302 Moved 0 B URL User Request GET HTTP/1.1 IP
ASN #131392 GMO-Z.com Runsystem Joint Stock Company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: soithanviet.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved
Date: Tue, 05 Dec 2023 15:41:37 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16
Location: http://www.soithanviet.click
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
www.googletagmanager.com/gtm.js?id=GTM-NWZ5RDQR
200 OK 61 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-NWZ5RDQR
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (2213)
Hash 571956f91786e39ce57ee71a972b16d9
577edb88c2c09ca01f7cfa2c437470cb23977d70
fdd5509b5fc1f190165eea38425a0906af2b1220a28856c35b290be8b451168f
GET /gtm.js?id=GTM-NWZ5RDQR HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 05 Dec 2023 15:44:18 GMT
expires: Tue, 05 Dec 2023 15:44:18 GMT
cache-control: private, max-age=900
last-modified: Tue, 05 Dec 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 61097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
w.ladicdn.com/s750x700/5c7362c6c417ab07e5196b05/light-20200819090617.png
683 kB URL GET w.ladicdn.com/s750x700/5c7362c6c417ab07e5196b05/light-20200819090617.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 683 kB (683045 bytes)
Hash 430559d2fdcccfa232826d23d57c69c0
18012858fb9a0f5259e6f40ea321c4905e1d6f04
43956786b0b63bfa869e5b4b6528599f6c92a5ab972ef8d3f3d8350d0ef58f39
GET /s750x700/5c7362c6c417ab07e5196b05/light-20200819090617.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Thu, 30 Nov 2023 21:35:48 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Fri, 29 Nov 2024 21:35:48 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Leyir362w31v8--OqYcYUkerZp2_MSXZkLceOTanYI6yvodcYJuGfw==
age: 410909
X-Firefox-Spdy: h2
w.ladicdn.com/v2/source/ladipagev3.min.js?v=1700630241859
200 OK 116 kB URL GET HTTP/2 w.ladicdn.com/v2/source/ladipagev3.min.js?v=1700630241859
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 116 kB (116121 bytes)
Hash 717bfe83ba9f19e83c70df5e76109507
5ae0fc8f54b877718a78791e1d8a478ecedd657f
4f4158a847ba699e47503e08312a2314ba29e116420b5fcb96363d221a670667
GET /v2/source/ladipagev3.min.js?v=1700630241859 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
server: nginx
date: Tue, 05 Dec 2023 08:05:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 08:05:43 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: TytveYSGt0CvZHp6fwa-6vVktco8DpWndPuZ1RyqrifBm809ppUV7A==
age: 27515
X-Firefox-Spdy: h2
fonts.gstatic.com/s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTigPvNiA.woff2
200 OK 7.7 kB URL GET HTTP/2 fonts.gstatic.com/s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTigPvNiA.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 7740, version 1.0\012- data
Hash a5e4237c66f99c01047a3b769a5f3236
d7b5cf32e32bd33ffc1dc568c131bf44bcbe1aae
d6968f5809c83643e4e8782faf5e928bad76f648a670861b7e91d0777dea7458
GET /s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTigPvNiA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 22:20:59 GMT
expires: Tue, 03 Dec 2024 22:20:59 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 21:12:13 GMT
content-type: font/woff2
age: 62600
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 16424, version 1.0\012- data
Hash aa485a5ac8e86032c387497a6e8e139a
c29462206cfb74110ce0e59a2fb5e8cbedbf9c96
db5d7bb36691306bda51b903c84fbdef4206d3c166b8080100915d16a617f5ea
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16424
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:22:11 GMT
expires: Fri, 29 Nov 2024 23:22:11 GMT
cache-control: public, max-age=31536000
age: 404528
last-modified: Thu, 14 Sep 2023 00:41:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 470601
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 16424, version 1.0\012- data
Hash aa485a5ac8e86032c387497a6e8e139a
c29462206cfb74110ce0e59a2fb5e8cbedbf9c96
db5d7bb36691306bda51b903c84fbdef4206d3c166b8080100915d16a617f5ea
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16424
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:22:11 GMT
expires: Fri, 29 Nov 2024 23:22:11 GMT
cache-control: public, max-age=31536000
age: 404528
last-modified: Thu, 14 Sep 2023 00:41:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2
200 OK 21 kB URL GET HTTP/2 fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 20760, version 1.0\012- data
Hash b4ee6253d8716e0e9c5d709dab5c4ed1
e13adbe7074446df8427736c759c612133f781b6
c5c268299cdaa725aa32d248338b0e9beadc9808da1124720204bac9b215d018
GET /s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20760
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 04:43:46 GMT
expires: Wed, 04 Dec 2024 04:43:46 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 24 Oct 2023 01:45:45 GMT
content-type: font/woff2
age: 39633
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
w.ladicdn.com/s650x450/5c7362c6c417ab07e5196b05/v346tq34t-20200716043850.png
43 kB URL GET w.ladicdn.com/s650x450/5c7362c6c417ab07e5196b05/v346tq34t-20200716043850.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash d2a093589796332028e24125ab789f6e
726148add2ee5080303e54e48b135e313f8ce94f
de379d7eb3db764455e833764b00503de9e0d678030a071f9251c5ba9824e156
GET /s650x450/5c7362c6c417ab07e5196b05/v346tq34t-20200716043850.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sat, 02 Dec 2023 17:14:13 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Sun, 01 Dec 2024 17:14:13 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -8MMmvFe1-Z2Ky2UDSuN9_BeWkkfOULM9XDfjXPQjDmUGhHHV8zPvQ==
age: 253805
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2
200 OK 9.9 kB URL GET HTTP/2 fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9872, version 1.0\012- data
Hash d44d540631575c3cfa5d1aadbe3db267
eb40eabdc5caf568af2780b76c0b775e42bbbc0d
4c2a824cab9799116baa8f7a85c7ca062fd67d1ee7b9bc6338ef3bcdae31fc16
GET /s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:09:47 GMT
expires: Fri, 29 Nov 2024 05:09:47 GMT
cache-control: public, max-age=31536000
age: 470072
last-modified: Tue, 24 Oct 2023 02:24:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/bungee/v13/N0bU2SZBIuF2PU_0AnR1Gd8.woff2
200 OK 5.8 kB URL GET HTTP/2 fonts.gstatic.com/s/bungee/v13/N0bU2SZBIuF2PU_0AnR1Gd8.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 5848, version 1.0\012- data
Hash 8bfc30d8e5f482a5cb82682ee2cd0d53
f50e69d8af4f24de13c6e81f31fd641adb07ba68
5c8d7f12ca7884979fa5874020850d1e4d7ac6e285e359f3a63b8fb61e53999a
GET /s/bungee/v13/N0bU2SZBIuF2PU_0AnR1Gd8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5848
