Overview

URLnhatrangcentre.muongthanh.vn/
IP 103.21.150.103 (Vietnam)
ASN#38732 CMC Telecom Infrastructure Company
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-27 13:01:20 UTC
StatusLoading report..
IDS alerts0
Blocklist alert5
urlquery alerts No alerts detected
Tags None

Domain Summary (30)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
old.muongthanh.com (18) 0 2020-02-24 10:59:41 UTC 2022-07-31 10:44:42 UTC 103.21.150.103 Domain (muongthanh.com) ranked at: 518070
accounts.google.com (1) 81 2016-09-05 09:39:47 UTC 2022-09-27 05:15:43 UTC 216.58.207.237
firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-27 11:41:54 UTC 143.204.55.35
www.googleadservices.com (1) 107 2012-07-21 05:05:30 UTC 2022-09-27 10:24:14 UTC 142.250.74.66
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-27 04:53:17 UTC 34.120.237.76
www.google.com (1) 7 2016-08-04 12:36:31 UTC 2022-09-27 04:53:14 UTC 142.250.74.164
www.googletagmanager.com (2) 75 2012-12-25 14:52:06 UTC 2022-09-27 04:52:54 UTC 142.250.74.72
maps.googleapis.com (1) 33876 2014-10-18 12:00:16 UTC 2022-09-27 09:40:20 UTC 216.58.207.202
developers.google.com (2) 12980 2021-02-04 06:38:37 UTC 2022-09-27 10:27:00 UTC 142.250.74.14
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-09-27 05:08:12 UTC 142.250.74.3
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2022-09-27 09:08:20 UTC 93.184.220.29
nhatrangcentre.muongthanh.vn (27) 0 2017-07-20 10:17:06 UTC 2022-07-21 13:17:47 UTC 103.21.150.103 Unknown ranking
fonts.gstatic.com (4) 0 2014-08-29 13:43:22 UTC 2022-09-27 04:53:14 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
platform.twitter.com (1) 597 2012-05-21 03:34:05 UTC 2022-09-27 06:21:01 UTC 93.184.220.66
muongthanh.com (4) 518070 2016-01-18 07:33:09 UTC 2022-09-13 10:38:56 UTC 103.21.150.111
media.adnetwork.vn (1) 192006 2012-07-05 11:53:48 UTC 2022-09-27 04:42:22 UTC 125.212.245.36
maps.gstatic.com (1) 0 2016-01-11 16:55:17 UTC 2022-09-27 07:24:27 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
stats.g.doubleclick.net (1) 96 2013-06-02 22:47:44 UTC 2022-09-27 04:52:22 UTC 64.233.162.156
apis.google.com (2) 105 2013-05-30 23:17:44 UTC 2022-09-27 04:57:23 UTC 142.250.74.174
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-27 04:52:33 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-27 05:14:54 UTC 52.89.15.44
ocsp.pki.goog (15) 175 2017-06-14 07:23:31 UTC 2022-09-27 04:53:14 UTC 142.250.74.3
ocsp.godaddy.com (1) 698 2012-05-20 19:28:57 UTC 2022-09-27 04:52:31 UTC 192.124.249.41
ssl.gstatic.com (1) 0 2016-11-22 23:58:12 UTC 2022-09-27 05:52:21 UTC 142.250.74.99 Domain (gstatic.com) ranked at: 540
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-27 04:52:25 UTC 23.36.77.32
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-27 05:14:54 UTC 143.204.55.25
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-09-27 07:51:08 UTC 142.250.74.174
googleads.g.doubleclick.net (1) 42 2021-02-20 15:43:32 UTC 2022-09-27 08:12:18 UTC 142.250.74.162
ocsp.sectigo.com (1) 487 2018-12-17 11:31:55 UTC 2022-09-27 09:44:42 UTC 172.64.155.188
connect.facebook.net (2) 139 2012-05-22 02:51:28 UTC 2022-09-27 04:52:24 UTC 157.240.200.14

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-27 2 old.muongthanh.com/vi/Footer.html Phishing
2022-09-27 2 old.muongthanh.com/Scripts/lib.js Phishing
2022-09-27 2 old.muongthanh.com/Scripts/jquery-1.7.1.min.js Phishing
2022-09-27 2 old.muongthanh.com/Controls/adv/filter.svg Phishing
2022-09-27 2 old.muongthanh.com/Styles/fonts/EBGaramond.ttf Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

