 17:11:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GK3iIvdAjb%2BlVUZ7KwBN9hnQJT8yrWMo6NQZoN4De6QI8RpISsB1pKieAcn3HskXzOanwoMcBznpMFO4NwGje5TDUjZgGzcAqQ%3D%3D\"}]}\r\ncf-ray: 98d837c959db568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16174,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 312x197, components 3","md5":"74b05e1c9a18108d123ca964bf1ca636","sha1":"6e2a9a7727c67113159dc703ac5160d26ba5b8c7","sha256":"a72dc44094860b29ddd8029c2eb7514b8a7e1f92feeac34586376c3f39708281","sha512":"8d4b87e8505c85890ccc851b09db2353e4353e14f6c083d997c0e81ec91c548a105f9f652a6c2cf0bd1782f12e61c847a07efb3dd9fc30043c69dea578a07410","ssdeep":"384:JgDE+ux3VeaunyniowUQa55YGku2y9M5MI1RG53kOQv+cQ5B:JgDE+ZyniJUQa5FPM5MNd5lz","tlshash":"4c72e0bb2f8000cdff727d186cda3b82aff4ea47364de1420634da5479151e091baac2","first_seen":"2025-10-12T17:11:52.7261Z","last_seen":"2025-10-12T17:11:52.7261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1266,"receive":284,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}