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 12:42:40 GMT
expires: Wed, 04 Dec 2024 12:42:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:51:43 GMT
content-type: font/woff2
age: 10899
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/bungee/v13/N0bU2SZBIuF2PU_0A3R1Gd8.woff2
200 OK 13 kB URL GET HTTP/2 fonts.gstatic.com/s/bungee/v13/N0bU2SZBIuF2PU_0A3R1Gd8.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 12752, version 1.0\012- data
Hash 2aece81f137e4d3ef5e1225739a9716f
9cb9bad9897efbfceec5d04cf879e321aff2ab2b
488fe90f906ed4982e65198f89241a3867417002e8d3670745b57426af46b047
GET /s/bungee/v13/N0bU2SZBIuF2PU_0A3R1Gd8.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 12:42:40 GMT
expires: Wed, 04 Dec 2024 12:42:40 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:51:47 GMT
content-type: font/woff2
age: 10899
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
w.ladicdn.com/s750x550/5c7362c6c417ab07e5196b05/a96bbd921fd2f68cafc3-20200819091016.jpg
61 kB URL GET w.ladicdn.com/s750x550/5c7362c6c417ab07e5196b05/a96bbd921fd2f68cafc3-20200819091016.jpg
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 051bdea9243eda5de82f67982dad08d5
b1d3ce2f3c595e853c62fc22c7b1b85b79190aa3
f8fe788c7bde6f8167a4808a036da034d3cfb7044bc0d47a60ab4b0ae7bb025d
GET /s750x550/5c7362c6c417ab07e5196b05/a96bbd921fd2f68cafc3-20200819091016.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 03 Dec 2023 17:13:17 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 17:13:17 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JpqVvypRUS0z88vAQAxzAs6I8aB3xb9MyNyAN7_DuEd2_bF37N4idA==
age: 167460
X-Firefox-Spdy: h2
w.ladicdn.com/s1050x550/5c7362c6c417ab07e5196b05/v346tq34t-20200716043850.png
41 kB URL GET w.ladicdn.com/s1050x550/5c7362c6c417ab07e5196b05/v346tq34t-20200716043850.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash ee095b9b686a3d68b4042edda04b8627
1e13f6b851fe0171c8b7e98886b30d5554174c41
03277fc79e37968033c48ae21d46ec3742042b1cca432733fa3c47e76f7ac4b4
GET /s1050x550/5c7362c6c417ab07e5196b05/v346tq34t-20200716043850.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Thu, 30 Nov 2023 03:18:47 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Fri, 29 Nov 2024 03:18:47 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0SUjtlfSWqlJ6bXqkB0ATPu0eDzci8u_v4Y9hyY9yD4sWAe0XRSIuw==
age: 476732
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 11824, version 1.0\012- data
Hash deb26e9b1a25438118e5d39d741ae6b6
a2801defb4c8bed8e4083dfde0b2a5a9c0537020
fc66f942651a9fe1a598770d3d896529dcd7a03d02f40655451513093103e61b
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:21:50 GMT
expires: Fri, 29 Nov 2024 23:21:50 GMT
cache-control: public, max-age=31536000
age: 404549
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
200 OK 5.5 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data
Hash cdaab83619fcacd4027a77c99dd51e69
9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4
4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:22:10 GMT
expires: Fri, 29 Nov 2024 23:22:10 GMT
cache-control: public, max-age=31536000
age: 404529
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700&family=Paytone+One&family=Open+Sans:wght@400;700&family=Bungee&family=Roboto+Slab:wght@400;700&display=swap
200 OK 13 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700&family=Paytone+One&family=Open+Sans:wght@400;700&family=Bungee&family=Roboto+Slab:wght@400;700&display=swap
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 0e035a4893fc03ff9fa978e51f1bc01c
b5ac7fe067443f77f2ee71a5d3c6a2ab02e2fe67
aaecd37e5120e5065216e4200f9205ca151ecea0c5fc6f188ba8829b90b8b01d
GET /css2?family=Roboto:wght@400;700&family=Paytone+One&family=Open+Sans:wght@400;700&family=Bungee&family=Roboto+Slab:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 05 Dec 2023 15:44:18 GMT
date: Tue, 05 Dec 2023 15:44:18 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 470601
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data
Hash dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:36:49 GMT
expires: Thu, 28 Nov 2024 21:36:49 GMT
cache-control: public, max-age=31536000
age: 497250
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data
Hash dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:36:49 GMT
expires: Thu, 28 Nov 2024 21:36:49 GMT
cache-control: public, max-age=31536000
age: 497250
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2
200 OK 34 kB URL GET HTTP/2 fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 34328, version 1.0\012- data
Hash 6581ab53c220b5828e37162349375431
1922912ca5ab6eb5a55db138b183b38d066e85c8
a8e429611131e3fdc2018ec943a36100dbabb4aaa788c8dead6bdcf927917293
GET /s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:27 GMT
expires: Fri, 29 Nov 2024 04:53:27 GMT
cache-control: public, max-age=31536000
age: 471052
last-modified: Tue, 24 Oct 2023 01:54:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zigzag.vn/js/check.js
200 OK 372 B IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Requested by https://www.soithanviet.click/
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type ASCII text, with very long lines (961), with no line terminators
Hash 436c2c7b4b0f0eb67216749716d51c8f
a1006e1716707dc84e7ad8d6b9ef1b65880d00a0
27abf0ef17bad6e9d1ae00ceef2ee96d398c9adb718594c8aa99e7d2656ea020
GET /js/check.js HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:20 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 24 Aug 2022 07:56:29 GMT
ETag: "3c1-5e6f804c4aac9-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:20 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Content-Length: 372
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript; charset=utf-8
a.ladipage.com/event
200 OK 16 kB IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjecta.ladipage.com
Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D
ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
Hash d13d17ccaf08f303f2080e6ab5168729
551281edd5fb5e89d3b0c35d2a8fa4741ebfd689
96334446b22d188688e3ccdddc6c3f990fabe9704b7e0cc263fc59ec24314107
POST /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
LADI_CLIENT_ID: e16f3d3f-b76a-4ee5-6898-b1ccbcd82065
LADI_PAGE_VIEW: 1
LADI_FORM_SUBMIT: 0
LADI_CAMP_ID:
LADI_CAMP_NAME:
LADI_CAMP_TYPE:
LADI_CAMP_TARGET_URL:
LADI_CAMP_ORIGIN_URL:
LADI_CAMP_PAGE_VIEW: 0
LADI_CAMP_FORM_SUBMIT: 0
Content-Length: 228
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:20 GMT
content-type: text/plain; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
X-Firefox-Spdy: h2
zigzag.vn/js/qc_json.js