URL fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2
IP  142.250.74.163
Magic gzip compressed data, max compression\012- data
Size 13151
MD5 fc31b4d345365575bb20e898b3daa446
SHA1 7efa8ec9abbfdc39ff0e8255e720c87b3f71f932
SHA256 631aa046436cd1b241820356aeeaa648ef3ae15c855bf337c62e5e306eac8f4c
Analyzer Analysed Verdict Comment
VirusTotal 0/0  VirusTotal Report

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 103.21.150.103
Date UQ / IDS / BL URL IP
2022-09-27 13:01:20 +0000 0 - 0 - 5 nhatrangcentre.muongthanh.vn/ 103.21.150.103


Last 5 reports on ASN: CMC Telecom Infrastructure Company
Date UQ / IDS / BL URL IP
2023-03-21 04:00:34 +0000 0 - 0 - 12 tenplus.vn/wp-admin/cox1/0/authen 115.146.123.204
2023-03-21 00:32:13 +0000 0 - 1 - 0 download_dcv.evat.vn/source/MoSignature%20Set (...) 103.252.1.230
2023-03-21 00:23:37 +0000 0 - 1 - 0 download_dcv.evat.vn/source/AccessRuntime_200 (...) 103.252.1.230
2023-03-21 00:22:31 +0000 0 - 1 - 0 download_dcv.evat.vn/source/Setup_Hoadonso.ex (...) 103.252.1.230
2023-03-21 00:17:38 +0000 0 - 1 - 0 download_monet.evat.vn/source/WinInvoice%20Se (...) 103.252.1.230


Last 1 reports on domain: muongthanh.vn
Date UQ / IDS / BL URL IP
2022-09-27 13:01:20 +0000 0 - 0 - 5 nhatrangcentre.muongthanh.vn/ 103.21.150.103


No other reports with similar screenshot

JavaScript

Executed Scripts (60)

Executed Evals (1)
#1 JavaScript::Eval (size: 908) - SHA256: 90a113f9d88c03c5263c671f61eba32fe32111d8efbc05b561c483cc0288f363
var VNPCProt = (document.location.protocol == 'https:') ? 'https://' : 'http://';
var VNPCRetg = VNPCProt + 'retg.adnetwork.vn/247/';
(function() {
    CClass = function() {};
    CClass.create = function(constructor) {
        var k = this;
        c = function() {
            this._super = k;
            var c = constructor.apply(this, arguments),
                self = this;
            for (key in c)(function(a, b) {
                self[key] = typeof a != "function" || typeof b != "function" ? a : function() {
                    this._super = b;
                    return a.apply(this, arguments)
                }
            })(c[key], self[key])
        };
        c.prototype = new this;
        c.prototype.constructor = c;
        c.extend = this.extend || this.create;
        return c
    }
})();
var AmbientVNRetargeting = CClass.create(function() {
    var c = '';
    for (i = 0; i < 6; i++) {
        c += Math.floor(Math.random() * 9)
    }
    var d = 'cb_' + c + '/';
    var e = function(s) {
        document.write('<script type="text/javascript" src="' + s + d + '"></script>')
    };
    return {
        Retargeting: function(a) {
            var b = '';
            for (x in a) {
                b += x + "_" + a[x] + "/"
            }
            link = VNPCRetg + 'retargeting/' + b;
            return e(link)
        }
    }
});
AbdTracking = new AmbientVNRetargeting();

Executed Writes (2)
#1 JavaScript::Write (size: 112) - SHA256: da87ea694b1240f4e5b8132ab4d90d3238ab0db4abddae07efc41bc5caf46666
< script type = "text/javascript"
src = "http://retg.adnetwork.vn/247/retargeting/id_1481688986/cb_710566/" > < /script>
#2 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855


HTTP Transactions (108)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 12:15:30 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HFkZ85mwmY-tijS7H1nzJvrqRFdLzWZp-mN79k2rCyohq3zpKlAVDA==
Age: 2738


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6627
Expires: Tue, 27 Sep 2022 14:51:36 GMT
Date: Tue, 27 Sep 2022 13:01:09 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.25
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 27 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sqFD_slr4zcxWs8zRYUW8DAsd5TXvwv5iXg2LzDg6yt1DZjXtGIF1w==
age: 13016
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 27 Sep 2022 13:01:09 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 27 Sep 2022 12:10:46 GMT
Expires: Tue, 27 Sep 2022 12:40:44 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xQ60NYws_Ll5fIQBkjqW7ds45L30CrKWbR_8hIWAWxofD8qlD3mPXA==
Age: 3023


