| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9f3cf7e36f17a535e53e5213c02cf2b4 e65acbc03135ce135b9e91b4f74b3e1439faa6f6 a2317476862acd0a92fe523454c3991752b07ba14e7667f421dd9624e0233758
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2684
Expires: Tue, 20 Dec 2022 08:32:26 GMT
Date: Tue, 20 Dec 2022 07:47:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash460af93786e1eaa666f135e6c3fdc634 bc8aeba36225c79718f5de73d79928fe817c5490 471f4e7ae29bcf6ba1f749c0f5d4ab446cebfac5aa80c3e19c6edf21be456eb5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "471F4E7AE29BCF6BA1F749C0F5D4AB446CEBFAC5AA80C3E19C6EDF21BE456EB5"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2234
Expires: Tue, 20 Dec 2022 08:24:56 GMT
Date: Tue, 20 Dec 2022 07:47:42 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 20 Dec 2022 07:45:44 GMT
content-type: application/json
age: 118
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashbcade8542361774f13ecd22557ff8fb8 5e67a3753b0856c765f3b17f1742d3ed684ffb6d 647f8d9d3d1170e60a60e15fdfd9b59445feb56a6ce9d9bb2fa4720f0bfc3a14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "647F8D9D3D1170E60A60E15FDFD9B59445FEB56A6CE9D9BB2FA4720F0BFC3A14"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9939
Expires: Tue, 20 Dec 2022 10:33:21 GMT
Date: Tue, 20 Dec 2022 07:47:42 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +q5GnOC72y8M09BWk+usYhbF5i7eAXNeo1e9VHGW9JelzUdrB97JGoJoyYCTG5XgJfTEhJgoCkM=
x-amz-request-id: BGXARQY8Q2D82405
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 20 Dec 2022 06:54:53 GMT
age: 3169
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Dec 2022 07:47:42 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.2ukarma.2utraining.com.vn/workshop-ready-to-become-a-great-presenter |  18.142.208.246 | 301 Moved Permanently | 166 B |
URL HTTP/1.1www.2ukarma.2utraining.com.vn/workshop-ready-to-become-a-great-presenter IP18.142.208.246:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash3ea1c8d079b38532a6e01a96216ba5e2 598d3ff91d3e252f1e13df8cf0348b270ff2da3f 87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /workshop-ready-to-become-a-great-presenter HTTP/1.1
Host: www.2ukarma.2utraining.com.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Tue, 20 Dec 2022 07:47:42 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://www.2ukarma.2utraining.com.vn/workshop-ready-to-become-a-great-presenter
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 20 Dec 2022 07:08:02 GMT
age: 2381
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4df678b16094ceafefdbbd55707f4dbe 39a68e051456a8ab6c782502a94e8b95ccb0a71d 00561de9683c69a89e084b685df25c6ea4d3a38654a40554f127814200aadf6a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4485
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:43 GMT
Last-Modified: Tue, 20 Dec 2022 06:32:58 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| zerossl.ocsp.sectigo.com/ |  104.18.32.68 | 200 OK | 727 B |
URL HTTP/1.1zerossl.ocsp.sectigo.com/ IP104.18.32.68:0
Hashf90f33af04f4db20cfc5c61a66af46c9 2acc27cd707ab9e89fef79f4bbf5262d736e1ad8 9cd751c49472b304cfc5b4088815f4f448a7321ee3b4103aae2ba23458278a89
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 07:47:43 GMT
Content-Type: application/ocsp-response
Content-Length: 727
Connection: keep-alive
Last-Modified: Mon, 19 Dec 2022 09:08:26 GMT
Expires: Mon, 26 Dec 2022 09:08:25 GMT
Etag: "2acc27cd707ab9e89fef79f4bbf5262d736e1ad8"
Cache-Control: max-age=522641,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77c6c585dcedb4ee-OSL
|
|
| push.services.mozilla.com/ | 52.38.146.2 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.38.146.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: z5tR3mh7GreeDrZAt+NT6g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8xuHK8+4fAqs961POz6K+FY7Tco=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0dc23a845daadd984dd46924d80efb81 8b6ac466ee633c3a3a2eff65bd60dcb6097e5c75 3f3ebc1214709374a862beef3041aec51861f5fa7377f12710853bf31c772c58
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Roboto:bold,regular|Oswald:bold,regular|Quicksand:bold,regular&display=swap | 142.250.74.106 | 200 OK | 1.3 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto:bold,regular|Oswald:bold,regular|Quicksand:bold,regular&display=swap IP142.250.74.106:0
Hash0aaa82c4b587c787c77ad4865352c3c6 ed7c9c7a64f481b9b2680169b1ddef84f831fe5f a2340dcd647c5f3fa9855ab171312d884906742a3a4ec5638811b2baf91f2379
GET /css?family=Roboto:bold,regular|Oswald:bold,regular|Quicksand:bold,regular&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Dec 2022 07:47:44 GMT
date: Tue, 20 Dec 2022 07:47:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashdc42e8888911b1f352cc281c26b44e1e 6b4d3cec2daaec21b6af172283cdfd398394c251 22d9f36ba4e1b3932f8e0a1349f144054e5b9765282a2083d96cc91760520923
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1737
Cache-Control: max-age=131798
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Etag: "63a0c1ad-1d7"
Expires: Wed, 21 Dec 2022 20:24:22 GMT
Last-Modified: Mon, 19 Dec 2022 19:55:25 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashdc42e8888911b1f352cc281c26b44e1e 6b4d3cec2daaec21b6af172283cdfd398394c251 22d9f36ba4e1b3932f8e0a1349f144054e5b9765282a2083d96cc91760520923
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1737
Cache-Control: max-age=131798
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Etag: "63a0c1ad-1d7"
Expires: Wed, 21 Dec 2022 20:24:22 GMT
Last-Modified: Mon, 19 Dec 2022 19:55:25 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash384a2b2f97397ee2741922068da5bdcd 256bcaf0f153a739623feb917ad1c8745b7a3651 541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 | 216.58.207.227 | 200 OK | 18 kB |
URL HTTP/2fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 17908, version 1.0\012- data Hashe46b4e2e3b47cc232937ebf72b4c537e 2675bc06ee643b8c935370325a327efb74746e6a d8543b5dcaea1fc4a0301dc12b5b2adc9079e0794dd6a45879588fb844f3438e
GET /s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 21:31:59 GMT
expires: Tue, 19 Dec 2023 21:31:59 GMT
cache-control: public, max-age=31536000
age: 36945
last-modified: Mon, 18 Jul 2022 19:23:34 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash384a2b2f97397ee2741922068da5bdcd 256bcaf0f153a739623feb917ad1c8745b7a3651 541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash384a2b2f97397ee2741922068da5bdcd 256bcaf0f153a739623feb917ad1c8745b7a3651 541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:33:54 GMT