200 OK 5.7 kB IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Requested by https://www.soithanviet.click/
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
Hash 8eb8bdafbc17a76f66bc2281a9720917
b80bff44c966076afffc7e95c0d3f7f2b074351c
0a7a4e5f31fbc4f13771b95d0c1dd9cb520ffe87a14e394be130bc2679ad856d
GET /js/qc_json.js HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:21 GMT
Server: Apache/2
Last-Modified: Mon, 23 Oct 2023 06:25:59 GMT
ETag: "2191-6085c4ba420c3-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:21 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Content-Length: 5726
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
zigzag.vn/chat
200 OK 1.9 kB IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Requested by https://www.soithanviet.click/
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (316), with CRLF line terminators
Hash fb4841f11a17029fbe2c655363b53d53
e6452b379abf2e0e4328239a40adedb0d6208b71
3965e6a18e09840bb2d032f350bf0a34f712859dce1076210f846efd02cbaa22
POST /chat HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 126
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:22 GMT
Server: Apache/2
X-Powered-By: PHP/5.6.40
P3P: CP="CAO PSA OUR"
Permissions-Policy: microphone=*, camera=*
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; path=/; samesite=None; secure
_bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; expires=Fri, 15-Dec-2023 15:44:22 GMT; Max-Age=864000; path=/; SameSite=None; Secure
_mnb=0; expires=Mon, 31-Aug-2026 15:44:22 GMT; Max-Age=86400000; path=/; SameSite=None; Secure
_zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC; expires=Mon, 30-Sep-2024 15:44:22 GMT; Max-Age=25920000; path=/; SameSite=None; Secure
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Content-Length: 1855
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
zigzag.vn/css/layout.php?lang=vi&color=0&effect=1&bar=blue&zbub=1&dp=0&1698174863
200 OK 3.8 kB URL GET HTTP/1.1 zigzag.vn/css/layout.php?lang=vi&color=0&effect=1&bar=blue&zbub=1&dp=0&1698174863
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
Hash 8e915cdd3dd96770489d69cf49e3940b
3f883ae90bbbb1bc23443b7ce71207819ad3202c
e9856a1e2f2b7f5cec648d5c2d39a87e53e02e49e2989486ca39105216ed82c1
GET /css/layout.php?lang=vi&color=0&effect=1&bar=blue&zbub=1&dp=0&1698174863 HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:22 GMT
Server: Apache/2
X-Powered-By: PHP/5.6.40
Cache-Control: must-revalidate
Expires: Tue, 05 Dec 2023 16:44:22 GMT
Content-Encoding: gzip
Vary: Accept-Encoding,User-Agent
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Content-Length: 3818
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css; charset: UTF-8;charset=UTF-8
zigzag.vn/media/min.png
200 OK 4.4 kB IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type PNG image data, 49 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash 75d00a7e66db7554db779ef98b897be7
dfb1ece1cfceb3370b0bdf5591bc90c3f2c26cd5
8fd5b20ecfd0f9a962adb2bfc8bf7179d2237ca7a87e2d1e913fb908a3ab7fea
GET /media/min.png HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:23 GMT
Server: Apache/2
Last-Modified: Tue, 15 Sep 2015 21:24:26 GMT
ETag: "112e-51fcfce74b680"
Accept-Ranges: bytes
Content-Length: 4398
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:23 GMT
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
zigzag.vn/chat.js?1700716884
200 OK 17 kB URL GET HTTP/1.1 zigzag.vn/chat.js?1700716884
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
Hash 6940e46aaea2c486b5a826b64cf7b567
6bca5198a8b8dc6168291b79d6811b67a961ee51
16300b99ce7fca0135de14607426afd0ad8dff5c4e0e381380852e1dc81f9de2
GET /chat.js?1700716884 HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:23 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Thu, 23 Nov 2023 05:21:24 GMT
ETag: "6b20-60acb01c1bc78-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:23 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Content-Length: 16633
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript; charset=utf-8
embed.tawk.to/64abb54ccc26a871b0276add/1h4vboddj
200 OK 3.3 kB URL GET HTTP/2 embed.tawk.to/64abb54ccc26a871b0276add/1h4vboddj
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash 20719cac513ac6a1d22a6a726d6f5b61
419c4deed264263619c085a8effe6a8724a5da45
0a21b790c7412da512e62549825874ec97e7e98776d8ae462285363bccc5a1ec
GET /64abb54ccc26a871b0276add/1h4vboddj HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:20 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-656eb8a5693"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d68eb7c331c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/2-20200819090754.png
9.7 kB URL GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/2-20200819090754.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash cecee5a8c65b2955527af39dc5b55242
f4bd9a998e8d4837c82a4cc22ec865edbdaef564
292bc3a7148b8f776d1be968caba00f2edab2405746da9731d5b6f2312c9354c
GET /s450x400/5c7362c6c417ab07e5196b05/2-20200819090754.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Fri, 24 Nov 2023 10:18:18 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Sat, 23 Nov 2024 10:18:18 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aplLxNrwvT94Adl6GnBGhzucWSpIYbKA2XJmzlLsCmyt2vSRqF4mog==
age: 969960
X-Firefox-Spdy: h2
a.ladipage.com/event
200 OK 4.5 kB IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjecta.ladipage.com
Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D
ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 53d48e34fbcaa0cc181750587afe2e1e
9fa399373cb4971f30193c45b8ec40e5cc3ded0c
e909e3f4883796931c0ece59e5d8a2c36e560a81e2f8ba8407f3f5fef898cb0c
OPTIONS /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,ladi_camp_form_submit,ladi_camp_id,ladi_camp_name,ladi_camp_origin_url,ladi_camp_page_view,ladi_camp_target_url,ladi_camp_type,ladi_client_id,ladi_form_submit,ladi_page_view
Referer: https://www.soithanviet.click/
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:20 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
w.ladicdn.com/s1440x499/5c7362c6c417ab07e5196b05/background-20200819082635.png
679 kB URL GET w.ladicdn.com/s1440x499/5c7362c6c417ab07e5196b05/background-20200819082635.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type PNG image data, 1597 x 499, 8-bit/color RGB, non-interlaced\012- data
Size 679 kB (679268 bytes)
Hash e7832b9b1fad74262ef498c277341b98
8cd7981bf3edc7d475ad16ebf6049a53592f8ae7
424ece8020fb264d294c395476ca1aecae1bccdba17d26c92f6a9b7c0d35c029
Analyzer Verdict Alert Public InfoSec YARA rules malware Identifies a webshell or backdoor in image files.