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4854
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 13:01:09 GMT
Last-Modified: Tue, 27 Sep 2022 11:40:15 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /Styles/reset.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:10:14 GMT
Accept-Ranges: bytes
ETag: "685182fc333cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 1631


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   1631
Md5:    3f3fe73b41fbd3e71f36e43d67f4fc1a
Sha1:   54f2f2ffc9ef013a7b5df0828ef8934d1e36fbf0
Sha256: aaf412bb8cc1f349bf303f0bab51eddc8fbf7cacccd1f010636da9302bfd0b37
                                        
                                            GET / HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl; path=/; HttpOnly; SameSite=Lax
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 22856


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19220), with CRLF, LF line terminators
Size:   22856
Md5:    90924e32269447bce1c768dcdfdeda53
Sha1:   9e00c0e7054831f5829c0b4cf86e7939d42276f5
Sha256: 08488dbda3ba59b496525799e1cefc53536488502852f8425c4881550ec696f3
                                        
                                            GET /pagead/conversion.js HTTP/1.1 
Host: www.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/

search
                                         142.250.74.66
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Tue, 27 Sep 2022 13:01:10 GMT
Expires: Tue, 27 Sep 2022 13:01:10 GMT
Cache-Control: private, max-age=3600
ETag: 17680024240845530123
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 17403
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text, with very long lines (1952)
Size:   17403
Md5:    f65df5bfeba7e45702bc6b4be768c7e3
Sha1:   7d49820b96edede6e587650ecd387cab1b29951d
Sha256: 7d9314961f09f17bb248d0ee2c99481fce2d8d7d9d3297ffe98d2538d2f1caff
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: n5C0nzEV0XuPZOqwGdFx4w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.89.15.44
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wpVvD9VYPI2xFBFoO1DQDBu6p3g=

                                        
                                            GET /Styles/layout.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 20 Mar 2017 08:40:52 GMT
Accept-Ranges: bytes
ETag: "5c7fe1ae55a1d21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 12683


--- Additional Info ---
Magic:  assembler source, Unicode text, UTF-8 (with BOM) text, with very long lines (415), with CRLF line terminators
Size:   12683
Md5:    6bd366d1ccaaa69229f0f93e510eff95
Sha1:   394afc984ae6406bb705f4d25af13b6ec9ca083e
Sha256: 3f4f4ec1ab03663534ccb4a776779932aa71f897e1a73c2549149a9e4bd2da20
                                        
                                            GET /Scripts/lib.js HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Thu, 14 Jan 2016 20:59:26 GMT
Accept-Ranges: bytes
ETag: "50383474e4fd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 4369


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   4369
Md5:    1db366d892e6ec23e51a398cf27eb497
Sha1:   f08545a721fe2b18dc17b2e510ae56f67810549b
Sha256: 9bbb3ce5a3ee1847d63b810e04af52e3ebd4664cec0d4ea64934781320a4afab
                                        
                                            GET /WebResource.axd?d=ej0CpptpRySIK1UKO2EImsYOP-i0XfXXFwyIFGJxAQkAIyJpFNQcnXbGUSi6YodGTIbgfhdGaWxdyFX2Ia4-O3w6MFMppyz3aWZmwvFwet41GxeQRf6FX7CZHon9wqxCJfJxO0B8wrp1dD0RtjNIBA2&t=635863543207396640 HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: public
Content-Encoding: gzip
Expires: Wed, 27 Sep 2023 03:01:47 GMT
Last-Modified: Mon, 21 Dec 2015 21:12:00 GMT
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 3725


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (13043), with no line terminators
Size:   3725
Md5:    43c737a06730f262f4fb8ee8387931b8
Sha1:   f998d7539433fbd443cf024fb1abe214d7296137
Sha256: 09f5019386cb5143d0499388363ab0226983b97c697b7593c05fb50f953a4dc6
                                        
                                            GET /Scripts/jquery-ui/jquery-ui.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:13:09 GMT
Accept-Ranges: bytes
ETag: "403d7f64343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 10406


--- Additional Info ---
Magic:  ASCII text, with very long lines (2363)
Size:   10406
Md5:    0a88b6d72604f9575097fa5e9ddbc3c4
Sha1:   dbcc12f809b70b12d2820b538c5931cf97522632
Sha256: 5968bbc547e322a1272131e4562bfd13eb6d44be98575925cee449e9b039fffd
                                        