expires: Thu, 14 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 476030
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:13 GMT
expires: Sat, 16 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 324871
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2 | 216.58.207.227 | 200 OK | 22 kB |
URL HTTP/2fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 22164, version 1.0\012- data Hash5cc6473203a24708dc461f4a18c79a9a 7fcbae6f3c7e2a31d3989825e70b0c627ddc1add fd0696ea5d7cd294b7921ddb1b74a7a89de7ff7eedf8cda7ada92ef045004e9f
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hJVQNcOM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 22:06:48 GMT
expires: Tue, 19 Dec 2023 22:06:48 GMT
cache-control: public, max-age=31536000
age: 34856
last-modified: Mon, 18 Jul 2022 19:21:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.woff2 | 216.58.207.227 | 200 OK | 14 kB |
URL HTTP/2fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 14156, version 1.0\012- data Hash1c8ab788b4a9abafa2c890289150332d 0a898b817c123e46dee46bb8ccd0c5d05e2bce00 ff49193961823042609f9a392dda2d1eb41f751f567ba54413f21a837b07c725
GET /s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14156
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:25 GMT
expires: Sat, 16 Dec 2023 13:33:25 GMT
cache-control: public, max-age=31536000
age: 324859
last-modified: Mon, 18 Jul 2022 19:38:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 | 216.58.207.227 | 200 OK | 12 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data Hash87ace20058325aa069320aa4af875dff b743548770c46d905ae1ba06310bc001c587fe8e 3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:42:24 GMT
expires: Thu, 14 Dec 2023 19:42:24 GMT
cache-control: public, max-age=31536000
age: 475520
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 | 216.58.207.227 | 200 OK | 26 kB |
URL HTTP/2fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 25672, version 1.0\012- data Hashfe3e5be2baa0126122ba9367ebab73c8 40bec99106dfab5f3721ed725483eb618a9016cd 8b166007d6f54c33b3ea10ea23572bc3166f55f365840d3cbd6ef7b5dcf6674e
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25672
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Dec 2022 13:33:18 GMT
expires: Sat, 16 Dec 2023 13:33:18 GMT
cache-control: public, max-age=31536000
age: 324866
last-modified: Mon, 18 Jul 2022 19:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 | 216.58.207.227 | 200 OK | 12 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 11824, version 1.0\012- data Hashdeb26e9b1a25438118e5d39d741ae6b6 a2801defb4c8bed8e4083dfde0b2a5a9c0537020 fc66f942651a9fe1a598770d3d896529dcd7a03d02f40655451513093103e61b
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Dec 2022 22:25:27 GMT
expires: Sun, 17 Dec 2023 22:25:27 GMT
cache-control: public, max-age=31536000
age: 206537
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.woff2 | 216.58.207.227 | 200 OK | 4.6 kB |
URL HTTP/2fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 4552, version 1.0\012- data Hash5075381240df39ee7227b030477ef361 78bde110340607e0ae642ba6c4c2383e8d3acfb4 9ded0bb5abaface50de91235f0efb29bb16541560b0c71458d49a740777808a2
GET /s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 4552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 19:48:46 GMT
expires: Wed, 13 Dec 2023 19:48:46 GMT
cache-control: public, max-age=31536000
age: 561538
last-modified: Mon, 18 Jul 2022 19:46:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash384a2b2f97397ee2741922068da5bdcd 256bcaf0f153a739623feb917ad1c8745b7a3651 541c129fcb8391e0516ad5f1ee19da5c060ce54cabedfdc7cb65d2af2b4410e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hJFQNcOM.woff2 | 216.58.207.227 | 200 OK | 6.8 kB |
URL HTTP/2fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hJFQNcOM.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 6764, version 1.0\012- data Hash1743b1f6cc8e6018241c76c5c9cfe5fa 38b2463aef1648ef903aa6567eb39b3d1fa289d0 4300f8b2fe7c4584f81acd4797abeab846f74378ef6d7d6420f6e6fe95b2dd9f
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hJFQNcOM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 6764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 16:40:00 GMT
expires: Wed, 13 Dec 2023 16:40:00 GMT
cache-control: public, max-age=31536000
age: 572864
last-modified: Mon, 18 Jul 2022 19:21:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 | 216.58.207.227 | 200 OK | 5.5 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 5548, version 1.0\012- data Hashcdaab83619fcacd4027a77c99dd51e69 9e6eae8554f8cc2309b2dae2d9fa217e34eed6a4 4ec57f2a80b91090971b83970230ca09ab3568c5f5b224896ca9aa6180a76aa9
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5548
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 20:55:57 GMT
expires: Thu, 14 Dec 2023 20:55:57 GMT
cache-control: public, max-age=31536000
age: 471107
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 | 216.58.207.227 | 200 OK | 5.6 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 5560, version 1.0\012- data Hashca3b09b62fda648a4511700413313fd0 109cd4c5435bd6614391bb8722c47c287c96b2ec 77b24796a3d4ab521f66765651875338ed50cb9306cfe4603a3e79618e429cec
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5560
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 19:55:02 GMT
expires: Thu, 14 Dec 2023 19:55:02 GMT
cache-control: public, max-age=31536000
age: 474762
last-modified: Wed, 11 May 2022 19:24:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hash11f8e3041792311ca49f5dc7f263a86c 7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a 2b3963d75aee09b014f0fb3a3e3fbcf4e6138f53627f6472b468d8863a5cf933
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 07:47:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 14:15:25 GMT
Expires: Sun, 25 Dec 2022 14:15:24 GMT
Etag: "7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a"
Cache-Control: max-age=454659,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77c6c58d1cf0fab4-OSL
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hash11f8e3041792311ca49f5dc7f263a86c 7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a 2b3963d75aee09b014f0fb3a3e3fbcf4e6138f53627f6472b468d8863a5cf933
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 07:47:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 14:15:25 GMT
Expires: Sun, 25 Dec 2022 14:15:24 GMT
Etag: "7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a"
Cache-Control: max-age=454659,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77c6c58c3acab523-OSL