GET /s1440x499/5c7362c6c417ab07e5196b05/background-20200819082635.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Tue, 05 Dec 2023 15:44:20 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 15:44:20 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gw6qRMuMmDj4Au5b4M2gG2JL_O-UTBFDT8r47hZANrvc-WLJgx7QxQ==
X-Firefox-Spdy: h2
zigzag.vn/media/progress.png
200 OK 293 B URL GET HTTP/1.1 zigzag.vn/media/progress.png
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type PNG image data, 560 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a40092888aa912933d5d35b92cfbe20
1c2d9fb1a08912a045f0c8faf98cab0d1d60cbf2
1fa4a4e5226397b9d1e56c0c7185673a687f610a4886ca4888202b9d2fcf51f5
GET /media/progress.png HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/css/layout.php?lang=vi&color=0&effect=1&bar=blue&zbub=1&dp=0&1698174863
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:24 GMT
Server: Apache/2
Last-Modified: Tue, 27 Oct 2015 04:58:57 GMT
ETag: "125-5230eef6d8640"
Accept-Ranges: bytes
Content-Length: 293
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:24 GMT
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
w.ladicdn.com/s950x900/5ea3e4c8965dbc32b290fdf5/screenshot-2023-07-30-010911-20230729181320-cp3gk.png
247 kB URL GET w.ladicdn.com/s950x900/5ea3e4c8965dbc32b290fdf5/screenshot-2023-07-30-010911-20230729181320-cp3gk.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Size 247 kB (247026 bytes)
Hash f67969d7ece5016965679c67d5307239
515a75161e466474fb963ea362558e7e5bab9079
ff3698682a3b9dc6df26b9a5aafbf6fd7211b48f11777a1cba606af29552ecc5
GET /s950x900/5ea3e4c8965dbc32b290fdf5/screenshot-2023-07-30-010911-20230729181320-cp3gk.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Tue, 05 Dec 2023 15:44:19 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 15:44:19 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rCNF6PoXQ6li9giIBaw_2RTzrjzKg0UKh8akEN7Dgp1IQrSMhrd85g==
X-Firefox-Spdy: h2
zigzag.vn/firstprocess.php
200 OK 25 B URL POST HTTP/1.1 zigzag.vn/firstprocess.php
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 363f411ba212d4d1ccf7856f856145e9
08331057577f273187dd15e7c6f57937835e0aff
c50b40612adfdbf2e228758746fc7927cf440cb9bb5a8280c00d7946632a1943
POST /firstprocess.php HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 90
Origin: https://zigzag.vn
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:25 GMT
Server: Apache/2
X-Powered-By: PHP/5.6.40
Cache-Control: no-cache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
zigzag.vn/chatprocess.php?id=17017910.6770253745&docu=20520&lang=vi&bc=a1701791062&k=0
56 B URL GET zigzag.vn/chatprocess.php?id=17017910.6770253745&docu=20520&lang=vi&bc=a1701791062&k=0
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
Hash 1ba1fb37950511666aa25cdac0d5d67b
c7da61958809456bab2ad8197c9ce51c77e7cd83
eaa52ca12ac3da6ccf059091d0e9f2eb98ee0a85dab282c3991760d22dcbab70
GET /chatprocess.php?id=17017910.6770253745&docu=20520&lang=vi&bc=a1701791062&k=0 HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/event-stream
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:25 GMT
Server: Apache/2
X-Powered-By: PHP/5.6.40
Cache-Control: no-cache
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/event-stream;charset=UTF-8
zigzag.vn/media/ding.mp3
206 Partial Content 20 kB IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo\012- data
Hash f11ce9e8f40a392830217253fe75d6de
89ba57fcc360da34756c127acba15a8b23267fc6
05069cc62b394b6ecc2daf3c51b4b2ba7f6cc8735988e8234487234af47eceee
GET /media/ding.mp3 HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Date: Tue, 05 Dec 2023 15:44:25 GMT
Server: Apache/2
Last-Modified: Tue, 15 Sep 2015 21:24:26 GMT
ETag: "4cf2-51fcfce74b680"
Accept-Ranges: bytes
Content-Length: 19698
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Content-Range: bytes 0-19697/19698
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: audio/mpeg
cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
200 OK 41 kB URL GET HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (32014)
Hash 7bb7aac0cac89a90304af1c72eb4f50d
729f6f8ca5787d89743b0ed7eb27fd76406bf985
f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: br
accept-ranges: bytes
date: Tue, 05 Dec 2023 15:44:29 GMT
age: 21213962
x-served-by: cache-fra-eddf8230136-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 41275
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/656eb8a5693/css/bubble-widget.css
200 OK 44 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/css/bubble-widget.css
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (13521), with no line terminators
Hash 950518e32fd92957181f766f08d3cf98
9fe20c86b818d3576e9d70e6ed091964cb8b7427
2f56f47d64037d5aa3a96b50c840580e5549fee6f9fafff8af3d1821d189fa5c
GET /_s/v4/app/656eb8a5693/css/bubble-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=13594
access-control-allow-origin: *
etag: W/"ce7913b80c763449b3895d46419f7a6b"
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 35399
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d692a0e73b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-f1565420.js
200 OK 3.6 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-f1565420.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (11148), with no line terminators
Hash 4d9cab7c39e6e27bd04f823152e2cee0
40a90d2c560da840b0fe8d620e5ad89180f1bf73
70ab40ae02a0e70f352b7f5a42af904d595597c5cb9d382e94131b13e56c9c40
GET /_s/v4/app/656eb8a5693/js/twk-chunk-f1565420.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"4d9cab7c39e6e27bd04f823152e2cee0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35403
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6928acfeb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-vendor.js
200 OK 34 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-vendor.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2310), with no line terminators, ASCII text, with very long lines (65472)
Hash ce3014b09c6dfbd6f92bc585fd840580
d17abb8d652929260df6a153814560dd5af54424
916c13b184fbc42c59463a47bf90611461bec9e17a10a37def3c751ade00dced
GET /_s/v4/app/656eb8a5693/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:26 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"ce3014b09c6dfbd6f92bc585fd840580"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6910ff271c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.soithanviet.click/favicon.ico
200 OK 15 kB URL GET HTTP/2 www.soithanviet.click/favicon.ico
IP
Requested by https://www.soithanviet.click/
Certificate IssuerZeroSSL
Subjectwww.soithanviet.click
FingerprintD1:5F:33:B6:FC:4C:21:1A:35:7F:D3:80:E3:43:3A:E0:96:A0:B1:EE
ValidityFri, 17 Nov 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 32a0aef71ca5113bd857a5532330c59c