                                            GET /Controls/Adv/Adv.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 1024


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Size:   1024
Md5:    199a63322dd6351198143c4f3fce3917
Sha1:   128deabd867b4158d85f9b0ef643ed822053cbc7
Sha256: 4329621d6ae8bb86ef897a460328f17c176ed167244d3d561d7e39b06fd3f98d
                                        
                                            GET /BICSkins/Menu/Top/MenuTop.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:11:56 GMT
Accept-Ranges: bytes
ETag: "3461e338343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 1033


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   1033
Md5:    3bb87767b98f9c0f258174c2cf11cce8
Sha1:   eb78f54118c5eecc5d458b3c38e176b5af040064
Sha256: d412100b85d271f0f6a496cfec730f28d9c04fe7b9e14c8e27b7e1e42bbf017b
                                        
                                            GET /Scripts/nivo-slider/jquery.nivo.slider.pack.js HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:13:16 GMT
Accept-Ranges: bytes
ETag: "e47de968343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 3794


--- Additional Info ---
Magic:  ASCII text, with very long lines (11999)
Size:   3794
Md5:    d2dcc751ff1ef207ac4c311e155071ab
Sha1:   cb2899b5526f8add11fdd47efa4283774dbe8dd1
Sha256: 9feccc6be98088331314626f2a6bad660b9d4fd9ddbd3b95db3ec07a7ca551a4
                                        
                                            GET /WebResource.axd?d=_X2ATzcShrDKwvKwIdfN9p8gjLfbl1RXqtxHGVtkWrr4P3uuIVjOMJ3tdJ39TTGeJ9AbfEUHFrOI3gTKHaovTk-z3AJ_eq6PwTRVNrzAdgA1&t=637454320754849868 HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Cache-Control: public
Content-Encoding: gzip
Expires: Wed, 27 Sep 2023 03:01:47 GMT
Last-Modified: Tue, 05 Jan 2021 01:27:55 GMT
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 6007


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   6007
Md5:    06fd446079195e9866f38728a31b8416
Sha1:   bce7935598a51703a7077dd75e1d30882533c6e1
Sha256: 5466d19b6349cc09de47de356c3195b2fd367a5ab8f1c55e8aaf2f296915d46d
                                        
                                            GET /Scripts/nivo-slider/nivo-slider.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:13:16 GMT
Accept-Ranges: bytes
ETag: "871be768343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 1451


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1451
Md5:    5c89bc7d1b62b2f48f863f90f380dc69
Sha1:   c658cffa934433113e1e315bac8f5023f546e7fe
Sha256: b5eea2705c2a76d08aa90c6ba9cabf86e3310776045e8b5de228b87141eda3c3
                                        
                                            GET /Controls/Adv/AdvCss.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:12:01 GMT
Accept-Ranges: bytes
ETag: "71f5333c343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 1110


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   1110
Md5:    7bd694bc70fd1842782ed73e8f7ece81
Sha1:   12ce93c400bbd9d62f68884ae041dcf6d855e626
Sha256: 99e58e051cf77c0fca77888cea7a8b9294da7c7c92d115fb0ff00ad05a55b9af
                                        
                                            GET /Controls/Popup/popup.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Thu, 14 Jan 2016 20:59:26 GMT
Accept-Ranges: bytes
ETag: "ae20f173e4fd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 452


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   452
Md5:    a26de16a4d1f631faaead5eb4043fdef
Sha1:   27a4447145bcb4a96696e850d5fed1253fdcafa8
Sha256: 9fbe8365b93141d084c7798c64741400eaa287e5006e1a7c82bc055e015c1591
                                        
                                            GET /Scripts/jquery-1.7.1.min.js HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:13:08 GMT
Accept-Ranges: bytes
ETag: "b6e0064343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:09 GMT
Content-Length: 42031


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Size:   42031
Md5:    567c57562d21bc696577399d87e28cb2
Sha1:   b5fa1798ac7fddba678395a9d038a9ca791167e2
Sha256: 384a631d346914dcfcbf3c4432a0ca30f68df59d7d3fd89522bf84a02cff5e1a
                                        
                                            GET /Scripts/carouFredSel/jquery.carouFredSel-6.2.1-packed.js HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=86400
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:13:08 GMT
Accept-Ranges: bytes
ETag: "e48f3064343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 18254