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hash11f8e3041792311ca49f5dc7f263a86c 7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a 2b3963d75aee09b014f0fb3a3e3fbcf4e6138f53627f6472b468d8863a5cf933
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 07:47:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 14:15:25 GMT
Expires: Sun, 25 Dec 2022 14:15:24 GMT
Etag: "7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a"
Cache-Control: max-age=454659,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77c6c58b4ac1b4f4-OSL
|
|
| w.ladicdn.com/s1150x700/5c7362c6c417ab07e5196b05/ebrht-20200804012013.png |  138.199.36.10 | 200 OK | 22 kB |
URL HTTP/2w.ladicdn.com/s1150x700/5c7362c6c417ab07e5196b05/ebrht-20200804012013.png IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typePNG image data, 1105 x 490, 8-bit/color RGBA, non-interlaced\012- data Hash13199462a6207e064941ac64d3df1ef4 5d280d5b000cc967caa9d4252a0664866fbbee74 204cbf305ce396b75b6423d5ee4082e4a1536d2fac08a73ee0192c9b50802b5f
GET /s1150x700/5c7362c6c417ab07e5196b05/ebrht-20200804012013.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:44 GMT
content-type: image/png
content-length: 21896
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "61e10785-5588"
last-modified: Fri, 14 Jan 2022 05:17:57 GMT
cdn-storageserver: NY-426
cdn-requestpullsuccess: True
cdn-fileserver: 268
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/06/2022 15:13:57
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: 4520c402a12d8aacd61100e86577dbda
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashdc42e8888911b1f352cc281c26b44e1e 6b4d3cec2daaec21b6af172283cdfd398394c251 22d9f36ba4e1b3932f8e0a1349f144054e5b9765282a2083d96cc91760520923
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1737
Cache-Control: max-age=131798
Content-Type: application/ocsp-response
Date: Tue, 20 Dec 2022 07:47:44 GMT
Etag: "63a0c1ad-1d7"
Expires: Wed, 21 Dec 2022 20:24:22 GMT
Last-Modified: Mon, 19 Dec 2022 19:55:25 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hash11f8e3041792311ca49f5dc7f263a86c 7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a 2b3963d75aee09b014f0fb3a3e3fbcf4e6138f53627f6472b468d8863a5cf933
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 07:47:45 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 14:15:25 GMT
Expires: Sun, 25 Dec 2022 14:15:24 GMT
Etag: "7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a"
Cache-Control: max-age=454659,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77c6c58d0aafb505-OSL
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hash11f8e3041792311ca49f5dc7f263a86c 7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a 2b3963d75aee09b014f0fb3a3e3fbcf4e6138f53627f6472b468d8863a5cf933
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Dec 2022 07:47:44 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 18 Dec 2022 14:15:25 GMT
Expires: Sun, 25 Dec 2022 14:15:24 GMT
Etag: "7e03a6c0ec0fe4c744791a7856b6412d40fe2d6a"
Cache-Control: max-age=454659,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77c6c58cfe4b1c16-OSL
|
|
| static.xx.fbcdn.net/rsrc.php/v3/ym/l/0,cross/hUTYG5RPkEA.css?_nc_x=Ij3Wp8lg5Kz |  31.13.72.12 | 200 OK | 5.2 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3/ym/l/0,cross/hUTYG5RPkEA.css?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (4431) Hash51d73c6ede74eca3030c9814957eb9e4 29fe01f6dede0cbebc2780a9946f780d251acb5d 619dabac1213fabd3f070176ee5f9abed2355eb5fb6e83b94f6bee8abdd80a23
GET /rsrc.php/v3/ym/l/0,cross/hUTYG5RPkEA.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 19 Dec 2023 18:37:23 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: Udc8bt507KMDDJgUlX655A==
x-fb-debug: 7Lk8tELnFG+jlpb2kVgmuHcTSnFpbrgF5n11udHDVWGXeVvYejSFdklESmmfK0NA5sb1FCwcD1gCLNEdMfiAjA==
content-length: 5234
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3/y1/r/roLd2lgDwFd.js?_nc_x=Ij3Wp8lg5Kz | | | 8.5 kB |
URL static.xx.fbcdn.net/rsrc.php/v3/y1/r/roLd2lgDwFd.js?_nc_x=Ij3Wp8lg5Kz IP:0
Hashb4f1ff189c37fe22b453fa989433c888 1532beb014e3010fa50db78d3db52265db3ba3e7 bbf216e55b345c358596d32e8e4c42975fef43f1aadf9bbb7aabec35ce22a261
GET /rsrc.php/v3/y1/r/roLd2lgDwFd.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
|
|
| www.2ukarma.2utraining.com.vn/workshop-ready-to-become-a-great-presenter | 18.142.208.246 | 200 OK | 45 kB |
URL HTTP/2www.2ukarma.2utraining.com.vn/workshop-ready-to-become-a-great-presenter IP18.142.208.246:0
Hashd08bed27c4450fdf8f007c7516cfc5b2 f883754fd18efdf154f620535e818e68478872bd 7300172e74d7429081aae39f328247a4ed7c0b12c0ca22f88d484ecca1bdf422
GET /workshop-ready-to-become-a-great-presenter HTTP/1.1
Host: www.2ukarma.2utraining.com.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: openresty
date: Tue, 20 Dec 2022 07:47:44 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
set-cookie: LADI_DNS_CHECK="2022-12-20 07:47:44.100174215 +0000 UTC m=+4149638.302672695"; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_CLIENT_ID=012f3904-aba3-4b30-5989-eec1d7c8f57f; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_PAGE_VIEW=0; Path=/workshop-ready-to-become-a-great-presenter; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_PAGE_VIEW_PATH=0; Path=/workshop-ready-to-become-a-great-presenter; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_FORM_SUBMIT=0; Path=/workshop-ready-to-become-a-great-presenter; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_FORM_SUBMIT_PATH=0; Path=/workshop-ready-to-become-a-great-presenter; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_PAGE_VIEW=1; Path=/workshop-ready-to-become-a-great-presenter; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_PAGE_VIEW_PATH=1; Path=/workshop-ready-to-become-a-great-presenter; Expires=Fri, 17 Dec 2032 07:47:44 GMT
LADI_CAMP_ID=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_NAME=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_TYPE=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_ORIGIN_URL=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_TARGET_URL=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_PAGE_VIEW=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_PAGE_VIEW_PATH=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_FORM_SUBMIT=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_FORM_SUBMIT_PATH=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW_PATH=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT_PATH=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_CONFIG=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_CAMP_END_DATE=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_FUNNEL_NEXT_URL=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