980a70ba1a93c15182faac369a99e8efcb180d2c
17322c2580cc44463b9df06184f8005bd15af3e0ef9237db4371ba1eba55f6e3
GET /favicon.ico HTTP/1.1
Host: www.soithanviet.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Cookie: LADI_DNS_CHECK="2023-12-05 15:44:18.369519578 +0000 UTC m=+2366039.385010674"; LADI_CLIENT_ID=e16f3d3f-b76a-4ee5-6898-b1ccbcd82065; LADI_PAGE_VIEW=1; LADI_FORM_SUBMIT=0; _timenow=1701791065005; LADI_UNIQUE_ID=31712d58-0465-47be-ac36-72aa552381c5; _gcl_au=1.1.787346974.1701791065
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 05 Dec 2023 15:44:21 GMT
content-type: image/x-icon
content-length: 15406
last-modified: Sun, 09 Apr 2023 11:31:27 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
zigzag.vn/media/zcall.png
200 OK 4.5 kB URL GET HTTP/1.1 zigzag.vn/media/zcall.png
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced\012- data
Hash 8cebc63c94e40df39cef8ea566030535
b9c576717da53ee6a6692a2a56a8999488367c8b
9aaa8eb2761ada64a0e36256b3d2f2ba172551a0a904db04dbb94406d2c94605
GET /media/zcall.png HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:24 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 04 Oct 2022 04:33:47 GMT
ETag: "116f-5ea2df75a6af9"
Accept-Ranges: bytes
Content-Length: 4463
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:24 GMT
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=100
Content-Type: image/png
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-main.js
200 OK 121 B URL GET HTTP/2 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-main.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3b41342f7e3be590563e8e3b5ff770c7
c9ca54d23ea78b320f080b76e22bb6b4e704d55f
ef04d89daeed55613a63a4af62c147ce86e4a7f22c8ce700dd6bdb11ab187e43
GET /_s/v4/app/656eb8a5693/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
w.ladicdn.com/v2/source/ladipage.formdata.min.js?v=1700630241859
200 OK 56 kB URL GET HTTP/2 w.ladicdn.com/v2/source/ladipage.formdata.min.js?v=1700630241859
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/source/ladipage.formdata.min.js?v=1700630241859 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
server: nginx
date: Tue, 05 Dec 2023 08:05:42 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 08:05:42 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nYCadcWNBZ12ToqFXODtXFEXqd705rtgFpFh7M_KEgI8uWb5IZFfUQ==
age: 27516
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-2c776523.js
200 OK 7.9 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-2c776523.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (8581), with no line terminators
Hash 66deb9d660a0528e2b3909ad3d97a340
fb03d0b3b97a251e4a6812b15c4f1876319e8692
97c305538967ed36cf2a69655a89781ff79cf1200dece2b19b4ad400c242f0c4
GET /_s/v4/app/656eb8a5693/js/twk-chunk-2c776523.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"589bcaf3fa2f5394494ee99582c6bee6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35425
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d69288cdeb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
vsa29.tawk.to/s/?k=656f455cee771623a2ee286d&cver=0&pop=false&asver=1053&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGFiYjU0Y2NjMjZhODcxYjAyNzZhZGQiLCJ2aWQiOiI2NGFiYjU0Y2NjMjZhODcxYjAyNzZhZGQtc3pqX2M5dWNQQVJ5bERFUEdodGk1Iiwic2lkIjoiNjU2ZjQ1NWNlZTc3MTYyM2EyZWUyODZkIiwiaWF0IjoxNzAxNzkxMDY5LCJleHAiOjE3MDE3OTI4NjksImp0aSI6IkRRMmJRSDRWaUFTVDJ1ajd3R0ZBeSJ9.ZFtkdcWpNT_YfOYqXWe8f55uT66mFnr9YAEfDffN8t6WVPqWvwFL28V24Tl_O83zxv5AM-RQ6uo5IcMHpd0a6Q&EIO=3&transport=websocket&__t=Omwfmna
101 Switching Protocols 0 B URL GET HTTP/1.1 vsa29.tawk.to/s/?k=656f455cee771623a2ee286d&cver=0&pop=false&asver=1053&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGFiYjU0Y2NjMjZhODcxYjAyNzZhZGQiLCJ2aWQiOiI2NGFiYjU0Y2NjMjZhODcxYjAyNzZhZGQtc3pqX2M5dWNQQVJ5bERFUEdodGk1Iiwic2lkIjoiNjU2ZjQ1NWNlZTc3MTYyM2EyZWUyODZkIiwiaWF0IjoxNzAxNzkxMDY5LCJleHAiOjE3MDE3OTI4NjksImp0aSI6IkRRMmJRSDRWaUFTVDJ1ajd3R0ZBeSJ9.ZFtkdcWpNT_YfOYqXWe8f55uT66mFnr9YAEfDffN8t6WVPqWvwFL28V24Tl_O83zxv5AM-RQ6uo5IcMHpd0a6Q&EIO=3&transport=websocket&__t=Omwfmna
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=656f455cee771623a2ee286d&cver=0&pop=false&asver=1053&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NGFiYjU0Y2NjMjZhODcxYjAyNzZhZGQiLCJ2aWQiOiI2NGFiYjU0Y2NjMjZhODcxYjAyNzZhZGQtc3pqX2M5dWNQQVJ5bERFUEdodGk1Iiwic2lkIjoiNjU2ZjQ1NWNlZTc3MTYyM2EyZWUyODZkIiwiaWF0IjoxNzAxNzkxMDY5LCJleHAiOjE3MDE3OTI4NjksImp0aSI6IkRRMmJRSDRWaUFTVDJ1ajd3R0ZBeSJ9.ZFtkdcWpNT_YfOYqXWe8f55uT66mFnr9YAEfDffN8t6WVPqWvwFL28V24Tl_O83zxv5AM-RQ6uo5IcMHpd0a6Q&EIO=3&transport=websocket&__t=Omwfmna HTTP/1.1
Host: vsa29.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.soithanviet.click
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Zz/7ICXhR7TkGp0a6uGU9g==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Tue, 05 Dec 2023 15:44:30 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: mUW9OBJ9E0r/apl+R0qRGXjKtRU=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 830d69298b4c1c06-OSL
alt-svc: h3=":443"; ma=86400
200 OK 197 kB URL User Request GET HTTP/2 IP
Certificate IssuerZeroSSL
Subjectwww.soithanviet.click
FingerprintD1:5F:33:B6:FC:4C:21:1A:35:7F:D3:80:E3:43:3A:E0:96:A0:B1:EE
ValidityFri, 17 Nov 2023 00:00:00 GMT - Thu, 15 Feb 2024 23:59:59 GMT
Size 197 kB (197202 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.soithanviet.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 05 Dec 2023 15:44:18 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
set-cookie: LADI_DNS_CHECK="2023-12-05 15:44:18.369519578 +0000 UTC m=+2366039.385010674"; Expires=Fri, 02 Dec 2033 15:44:18 GMT
LADI_CLIENT_ID=e16f3d3f-b76a-4ee5-6898-b1ccbcd82065; Expires=Fri, 02 Dec 2033 15:44:18 GMT
LADI_PAGE_VIEW=0; Expires=Fri, 02 Dec 2033 15:44:18 GMT
LADI_FORM_SUBMIT=0; Expires=Fri, 02 Dec 2033 15:44:18 GMT
LADI_PAGE_VIEW=1; Expires=Fri, 02 Dec 2033 15:44:18 GMT
LADI_CAMP_ID=; Max-Age=0
LADI_CAMP_NAME=; Max-Age=0
LADI_CAMP_TYPE=; Max-Age=0
LADI_CAMP_ORIGIN_URL=; Max-Age=0
LADI_CAMP_TARGET_URL=; Max-Age=0
LADI_CAMP_PAGE_VIEW=; Max-Age=0
LADI_CAMP_FORM_SUBMIT=; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW=; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT=; Max-Age=0
LADI_CAMP_CONFIG=; Max-Age=0
LADI_CAMP_END_DATE=; Max-Age=0
LADI_FUNNEL_NEXT_URL=; Max-Age=0
LADI_FUNNEL_PREV_URL=; Max-Age=0
statuscode: 200
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
w.ladicdn.com/s600x450/5c7362c6c417ab07e5196b05/bsy5r5t-20200715090546-20200819090617.png
0 B URL GET w.ladicdn.com/s600x450/5c7362c6c417ab07e5196b05/bsy5r5t-20200715090546-20200819090617.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s600x450/5c7362c6c417ab07e5196b05/bsy5r5t-20200715090546-20200819090617.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 12 Nov 2023 13:22:36 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 11 Nov 2024 13:22:36 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X6OeFPDFPJEvEuYNT0iAgoWz5jCP2SzKkUhovGG84awYpJ9CoXmGQg==