--- Additional Info ---
Magic:  ASCII text, with very long lines (32032)
Size:   18254
Md5:    e9cda599a06c3967429f9f61151a874c
Sha1:   0d91ec1409797c57e56b227c7ad192067fb9a83f
Sha256: e912b0f610f704dce4e4bd82cabe4df82d09ce3510f9ab19536dc3422de98cdc
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-5BD6DD6 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 13:01:11 GMT
expires: Tue, 27 Sep 2022 13:01:11 GMT
cache-control: private, max-age=900
last-modified: Tue, 27 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 36307
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1720)
Size:   36307
Md5:    61a8ab746e18aca4d45485c94f9fc6e2
Sha1:   34088eb6057f2cf59eebf3f2cce61bb3b61d61a3
Sha256: 563a24c6c487dabef057fafea34c318c98c8af66a7235cf5487106c088a4ddc4
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /FileUpload/Images/thumb/facebook_cover01.jpg HTTP/1.1 
Host: muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/

search
                                         103.21.150.111
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 27 Sep 2022 12:56:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Location: https://muongthanh.com/FileUpload/Images/thumb/facebook_cover01.jpg
Content-Length: 275
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   275
Md5:    a58f5d71694f7d9bb0f3d36d0c676636
Sha1:   2358d42d5d7d38a7eeba0b53564f596eb6a1e456
Sha256: f56d63f351a3e2173fed28acc562ffe0f89dc46dc746464980dc9ebb2bea11a8
                                        
                                            GET /Styles/img/img_unavaiable.jpg HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Cache-Control: max-age=86400
Last-Modified: Mon, 21 Dec 2015 21:10:16 GMT
Accept-Ranges: bytes
ETag: "785b4ffd333cd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 7524


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 204x132, components 3\012- data
Size:   7524
Md5:    414597ac910251a3cbea85cb535cdfbc
Sha1:   43e6b9c19b848f0bb26a6e0e1d678bd45d4f65e2
Sha256: c17821d86c9470b05efdd654ed7bda04dd5f5aa9c49adab363ab8c42adbc154b
                                        
                                            GET /FileUpload/Images/thumb/am_no_ngay_tet_2018.jpg HTTP/1.1 
Host: muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/