LADI_FUNNEL_PREV_URL=; Path=/workshop-ready-to-become-a-great-presenter; Max-Age=0
statuscode: 200
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s450x450/5e69e1436e15317a38725aa1/ptnq-logo-transparent-2u-karma_211108-tracy-20211108095206.png | 138.199.36.10 | 200 OK | 33 kB |
URL HTTP/2w.ladicdn.com/s450x450/5e69e1436e15317a38725aa1/ptnq-logo-transparent-2u-karma_211108-tracy-20211108095206.png IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typePNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced\012- data Hash4cc05982fd44ac5da36de2ced71fe736 346c9b9a01edb91677f81821da7c7ad9bebf49e5 5cb835418dc9a3fb94316d2d9e099d01d50de9bc6111848b6782bc0baad2dcbe
GET /s450x450/5e69e1436e15317a38725aa1/ptnq-logo-transparent-2u-karma_211108-tracy-20211108095206.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:45 GMT
content-type: image/png
content-length: 33053
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "61e434d8-811d"
last-modified: Sun, 16 Jan 2022 15:08:08 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 262
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/20/2022 07:47:44
cdn-edgestorageid: 752
cdn-status: 200
cdn-requestid: 5ae2931197dc6ddee873e47afdd8d3c2
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/v2/source/ladipage.min.css?v=1663754356409 | 138.199.36.10 | 200 OK | 14 kB |
URL HTTP/2w.ladicdn.com/v2/source/ladipage.min.css?v=1663754356409 IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typeASCII text, with very long lines (65536), with no line terminators Hash26540507520c884304e639ae74ce999f cffaac72480322286ce44427ee07b3f8fff66bfa d1b84e1dc0dae2411f5b7f2c583a1318c28c66ed70dd4d9db063557ed6335937
GET /v2/source/ladipage.min.css?v=1663754356409 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:44 GMT
content-type: text/css
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"632ae1b6-1071b"
last-modified: Wed, 21 Sep 2022 10:04:38 GMT
cdn-storageserver: NY-430
cdn-requestpullsuccess: True
cdn-fileserver: 267
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/11/2022 03:31:40
cdn-edgestorageid: 1047
cdn-status: 200
cdn-requestid: 66632c3aeb42d3fa321120543d79966f
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3iLl54/yd/l/en_US/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 7.1 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3iLl54/yd/l/en_US/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (2905) Hashb3d9bbe7863976aa5b46e02c7798acc8 f3534203ec245879da839b07de21385a5203556d f29d8841fd47e887686263e49027672a365baa6362e277192f635b303c9e016d
GET /rsrc.php/v3iLl54/yd/l/en_US/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 00:14:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: s9m754Y5dqpbRuAsd5isyA==
x-fb-debug: 3BLS+Qm1ZUHLXx82YSKNT1gnfbKWPgiF7O/N3DuBIKFX6StRH+n3Dcp5m4K1meSXwOLPfnt9NrJ8jHz6AAbd5A==
priority: u=3,i
content-length: 7100
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 7.2 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (4057) Hash7cb89797cea2a84b948dfae53d0c90d4 312bdda4ae1efe3ab71fb0aec473ddc725627f5b 9093dc3e084b6a216b34c7a603eae5a93f793dc5b0a606ccb0da051d5aa12cd4
GET /rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 08 Dec 2023 22:28:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: fLiXl86iqEuUjfrlPQyQ1A==
x-fb-debug: 3wiHEVGDPfYQASu98xRqP7A5AE0rftaTIbXC3WU+EicjYOGcki9+HZRQabMCI1pgHhllVqh8OuyBhDCc2/AgHg==
priority: u=3,i
content-length: 7199
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3iEpO4/y1/l/en_US/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 24 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3iEpO4/y1/l/en_US/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (42114) Hash7524540c965e62fd3390f6aa427f5443 bd1b7935aef5eb36690c1982886b67470fc8e373 7f456c91da4be41030dff14d2537892f29329d157b92643d4ae329d30d6254d4
GET /rsrc.php/v3iEpO4/y1/l/en_US/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Dec 2023 19:55:48 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dSRUDJZeYv0zkPaqQn9UQw==
x-fb-debug: xMvJ+RkNiRVZbwVigObKFuw6q5qnvcsnXw0NyCAnMEJDvn9jvnflObaB5s5Wgsbtsrcczp4+3RFEvBqJWMFYkw==
priority: u=3,i
content-length: 23498
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 830 B |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (724) Hashd63a02ce87c07ffcfa869fef7fc5f233 cae745fef84088abe3525bb77f75c55cd1d4cc2c bf9d4d71541a0a1f31b10be351add847ee935da6de355756314c8ca96512444d
GET /rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 15:32:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 1joCzofAf/z6hp/vf8XyMw==
x-fb-debug: 4IUIs+VkoLHDgtFP2JuGWbpu1NF3pAPGoZk4O4LFlqQo0rQ7D4ZAQ77agQzBQ/qGLouza/xw5OoSx+lG8TWvpA==
priority: u=3,i
content-length: 830
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 1.6 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (1984) Hash9286a42c6635bf94761964f1b129c0de 21d966c8e5833bec35fd039f80e6f7e47185743a da4067af50abaeaa27b4dfc7f3accf1346f13d9fd9d3821222bc820378c7ed00
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 13:47:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: koakLGY1v5R2GWTxsSnA3g==
x-fb-debug: WcHbJWlvUdzpL+hxxdaY4u14r8KvrfP1dpQOMFVhsfPshD5cS/3aP2YuPmwz06o9j0A1bx/mZ6O+RSxfTqLKtQ==
content-length: 1615
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s900x600/5e69e1436e15317a38725aa1/fdp8xma620210911110211.jpg | 138.199.36.10 | 200 OK | 35 kB |
URL HTTP/2w.ladicdn.com/s900x600/5e69e1436e15317a38725aa1/fdp8xma620210911110211.jpg IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typeJPEG image data, baseline, precision 8, 1067x600, components 3\012- data Hashe5be5094394a021241cc2cccf6067184 70b26d79c23a42a6f39492d0af2e10fccbbd961c f0f88e92a627462e8b62557295edaa08e2bde14e49183d9cbcdff4d26df1215c
GET /s900x600/5e69e1436e15317a38725aa1/fdp8xma620210911110211.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:45 GMT
content-type: image/jpeg
content-length: 34686
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "61e931ca-877e"
last-modified: Thu, 20 Jan 2022 09:56:26 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 207
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/20/2022 07:47:45
cdn-edgestorageid: 755
cdn-status: 200
cdn-requestid: 0af7ffa6ee1cbe93b803162e45914dd3
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 12 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (5542) Hash1ad15afc034f310427c81b0759603a2b e5efd1d029dccf5fa8128c84aadb6544a4ab60e0 fedf63f655f9eef24c517c3d6762fb07b142213ba623d4a0b06614fb5d9754bd