age: 1995702
X-Firefox-Spdy: h2
zigzag.vn/js/EventSource.js?1662085131
200 OK 30 kB URL GET HTTP/1.1 zigzag.vn/js/EventSource.js?1662085131
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
Hash 9c5f8369c0d78da0700f4ab7fe0aebb2
d3b4ae0f640f525ca48bb14f75b681a7ab8002bb
c95d962a4f02ed39d1879cd0431bed00e0dc71feb159c764ed6a221883f7b5b8
GET /js/EventSource.js?1662085131 HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:22 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Fri, 02 Sep 2022 02:18:51 GMT
ETag: "74c5-5e7a859d24c9e-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Content-Length: 18859
Keep-Alive: timeout=5, max=100
Content-Type: application/javascript; charset=utf-8
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-4fe9d5dd.js
200 OK 906 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-4fe9d5dd.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (956), with no line terminators
Hash 7b31fafdf609238b7f4574e44057af5b
f4f849145e5beaff38b9e47e3c5c3e7e4945d70a
2b7dfb20a5ee49b709a4adc3412bd7d5e00539c1ef93a1a58c4ec58816c81ed3
GET /_s/v4/app/656eb8a5693/js/twk-chunk-4fe9d5dd.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:52 GMT
etag: W/"1c5ecf371149feca23bd895ba9dfec4d"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35425
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6928cd29b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 10:09:38 GMT
expires: Wed, 04 Dec 2024 10:09:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
age: 20081
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/bungee/v13/N0bU2SZBIuF2PU_0DXR1.woff2
200 OK 18 kB URL GET HTTP/2 fonts.gstatic.com/s/bungee/v13/N0bU2SZBIuF2PU_0DXR1.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 17556, version 1.0\012- data
Hash 586d3f06a6b3938bc3c323bb53e6a534
90c2c449da001fdba31684f3625f638df7823580
20f19cd673238d0e7a7f60f1a4fa8362fe778abf181009be86cc97fb4ea0aeb5
GET /s/bungee/v13/N0bU2SZBIuF2PU_0DXR1.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17556
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:06:38 GMT
expires: Fri, 29 Nov 2024 05:06:38 GMT
cache-control: public, max-age=31536000
age: 470261
last-modified: Thu, 24 Aug 2023 21:42:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zigzag.vn/media/max.png
200 OK 2.3 kB IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type PNG image data, 42 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash f92757fa14dc6810ab721cc750265cab
c2ce0484c85d92cb98f506df442f4fbfd73ad96e
115410c9b6355fa52d26dba3bdd7bbf315ca16e290914285f74712e64e41034d
GET /media/max.png HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:24 GMT
Server: Apache/2
Last-Modified: Sun, 02 Oct 2022 02:28:01 GMT
ETag: "914-5ea03f9db6e8c"
Accept-Ranges: bytes
Content-Length: 2324
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:24 GMT
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
zigzag.vn/media/attach.png
200 OK 914 B URL GET HTTP/1.1 zigzag.vn/media/attach.png
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 8b7c28e675715668e0e02882a8d1e79e
61cfb1c285a6346a7e2f0cae3ccaf1e9940362b2
f739d632d43ab7b22fe486ea8d9b6b0725ce5ab4eb9e0287fba0c54acdc2edf1
GET /media/attach.png HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:24 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 27 Oct 2015 04:58:56 GMT
ETag: "392-5230eef5e4400"
Accept-Ranges: bytes
Content-Length: 914
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:24 GMT
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=100
Content-Type: image/png
w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/1-20200819090754.png
0 B URL GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/1-20200819090754.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s450x400/5c7362c6c417ab07e5196b05/1-20200819090754.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Tue, 05 Dec 2023 07:32:57 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 07:32:56 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PX1ycwNncMhSYyReNoDb3k-LC1P9yAiPyAXYymQQnK0J501wi_Zaxg==
age: 29482
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-24d8db78.js
200 OK 112 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-24d8db78.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65464)
Size 112 kB (112200 bytes)
Hash fc65ff3dc4cf9ffd7d7032f3da54cd69
afac42b136ac2264461bad31c352a7b7cef55e02
0442413c45c0a2faa4693e9a1e81a0d8e6d2d48947782f69176830db03986dfd
GET /_s/v4/app/656eb8a5693/js/twk-chunk-24d8db78.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"fc65ff3dc4cf9ffd7d7032f3da54cd69"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35425
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6928dd38b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-common.js
200 OK 223 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-common.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size 223 kB (222824 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/656eb8a5693/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:26 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"c93d5f6d40a773d800854f5c856e58d1"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d69110f431c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTtgPs.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTtgPs.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 23064, version 1.0\012- data
Hash c715689915b4e30f14c5facedc2ebbd3
f7178f676e98319593bc1361b2392a449e284452
168c5fc9446db472cbf9e25c0af43e551f18568b20828973eb2068b9d42401c8
GET /s/paytoneone/v23/0nksC9P7MfYHj2oFtYm2ChTtgPs.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23064
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 19:47:17 GMT
expires: Tue, 03 Dec 2024 19:47:17 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 22:01:27 GMT
content-type: font/woff2
age: 71822
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
va.tawk.to/v1/session/start
200 OK 1.0 kB URL POST HTTP/3 va.tawk.to/v1/session/start
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1120), with no line terminators
Hash 0d3d3e248528ad8bc0a18271ee6c32da
71a63cc756b67b4cb53c4f0995f8613e862171e0
07b060c1c38ee10f05b591b1d442bda61a141e04f565c620caeba4ededa424b4
POST /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.soithanviet.click/
Content-Type: application/json; charset=utf-8
Content-Length: 183
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-t8tw
access-control-allow-origin: https://www.soithanviet.click
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6915ae811c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/languages/vi.js