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Dec 2023 02:03:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: GtFa/ANPMQQnyBsHWWA6Kw==
x-fb-debug: qzWSlkajReW9Myxaw0qgu0wZzVwIDt5a2Qv7OVAzL853BZmj4xEq2lH+gM4PWHvAcixloP+naH9ZQEjs/oxAAw==
priority: u=3,i
content-length: 12334
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 16 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeC source, ASCII text, with very long lines (8741) Hashc92ef94e30a2dd9473fd9fe533472b73 97049e47de026939c75a885df9e8bb0fb56515ba f2981c7109e60cf9f5a9e846a25800dbec20a923db028f310b6feb79415650bb
GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 16:05:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: yS75TjCi3ZRz/Z/lM0crcw==
x-fb-debug: evfItOvloioR/c07+wzrqPKDMVqsk/rikSZVsPDWuuSLYzVS0mhaVWm1QUEZB+vjKQxZfthMJ9fa+d0PRM5ryg==
priority: u=3,i
content-length: 16232
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.xx.fbcdn.net/rsrc.php/v3/yW/r/ScVP74LB7Aq.js?_nc_x=Ij3Wp8lg5Kz | 31.13.72.12 | 200 OK | 85 kB |
URL HTTP/2static.xx.fbcdn.net/rsrc.php/v3/yW/r/ScVP74LB7Aq.js?_nc_x=Ij3Wp8lg5Kz IP31.13.72.12:0
File typeASCII text, with very long lines (18622) Hasha22a8b662be2f9466c26f88729d84636 8552e74b199a8029fbff1879c64434d216114c8d 539c4dc44dfffa13fa6ed81fcb6dcc2e6f8dc18367a6c99f0705ed792e20e13e
GET /rsrc.php/v3/yW/r/ScVP74LB7Aq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 19 Dec 2023 12:11:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: oiqLZivi+UZsJviHKdhGNg==
x-fb-debug: Gks8VX6y5JxX9EvPbOgM6GWs6EWOgq/WXGtD6BRTYeDa8uT0W2Pey8LfPAUqvvImtX8vDJNSRxT4mJHMXjeOwA==
content-length: 85039
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:45 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash74619c8a7d32d46fc91cc86f793f107c 3f2b1390ef4f7cd385f513d57297fa482f7dd43c 6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11872
Expires: Tue, 20 Dec 2022 11:05:37 GMT
Date: Tue, 20 Dec 2022 07:47:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash74619c8a7d32d46fc91cc86f793f107c 3f2b1390ef4f7cd385f513d57297fa482f7dd43c 6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11872
Expires: Tue, 20 Dec 2022 11:05:37 GMT
Date: Tue, 20 Dec 2022 07:47:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash74619c8a7d32d46fc91cc86f793f107c 3f2b1390ef4f7cd385f513d57297fa482f7dd43c 6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11872
Expires: Tue, 20 Dec 2022 11:05:37 GMT
Date: Tue, 20 Dec 2022 07:47:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash74619c8a7d32d46fc91cc86f793f107c 3f2b1390ef4f7cd385f513d57297fa482f7dd43c 6aa1fbfb532fc85b041684e259bbeecf53c7e7f711c8d414fc0775c4c1404457
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11872
Expires: Tue, 20 Dec 2022 11:05:37 GMT
Date: Tue, 20 Dec 2022 07:47:45 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg | 34.120.237.76 | 200 OK | 9.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash045f016fb66e6e0d1da1fb742d9b19a7 8f98bf2cedfccfce71464a733e2fd37482fd71c2 593cf38d1c2c315ff23fcda60e41141caa0266874f36a0c517554ca01ea51f12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82b028aa-d0e3-4082-a385-1385bc5c6e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9216
x-amzn-requestid: 460a95bf-5724-4bea-b6c1-f6ce263da5e7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabq8FXboAMFwCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d979-70340469247cdcf952a98c3e;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:36:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 7yYJKslDn22-iL_OH_VIiZdrTMJ-9c-DyORpGZ4d2MZLDoX5PpekRw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 21:48:32 GMT
age: 35953
etag: "8f98bf2cedfccfce71464a733e2fd37482fd71c2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4017f13d-fc40-4034-9f27-d4af3c2f16f8.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4017f13d-fc40-4034-9f27-d4af3c2f16f8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4535f00ed3710172a5f7debc715cb36f b176b458d20465245409f5b442fd4ad50c6a11f9 ad0fbd8a82b0859dc9c36053d8190bc20b3759ffa5971f55b0faedf8ba7ec001
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4017f13d-fc40-4034-9f27-d4af3c2f16f8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10533
x-amzn-requestid: 31f0445f-d7e5-4d9d-98c7-60441253c2be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da6p9EVToAMFoBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a10b0c-5e2b65513b791ea728b8e2a0;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 01:08:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: lT2jpFhPw531E8UQ9y7rjzPSqFR84sANjFhhfHmB_Xz4PfksWQ0xEA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ac463f3377446e4c603deca30feb744a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:08:28 GMT
age: 23957
etag: "b176b458d20465245409f5b442fd4ad50c6a11f9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf13d30b-168d-4075-96df-955f428ae325.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf13d30b-168d-4075-96df-955f428ae325.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash35a588f727cbb53c2cf495e5736ef7aa bae4be57801e820925fdb3dcb2378ed2bfa6dc38 0e9e1acd1c7195f6ec9eabb3937d8bd611bc67c5ef96dffcc3325dee30683295
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf13d30b-168d-4075-96df-955f428ae325.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11314
x-amzn-requestid: bff05f9e-5ac2-49ec-afbd-fefd6a558535
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da271FMNIAMFtNA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a10518-6f3b84fb0fdb11fd04ecc5b2;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 00:43:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: tmeYmTw37jSgSHwYnptPQFD3ZtZV1gh8HCVB0fsPyMVL8zciyvgXLg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:14:40 GMT
age: 23585
etag: "bae4be57801e820925fdb3dcb2378ed2bfa6dc38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc7ac0b5738bab6b4ed770c26ca922250 e56fd4ee2f5354a54a6271db2be528f98eecd3d7 5997d5be6bbeb189ef08af2f6c6dd5bb0cfa70ad7b40daab8712efe5adc2c6e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d762722-a130-4c65-99b1-2f6fb91155e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8450
x-amzn-requestid: a9f11c68-8327-46ba-9075-e316a2f9fdbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabr3FoSIAMFdtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d97e-61b788f5675fe0e815e1e967;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:37:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: EFtrPmVeBdwlINxF0wQq0671EksYsi6nsyFd5E4SCSH4_bQyGaNQHQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 21:48:36 GMT
age: 35949
etag: "e56fd4ee2f5354a54a6271db2be528f98eecd3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35d10a39-d4a4-4dab-a6c5-b26190cd8d9c.jpeg | 34.120.237.76 | 200 OK | 5.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35d10a39-d4a4-4dab-a6c5-b26190cd8d9c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7954c03ff4f2bade4a70f50c5aa46b14 576056e8336ae400a1652be8073a2a20e41cec85 00803b3df8b4b876b7fd205008a407f08c40519c32dcb07b3b99b30528d1215f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35d10a39-d4a4-4dab-a6c5-b26190cd8d9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5325
x-amzn-requestid: 1b391874-5da9-44eb-ad08-d8fc05a5e709
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: da4QKEceIAMF4fg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a10734-2b19a25a181c2c1b25f00952;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 00:52:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ETmN2B5G6I9L0h8hPOXmrc3fyhoFhQku70GBHt-p9uy9DNOqiPl3aA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 5292c0d5844327feadb38f1efe42ebc6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Dec 2022 01:24:17 GMT
age: 23008
etag: "576056e8336ae400a1652be8073a2a20e41cec85"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee1dbf08-d046-4d26-8221-af352c7c7eba.jpeg | 34.120.237.76 | 200 OK | 2.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee1dbf08-d046-4d26-8221-af352c7c7eba.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashac396f580b50a626abbeb37c0ec5f005 626262a7313aeb54bcdbcaf682f73d9ff4a4cfcb 3546f7a2be3f578ad9d8b8f57b89a69b6ece9b08da63fb9448e5e6dde4d3332c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fee1dbf08-d046-4d26-8221-af352c7c7eba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2054
x-amzn-requestid: 5072b75c-7455-45cc-a35e-be7e0ed77496
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dabqhHE6IAMFrxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a0d976-026c95822615b2550edb00e7;Sampled=0
x-amzn-remapped-date: Mon, 19 Dec 2022 21:36:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: uJwyFukmL1DoqJnY-yzKVBLtnEITiYMDkVoZoXm46QGdni9vkzUTMA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 cca7d60248a961ff8fc8c5640024b652.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Dec 2022 21:48:32 GMT
age: 35953
etag: "626262a7313aeb54bcdbcaf682f73d9ff4a4cfcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s900x600/5e69e1436e15317a38725aa1/hinh-anh-kenny-1-20210911101813.jpg | 138.199.36.10 | 200 OK | 70 kB |
URL HTTP/2w.ladicdn.com/s900x600/5e69e1436e15317a38725aa1/hinh-anh-kenny-1-20210911101813.jpg IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typeJPEG image data, baseline, precision 8, 1012x600, components 3\012- data Hash886d5121e69f7290293d1068dad4222e 819db1e9008b8a57b655d7ed2d02c4939c4b7099 5e066a67ea28178faa5eab43a89089e358381c2fdb29303de4a87461f1e16aa2
GET /s900x600/5e69e1436e15317a38725aa1/hinh-anh-kenny-1-20210911101813.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:45 GMT
content-type: image/jpeg
content-length: 69506
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "61e931cc-10f82"
last-modified: Thu, 20 Jan 2022 09:56:28 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 217
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/20/2022 07:47:45
cdn-edgestorageid: 1049
cdn-status: 200
cdn-requestid: 095bcafe147871e3b8de39b71ba92cc8
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/v2/source/ladipage.vi.min.js?v=1663754356409 | 138.199.36.10 | 200 OK | 86 kB |
URL HTTP/2w.ladicdn.com/v2/source/ladipage.vi.min.js?v=1663754356409 IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typeASCII text, with very long lines (65536), with no line terminators Hash65786afb956ec68c2eba38079a9071b5 9ab16f28f9df1053396eedc50ca72d4997ca5e7b 992b5541f612f31ffcbfccb77516f5acf77a07b19c9f4ff6b64550dece8324c8
GET /v2/source/ladipage.vi.min.js?v=1663754356409 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:44 GMT
content-type: text/javascript
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=31919000
etag: W/"632ae1b6-53e3e"
last-modified: Wed, 21 Sep 2022 10:04:38 GMT
cdn-storageserver: NY-426
cdn-requestpullsuccess: True
cdn-fileserver: 353
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/12/2022 05:40:54
cdn-edgestorageid: 1049
cdn-status: 200
cdn-requestid: 5b23dce29459ef0e9143cd5b2eff8d00
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.158 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.158:0
Hashe6c0d211644f09b100f64c3080934b96 3ba6d1689c3eea3814502c5919a6599703c6ac85 e8b8051bd1a1b933232320c391e5c0fc2cee320b259cf1bad2724852b5569b8b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=159297
Date: Tue, 20 Dec 2022 07:47:45 GMT
Etag: "63a13381-1d7"
Expires: Thu, 22 Dec 2022 04:02:42 GMT
Last-Modified: Tue, 20 Dec 2022 04:01:05 GMT
Server: ECS (dcb/7EA2)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BsC5iPVxAGSQPHtL-iavwYxsKYt-UFnGGnDeI-ly4CH2yL5wGWUAmw==
Age: 97
|
|
| w.ladicdn.com/s1440x729/5e69e1436e15317a38725aa1/avpt-for-lp_211207-tracy-20211207092829.png | 138.199.36.10 | 200 OK | 388 kB |
URL HTTP/2w.ladicdn.com/s1440x729/5e69e1436e15317a38725aa1/avpt-for-lp_211207-tracy-20211207092829.png IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typePNG image data, 1440 x 810, 8-bit/color RGBA, non-interlaced\012- data Size388 kB (387995 bytes) Hashf0cc976cd68b8d09327ff3d305d9b64a 4c3481fd784ccd580fcb2db4569e66386f55d260 a4a57dfd02559caa678b636313d681efb8cd66280723b7cf34afca1363f3d8ef
GET /s1440x729/5e69e1436e15317a38725aa1/avpt-for-lp_211207-tracy-20211207092829.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:46 GMT
content-type: image/png
content-length: 387995
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "61e93313-5eb9b"
last-modified: Thu, 20 Jan 2022 10:01:55 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 267
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/20/2022 07:47:45
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 701c98f417752f25dc5c7758cba10d0e
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.158 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.158:0
Hash49fc78f2bdbaee0af80f3749b1ba70d1 50de57d011f69cd90f9b725bb834c7a8097bfabf 5c324ba5957ab147e189e92eaa31fc2363c550b2c8c9900315695bde72e5014e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Tue, 20 Dec 2022 07:47:46 GMT
Etag: "63a10948-1d7"