200 OK 18 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/languages/vi.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/656eb8a5693/languages/vi.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:27 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:52 GMT
etag: W/"d81fc1e3435374600ca4e2b12286a82b"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35385
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d691bf85bb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/css/message-preview.css
200 OK 41 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/css/message-preview.css
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (40699), with no line terminators
Hash c7393b57847a249cf71e453cff9c5693
2b151e46ff61023cac973343c951b4210cd4d374
7bd9666b0959d868276da481746b74e6a76fbc19f7957e528b8fb022367980bc
GET /_s/v4/app/656eb8a5693/css/message-preview.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=40832
access-control-allow-origin: *
etag: W/"cf4a08d496f49489af30571e3cbb48f3"
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 35424
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d692a3ea3b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/css/min-widget.css
200 OK 25 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/css/min-widget.css
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (24751), with no line terminators
Hash d4f9ad34fae3ba64cbc48057dc47e968
f8d0d55dc6e9b5d53f74b0b8bfc5e2edbdb0618d
2b5b9f68ace12b789b1371204754547021dcbf3e9df630e7e22b49ee56e05b8c
GET /_s/v4/app/656eb8a5693/css/min-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=24831
access-control-allow-origin: *
etag: W/"5742a34aaab2a5983c7c11cdeef1c0ee"
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 35424
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6929adffb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
va.tawk.to/log-performance/v3
200 OK 0 B URL OPTIONS HTTP/3 va.tawk.to/log-performance/v3
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.soithanviet.click/
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:30 GMT
x-served-by: visitor-application-preemptive-l2lp
access-control-allow-origin: https://www.soithanviet.click
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d692d59b7b505-OSL
alt-svc: h3=":443"; ma=86400
w.ladicdn.com/s850x900/5ea3e4c8965dbc32b290fdf5/screenshot-2023-07-30-010923-20230729181320-5le9b.png
0 B URL GET w.ladicdn.com/s850x900/5ea3e4c8965dbc32b290fdf5/screenshot-2023-07-30-010923-20230729181320-5le9b.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s850x900/5ea3e4c8965dbc32b290fdf5/screenshot-2023-07-30-010923-20230729181320-5le9b.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Tue, 05 Dec 2023 15:44:20 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 15:44:20 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oFZULu-m_IBmbJBqP_WV5xutIuIw6qY6J5-XhDGRRyhuI1SGDZOGKw==
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-vendors.js
200 OK 217 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-vendors.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size 217 kB (217124 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/656eb8a5693/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:26 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:52 GMT
etag: W/"86b32a04921a039ace69980bacd1b639"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d69110f411c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-2d0b383d.js
200 OK 699 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-2d0b383d.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (725), with no line terminators
Hash 7c2c957f3cf80dadfd0cbb7c677a0869
30e8962bf64cc7349c9e61b40b8bab5aa598c63c
606127d882e34faee4895ad2cbf8a94d805fac37792c2cc2b9bc05ca3de743b1
GET /_s/v4/app/656eb8a5693/js/twk-chunk-2d0b383d.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"838903127a65ec440893b4945c40ca4a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35425
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6928cd19b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
w.ladicdn.com/s550x550/5c7362c6c417ab07e5196b05/light-20200819090617.png
0 B URL GET w.ladicdn.com/s550x550/5c7362c6c417ab07e5196b05/light-20200819090617.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s550x550/5c7362c6c417ab07e5196b05/light-20200819090617.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Mon, 16 Oct 2023 01:50:48 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Tue, 15 Oct 2024 01:50:48 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AomiJdhCpchSa6mWPVFuZGe2-t13vHV_WLo07tjZ1afqYnEHMsDZ4Q==
age: 4370010
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 470805
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
va.tawk.to/log-performance/v3
200 OK 5 B URL POST HTTP/3 va.tawk.to/log-performance/v3
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 38a8a3e3b4b6a6e4f295b2e0f899b1f0
474f5fac3d23afbaf16c5a31c98dfcd956e4c186
7652c7891ed06bce4174ab00a6ee9721daf6a4286929213ecb7daf42cd866615
POST /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.soithanviet.click/
Content-Type: application/json; charset=utf-8
Content-Length: 96
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:30 GMT
content-type: text/html; charset=utf-8
x-served-by: visitor-application-preemptive-rddk
access-control-allow-origin: https://www.soithanviet.click
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d692e5ac9b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-9294da6c.js
200 OK 18 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-9294da6c.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (18247), with no line terminators
Hash 7182ad77af011d53741e7692ab78bbcd
4506a261a0e2a7c97fbd8db8ec119fd1fc1779d5
55da22bb78e6e358ff14a32aed04b033311da9ccefe6f6c1cc054873006d1a0e
GET /_s/v4/app/656eb8a5693/js/twk-chunk-9294da6c.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"7182ad77af011d53741e7692ab78bbcd"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35425
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d69289cf0b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-2d0b9454.js
200 OK 535 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-2d0b9454.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (557), with no line terminators
Hash 3f4a6312d60391bda06462d7321ffcdc
9f09295297840a36d2ac95344b39b0af1a729f82
28d61df22c079e51c45b6f87db516f03cb85cf3f2c3a970be369944c3f91bcf1
GET /_s/v4/app/656eb8a5693/js/twk-chunk-2d0b9454.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"c506281367048d4a134c9affbc68c8c6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35425
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6928cd2bb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-app.js
200 OK 151 B URL GET HTTP/2 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-app.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 04a9862af6efaf787bc8fb8e99ba6987
a57bb8f258eb1a60dc3b288a608ad8ef9fbecef3
ecc74c329a700e3e6ca29aed5ffe3c166cf39670c8b11573fa7f837f79a71b5c
GET /_s/v4/app/656eb8a5693/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:25 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d69111f4a1c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
va.tawk.to/v1/widget-settings?propertyId=64abb54ccc26a871b0276add&widgetId=1h4vboddj
200 OK 2.4 kB URL GET HTTP/3 va.tawk.to/v1/widget-settings?propertyId=64abb54ccc26a871b0276add&widgetId=1h4vboddj
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (2644), with no line terminators
Hash 8938c7229f65692a0138100c3a4cc17a
438c6bfdeb533b0ac98f35cb2bc040a01798d13c
c162acd6d6939aff0fc6f7f93f2c5e2e707d47aeaa7419525523abb52418935d
GET /v1/widget-settings?propertyId=64abb54ccc26a871b0276add&widgetId=1h4vboddj HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.soithanviet.click/
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:27 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-sm1k
access-control-allow-origin: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, max-age=7200, s-maxage=1800
etag: W/"2-54-0"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d69149dbc1c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 03:54:00 GMT
expires: Wed, 04 Dec 2024 03:54:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 42619
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
va.tawk.to/v1/session/start
200 OK 0 B URL OPTIONS HTTP/3 va.tawk.to/v1/session/start
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.soithanviet.click/
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:26 GMT
x-served-by: visitor-application-preemptive-vlgf
access-control-allow-origin: https://www.soithanviet.click
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6914adca1c16-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
200 OK 5.6 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2
IP
Requested by https://www.soithanviet.click/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 5560, version 1.0\012- data
Hash ca3b09b62fda648a4511700413313fd0
109cd4c5435bd6614391bb8722c47c287c96b2ec
77b24796a3d4ab521f66765651875338ed50cb9306cfe4603a3e79618e429cec
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:05:19 GMT
expires: Fri, 29 Nov 2024 05:05:19 GMT
cache-control: public, max-age=31536000
age: 470340
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zigzag.vn/media/zigzag.png
200 OK 2.6 kB URL GET HTTP/1.1 zigzag.vn/media/zigzag.png
IP
ASN #135953 Vietnam Online Network Solution Joint Stock Compnay
Certificate IssuerSectigo Limited
Subjectzigzag.vn
Fingerprint8C:89:25:33:10:D2:19:23:8F:89:A4:2E:E6:71:B1:D9:0E:A9:BF:10
ValidityFri, 13 Oct 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash f902c707d37f4c093b2c76f5cff343b9
dde9730443271ea93c53b0db99236998710ad424
dbd13887418c8955a51569f8eb8fc0e733bacb7d84d303de33a18ba1b1ad12f7
GET /media/zigzag.png HTTP/1.1
Host: zigzag.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zigzag.vn/chat
Cookie: PHPSESSID=lvc3vg7l2n3l9aharr8tc26sb2; _bv=7Bbc0RjX5fXiAccEME3OQPVHFF7OxQjtGi8gOQA3; _mnb=0; _zx=5BzeyR_i4vPiBskH5AO1BLoE6GHfzxja6PzlAMgC
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 05 Dec 2023 15:44:24 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 05 Oct 2022 04:15:46 GMT
ETag: "a46-5ea41d4b730e3"
Accept-Ranges: bytes
Content-Length: 2630
Cache-Control: max-age=2592000
Expires: Thu, 04 Jan 2024 15:44:24 GMT
X-UA-Compatible: IE=edge
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=100
Content-Type: image/png
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-runtime.js
200 OK 2.3 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-runtime.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2349), with no line terminators
Hash 5b0269cea73f792f9c9564d02e1148d3
4ed5e27650861cca08d7112cb8c79507698b0e91
26a91265eb200170a029b04d742aae9724616315347e3f1e72eb3c3fb0558dc4
GET /_s/v4/app/656eb8a5693/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.soithanviet.click
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 05 Dec 2023 15:44:25 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:52 GMT
etag: W/"bab9307a4e47f9e8bb08056a89c28e0f"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d69110f451c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-48f3b594.js
200 OK 19 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/js/twk-chunk-48f3b594.js
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (18972), with no line terminators
Hash a6389aac61b8c9e2734b0d9795309305
d7cd47d89458f3951d4c32ceb8b675f2213e6609
435678590b64837064c85f8c2e2ae5a1d545d1cb1fb1afe5bb7095149795c62a
GET /_s/v4/app/656eb8a5693/js/twk-chunk-48f3b594.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: application/javascript
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
etag: W/"a6389aac61b8c9e2734b0d9795309305"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 35425
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d6928cd23b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
embed.tawk.to/_s/v4/app/656eb8a5693/css/max-widget.css
200 OK 78 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/656eb8a5693/css/max-widget.css
IP
Requested by https://www.soithanviet.click/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d778223a957b2d3cdc540ff6547c0bfd
6fea621f551d26661f3a87c5d56d66b15afd0aca
799596c2833003b4bd92b1454ba52de29fb4fd07edb07648d64e567b0d293f85
GET /_s/v4/app/656eb8a5693/css/max-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 05 Dec 2023 15:44:29 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=78180
access-control-allow-origin: *
etag: W/"0ab357443b798b4a1db6c4f22b1590f4"
last-modified: Tue, 05 Dec 2023 05:45:51 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 35424
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830d692a6ed5b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
w.ladicdn.com/s800x800/5ea3e4c8965dbc32b290fdf5/thuoc-20230810032222-y_zxv.png
0 B URL GET w.ladicdn.com/s800x800/5ea3e4c8965dbc32b290fdf5/thuoc-20230810032222-y_zxv.png
IP
Requested by https://www.soithanviet.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s800x800/5ea3e4c8965dbc32b290fdf5/thuoc-20230810032222-y_zxv.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.soithanviet.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Tue, 05 Dec 2023 15:44:19 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 04 Dec 2024 15:44:19 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: folGnA7BJhiu5P44cVsFX23jFHZzEVmwbT7g-nfwCaxEkJBa1EXfng==
X-Firefox-Spdy: h2
103.18.6.109
143.204.55.34
52.220.48.161
0.0.0.0