Server: ECS (dcb/7F80)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: axqf_wr8GFKI7xZssHATpNnZSAZIZyFxreq3TqkpCdw5R1Jr9y70ew==
|
|
| scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/314903329_189946876893111_3108977340216696632_n.jpg?stp=dst-jpg_s350x350&_nc_cat=100&ccb=1-7&_nc_sid=8024bb&_nc_ohc=4FH1ZVECLnkAX_kCeKS&_nc_ht=scontent-arn2-2.xx&oh=00_AfBLkFU1N0QOlZYnwuuOKG9-mP7gsDw14qVV3xLlqEfZAw&oe=63A61782 | 157.240.194.27 | 200 OK | 19 kB |
URL HTTP/2scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/314903329_189946876893111_3108977340216696632_n.jpg?stp=dst-jpg_s350x350&_nc_cat=100&ccb=1-7&_nc_sid=8024bb&_nc_ohc=4FH1ZVECLnkAX_kCeKS&_nc_ht=scontent-arn2-2.xx&oh=00_AfBLkFU1N0QOlZYnwuuOKG9-mP7gsDw14qVV3xLlqEfZAw&oe=63A61782 IP157.240.194.27:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x197, components 3\012- data Hash6f8fdb24dcce2122f93fb6d1a58316da e19821dd9b7146c40755cc02e57b67f5e380d0dc dfb42656b166234640e3a62436beded239359e0d9380a4bfb2acbe68dfba28b1
GET /v/t39.30808-6/314903329_189946876893111_3108977340216696632_n.jpg?stp=dst-jpg_s350x350&_nc_cat=100&ccb=1-7&_nc_sid=8024bb&_nc_ohc=4FH1ZVECLnkAX_kCeKS&_nc_ht=scontent-arn2-2.xx&oh=00_AfBLkFU1N0QOlZYnwuuOKG9-mP7gsDw14qVV3xLlqEfZAw&oe=63A61782 HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 16 Nov 2022 14:42:27 GMT
x-haystack-needlechecksum: 4167301827
x-needle-checksum: 54863793
content-type: image/jpeg
content-length: 19083
content-digest: adler32=635200470
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:46 GMT
x-fb-edge-debug: vWa9GREQtMc2tm3cWiYdkeiWsxPoswgjz-VqhoGwgwfJCzZGF1VlrKx7iAMsXtZq-xx1V45vzkmfXQAJBqPE4W5plk8tEQUAPSXIrc4-vNo
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.ladipage.net/5e69e1436e15317a38725aa1/2u-training_mascot_190510-20210713084438.png | 18.138.163.51 | 301 Moved Permanently | 134 B |
URL HTTP/2static.ladipage.net/5e69e1436e15317a38725aa1/2u-training_mascot_190510-20210713084438.png IP18.138.163.51:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /5e69e1436e15317a38725aa1/2u-training_mascot_190510-20210713084438.png HTTP/1.1
Host: static.ladipage.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: awselb/2.0
date: Tue, 20 Dec 2022 07:47:46 GMT
content-type: text/html
content-length: 134
location: https://w.ladicdn.com:443/5e69e1436e15317a38725aa1/2u-training_mascot_190510-20210713084438.png
X-Firefox-Spdy: h2
|
|
| scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/316556500_191068850114247_4092374765152325551_n.jpg?stp=dst-jpg_s350x350&_nc_cat=105&ccb=1-7&_nc_sid=8024bb&_nc_ohc=0G0FDrsZF-MAX8XbTt8&_nc_ht=scontent-arn2-2.xx&oh=00_AfDdab1wl_A2j374l6a-eMExrmwlZKCqGXy3ZiQrxN-hvw&oe=63A5ECBD | 157.240.194.27 | 200 OK | 19 kB |
URL HTTP/2scontent-arn2-2.xx.fbcdn.net/v/t39.30808-6/316556500_191068850114247_4092374765152325551_n.jpg?stp=dst-jpg_s350x350&_nc_cat=105&ccb=1-7&_nc_sid=8024bb&_nc_ohc=0G0FDrsZF-MAX8XbTt8&_nc_ht=scontent-arn2-2.xx&oh=00_AfDdab1wl_A2j374l6a-eMExrmwlZKCqGXy3ZiQrxN-hvw&oe=63A5ECBD IP157.240.194.27:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x197, components 3\012- data Hash6f8fdb24dcce2122f93fb6d1a58316da e19821dd9b7146c40755cc02e57b67f5e380d0dc dfb42656b166234640e3a62436beded239359e0d9380a4bfb2acbe68dfba28b1
GET /v/t39.30808-6/316556500_191068850114247_4092374765152325551_n.jpg?stp=dst-jpg_s350x350&_nc_cat=105&ccb=1-7&_nc_sid=8024bb&_nc_ohc=0G0FDrsZF-MAX8XbTt8&_nc_ht=scontent-arn2-2.xx&oh=00_AfDdab1wl_A2j374l6a-eMExrmwlZKCqGXy3ZiQrxN-hvw&oe=63A5ECBD HTTP/1.1
Host: scontent-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Mon, 21 Nov 2022 12:28:58 GMT
x-haystack-needlechecksum: 3225658648
x-needle-checksum: 54863793
content-type: image/jpeg
content-length: 19083
content-digest: adler32=635200470
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Tue, 20 Dec 2022 07:47:47 GMT
x-fb-edge-debug: ilsX2FzukuPH3SYZYaql99cyRSsksi_v8VV5FgMg9eUrwi39F-u8yHiTO0TgfODspfd59_BW_uDgsWLVJaPSmYGJEbz05ot7690cDXzzX1k
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/5e69e1436e15317a38725aa1/2u-training_mascot_190510-20210713084438.png | 138.199.36.10 | 200 OK | 90 kB |
URL HTTP/2w.ladicdn.com/5e69e1436e15317a38725aa1/2u-training_mascot_190510-20210713084438.png IP138.199.36.10:0 ASN#60068 Datacamp Limited
File typePNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced\012- data Hashdfe4296197a0f82f1b7ea5762afba496 8ae8074b4d4e8c41a14d3ea4d0ddcbbe8cfa56bd c174d1b5ba5637ceca5249e69dd236285f2562dd78babd663cc9de4a69580f36
GET /5e69e1436e15317a38725aa1/2u-training_mascot_190510-20210713084438.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.2ukarma.2utraining.com.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:47 GMT
content-type: image/png
content-length: 90399
server: BunnyCDN-DE1-1053
cdn-pullzone: 575124
cdn-uid: 595f2f5d-bafe-46b1-9efc-ee9b65944aba
cdn-requestcountrycode: NO
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: "61e3a1e1-1611f"
last-modified: Sun, 16 Jan 2022 04:41:05 GMT
cdn-storageserver: NY-430
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/20/2022 07:47:47
cdn-edgestorageid: 860
cdn-status: 200
cdn-requestid: b7b4b09125cb3a5979b9b679d15886ff
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| video-arn2-2.xx.fbcdn.net/v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=0&byteend=782 | 157.240.194.21 | 200 OK | 783 B |
URL HTTP/2video-arn2-2.xx.fbcdn.net/v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=0&byteend=782 IP157.240.194.21:0
File typeISO Media, MP4 Base Media v5 \012- data Hash642e430e485180576caa5620a93d2354 e226567a546cffc175de2a8a566f39108dda562d e4f9400f97bb491952a8cf91d0d31b736a15cb59961e4baa27877b1ccb8aad10
GET /v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=0&byteend=782 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 18 Oct 2022 08:21:36 GMT
content-type: video/mp4
x-haystack-needlechecksum: 956501655
x-needle-checksum: 3688263649
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3688263649
content-length: 783
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 20 Dec 2022 07:47:47 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: HC4EW_86FdtsLzZJshR2Q4vx1McvUFxOSKSB1DluGcrIfxp57BBKDmcyYBJEJYj3nrQ5MXqBI7STSw37zyy0zqVHtSyyNj51WtMyDlesuIQ
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| video-arn2-2.xx.fbcdn.net/v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=783&byteend=1138 | 157.240.194.21 | 200 OK | 356 B |
URL HTTP/2video-arn2-2.xx.fbcdn.net/v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=783&byteend=1138 IP157.240.194.21:0
Hash73fa2a1fa3234f2f65087366f42778da 6d8fdc99f8a890b3f8c94b54ad1e0a61fd8251a3 124daa9d5c0d98ef010455b26b82e57590d9ed907a2653aa5fbbdb871ba68961
GET /v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=783&byteend=1138 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 18 Oct 2022 08:21:36 GMT
content-type: video/mp4
x-haystack-needlechecksum: 956501655
x-needle-checksum: 3688263649
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3688263649
content-length: 356
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 20 Dec 2022 07:47:47 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| video-arn2-2.xx.fbcdn.net/v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=1139&byteend=17099 | 157.240.194.21 | 200 OK | 16 kB |
URL HTTP/2video-arn2-2.xx.fbcdn.net/v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=1139&byteend=17099 IP157.240.194.21:0
Hash58a0fa55d4ee38fa3e4b6124dad8d7d4 fa8902aef79530b9092b597ccd51d6c3adb00dd8 4da2d0d22fdc369fd69a51269f7cedc6cc6ff3e7cde2d28141dff7539c84d95d
GET /v/t42.1790-2/312015414_1085306502347180_4519215453739221813_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=qufqn4lQU40AX-hQ5Lj&_nc_ht=video-arn2-2.xx&oh=00_AfDKol__oNTvKyxiuCnY7wZdLfle0Zgb_GaVoITFU1hozQ&oe=63A1885B&bytestart=1139&byteend=17099 HTTP/1.1
Host: video-arn2-2.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 18 Oct 2022 08:21:36 GMT
content-type: video/mp4
x-haystack-needlechecksum: 956501655
x-needle-checksum: 3688263649
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=3688263649
content-length: 15961
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Tue, 20 Dec 2022 07:47:47 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| video-arn2-1.xx.fbcdn.net/v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=840&byteend=991 | 31.13.72.14 | 200 OK | 152 B |
URL HTTP/2video-arn2-1.xx.fbcdn.net/v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=840&byteend=991 IP31.13.72.14:0
Hash4d56d7a95e4f7eee942245bf7838c220 b05714c6521a9f71a54b092a13b6c13b0654adfe 852c2d5c5e571ddd523797f1502f73508065689622a9bbe924c371ff5b2ad344
GET /v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=840&byteend=991 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 18 Oct 2022 08:21:14 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2390142460
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-length: 152
accept-ranges: bytes
x-upstream-checksum-algorithm: crc32
x-fb-trip-id: 2050070850
date: Tue, 20 Dec 2022 07:47:47 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| video-arn2-1.xx.fbcdn.net/v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=0&byteend=839 | 31.13.72.14 | 200 OK | 840 B |
URL HTTP/2video-arn2-1.xx.fbcdn.net/v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=0&byteend=839 IP31.13.72.14:0
File typeISO Media, MP4 Base Media v5 \012- data Hash55ad1f1c275e6ce4119720def836fc59 9cfb6436cc9f0209bf12f9f4931c0c5df1a78426 097f0ad63475ea3341541c3eab2a820f1acb5aaba57a7dbb52a8060826202c9f
GET /v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=0&byteend=839 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 18 Oct 2022 08:21:14 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2390142460
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-length: 840
accept-ranges: bytes
x-upstream-checksum-algorithm: crc32
x-fb-trip-id: 2050070850
date: Tue, 20 Dec 2022 07:47:47 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| video-arn2-1.xx.fbcdn.net/v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=992&byteend=366254 | 31.13.72.14 | 200 OK | 365 kB |
URL HTTP/2video-arn2-1.xx.fbcdn.net/v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=992&byteend=366254 IP31.13.72.14:0
Size365 kB (365263 bytes) Hash6c0d704ce8bd496b4c74233442ab0a7c 50418ab980b00f92378f021dbe4ab6122100be08 babdc7b34d81f6cbbe8e53fedd0587e41da168df86d319554f533b7c0866b935
GET /v/t39.25447-2/312126307_815953429605293_3908045616753297491_n.mp4?_nc_cat=107&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfaTRsaXRlYmFzaWNfNXNlY2dvcF9ocTJfZnJhZ18yX3ZpZGVvIn0%3D&_nc_ohc=fTXg7XnXHEgAX8OfsvN&_nc_ht=video-arn2-1.xx&oh=00_AfCdEIfzJIBmUyWyAU0-a2AipHhBL3O-Jztua6UaB7PsXw&oe=63A5E6FD&bytestart=992&byteend=366254 HTTP/1.1
Host: video-arn2-1.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Tue, 18 Oct 2022 08:21:14 GMT
content-type: video/mp4
x-haystack-needlechecksum: 0
x-needle-checksum: 2390142460
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-length: 365263
accept-ranges: bytes
x-upstream-checksum-algorithm: crc32
x-fb-trip-id: 2050070850
date: Tue, 20 Dec 2022 07:47:47 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
x-fb-edge-debug: r-yUK80dtU57OSKpggmhuhdmg3e4P3hELOGTw6g9zcmLmPwlEP4yMkY2kfZYw_M5RTHKqhAiOJIxbBh2tXarrdMCMbfKWbAG8eOSHwjzjAM
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2F2UKarma&tabs=timeline&width=340&height=331&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId | 31.13.72.36 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2F2UKarma&tabs=timeline&width=340&height=331&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId IP31.13.72.36:0
GET /plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2F2UKarma&tabs=timeline&width=340&height=331&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: AdfZt9S00M+4ZYqEXemwtVEXFNXTmLQ/tSuo9VA1PBVaSSPX3PkYI8m/BpIcH++PKElu6eyQIq5e3v1kV1xPow==
date: Tue, 20 Dec 2022 07:47:45 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| a.ladipage.com/event | 13.228.231.182 | 200 OK | 0 B |
IP13.228.231.182:0
OPTIONS /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,ladi_camp_form_submit,ladi_camp_id,ladi_camp_name,ladi_camp_origin_url,ladi_camp_page_view,ladi_camp_target_url,ladi_camp_type,ladi_client_id,ladi_form_submit,ladi_page_view
Referer: https://www.2ukarma.2utraining.com.vn/
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:46 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| a.ladipage.com/event | 13.228.231.182 | 200 OK | 0 B |
IP13.228.231.182:0
POST /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
LADI_CLIENT_ID: 012f3904-aba3-4b30-5989-eec1d7c8f57f
LADI_PAGE_VIEW: 1
LADI_FORM_SUBMIT: 0
LADI_CAMP_ID:
LADI_CAMP_NAME:
LADI_CAMP_TYPE:
LADI_CAMP_TARGET_URL:
LADI_CAMP_ORIGIN_URL:
LADI_CAMP_PAGE_VIEW: 0
LADI_CAMP_FORM_SUBMIT: 0
Content-Length: 286
Origin: https://www.2ukarma.2utraining.com.vn
Connection: keep-alive
Referer: https://www.2ukarma.2utraining.com.vn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Dec 2022 07:47:46 GMT
content-type: text/plain; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
X-Firefox-Spdy: h2
|
|