search
                                         103.21.150.111
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 27 Sep 2022 12:56:56 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Location: https://muongthanh.com/FileUpload/Images/thumb/am_no_ngay_tet_2018.jpg
Content-Length: 278
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   278
Md5:    daf5c15b3bb94663343d563f225a6897
Sha1:   acb5e9f483c5220687ff1be4c2f2c7324cd9b7cf
Sha256: 41f484225c1784ec51e1ed472bd607b57e580801123f44de83d2c71faf57ba92
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4114
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:01:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4114
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:01:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4114
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:01:11 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4114
Expires: Tue, 27 Sep 2022 14:09:45 GMT
Date: Tue, 27 Sep 2022 13:01:11 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bf02f4e-91c0-455b-8378-5eae82174db7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9737
x-amzn-requestid: aec3c3e9-42e5-4de5-8882-118002369ef8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreGJxoAMF-oA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-527ccd70654c22891262279d;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ukn4d6yPeJJHN5trYK3xbhik2pX41zHki3nG5r6fCzQgm3vYw5lhAA==
via: 1.1 946b9edb2009c5508a0fbbd636f95014.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:43:16 GMT
age: 55075
etag: "932c74fa24b61ee1b1c672b6c19b1e736caab8d3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9737
Md5:    3140ec95f33c36599de95b25cdade940
Sha1:   932c74fa24b61ee1b1c672b6c19b1e736caab8d3
Sha256: f7488246ca75fddc504812f4c5944a5a2494cdb14b6ef1db5fb28beca5cff194
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 13213
x-amzn-requestid: 09f8fee2-6830-4bec-af40-f2fb6547bc63
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFkreH5poAMFdxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b16-0afbf5e01a013e6f0db53da1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:35:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CwkfEPDseHez7mArqwz8tmC3WHFwXAZF1OSColucaQ5vG2hvBIDWOg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:42:47 GMT
age: 55104
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   13213
Md5:    62e68c3cd08dd94d910507512a67e85f
Sha1:   3d4fa8701f17e8818c25584ef5f04bfbee8440cd
Sha256: 058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1bfe3adc-1955-4f21-9e44-c0bc53a4edc5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9163
x-amzn-requestid: 8ccd9b1f-bef9-4591-be32-e6dd98f4ee78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlKpEZrIAMFS1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321bdd-4a40b9c8281b64c725fec0f1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:38:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Lf6qqokEw32egp3ofmJGtUTAt3RD2f9rVq5gskbhrk_VFGweeo0oCQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:49:18 GMT
age: 54713
etag: "84f5a4c8b38acde814bc790e5b514347718d5bb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9163
Md5:    deb8d1e3b6d7fbc8c8ba478269621676
Sha1:   84f5a4c8b38acde814bc790e5b514347718d5bb9
Sha256: ed14fa766f0708b4166e83b61f160db5671af430917b7c67184bf18d9208742b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2517fd65-65c6-43b1-93a6-b1205ba3f0f8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7455
x-amzn-requestid: 0887cd56-f324-46cf-a086-709e1c66f354
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGBTdHmhoAMFvIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633248e2-42391706084f335228fe3994;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 00:50:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: vx-yM_jeJvOaa1UizK5OoDJFkvKnajg2ezLF2l2qnN_OhdTE6I4taQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:05:55 GMT
etag: "1a26007f761e439db575fb80fb403031260aecf4"
age: 42916
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7455
Md5:    5274e770cb5a704916c8965659709f4a
Sha1:   1a26007f761e439db575fb80fb403031260aecf4
Sha256: e36e8be75c92feb9b416a46c5918356d8f9694894a799b7c10de21034d33d5ef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F658e1cdd-3e54-47dd-9724-ec65659721ea.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6390
x-amzn-requestid: b2681ff8-ab83-41e6-adef-3e6772c93c3f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGFJ6Gc_oAMF44g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63324f0c-3dbf9f4e2047567b5abdbe74;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 01:17:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8JXEBo_L_xKuKdeoOXEJ6FO7ZVsZVQzUmQFe7fYcxaHRQNEq1HWp6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 27 Sep 2022 01:25:52 GMT
age: 41719
etag: "61676358cdbb2373bc644e66f8a84fbc8cc5daf6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6390
Md5:    14218a43c5e5bbce546735a780c8ccce
Sha1:   61676358cdbb2373bc644e66f8a84fbc8cc5daf6
Sha256: 905b1c30a2273aef69904f2eb1451c756fc1fdba02e86ea5c957629dd056aeda
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F171029d0-40d4-47b3-8936-8ba3b16b3212.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10211
x-amzn-requestid: 3ea4ac84-2465-4bd1-8ade-863de3c9576e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfSuGoQoAMF9oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145aa-7843b82728ead9a053c689d1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MMrek5LO9ukZjB6VV-5McuE_maDzwTOihucz0kwxuaTJMNOpTchoJA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:52:00 GMT
age: 54551
etag: "be60bbc96c832ae385cc9ae5828bd32703011b21"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10211
Md5:    347dca206e13a3b13953f0ab398310b4
Sha1:   be60bbc96c832ae385cc9ae5828bd32703011b21
Sha256: f6da888a54a0c6c73466f2c2a72dd875514a39d81b760a6b0116b4dd56ef31dd
                                        
                                            GET /Telerik.Web.UI.WebResource.axd?_TSM_HiddenField_=ctl00_rcm1_TSM&compress=1&_TSM_CombinedScripts_=%3b%3bSystem.Web.Extensions%2c+Version%3d4.0.0.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d31bf3856ad364e35%3avi%3aba1d5018-bf9d-4762-82f6-06087a49b5f6%3aea597d4b%3ab25378d2%3bTelerik.Web.UI%2c+Version%3d2012.1.411.40%2c+Culture%3dneutral%2c+PublicKeyToken%3d121fae78165ba3d4%3avi%3aebfa5361-1bb0-4d72-bf6d-db0befdf104a%3a16e4e7cd%3af7645509%3a24ee1bba%3ae330518b%3a2003d0b8%3a1e771326%3ac8618e41 HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
Expires: Wed, 27 Sep 2023 13:01:10 GMT
Last-Modified: Wed, 11 Apr 2012 00:00:00 GMT
Vary: User-Agent
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 111011


--- Additional Info ---
Magic:  ASCII text, with very long lines (65299), with CRLF line terminators
Size:   111011
Md5:    b370d55e033f54d2b9b94db5bbc3a58c
Sha1:   347b521be35f07a1a5d8bed31532961ce51ce92f
Sha256: 4504397f0c67e21472584bbb7e092256508a40b464856a7ca5ffc9427bbf3ce4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:11 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 14:45:44 GMT
Expires: Mon, 03 Oct 2022 14:45:43 GMT
Etag: "e4dcd92707141666d502271d1f724969b04a25aa"
Cache-Control: max-age=524071,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75146d34d854b4eb-OSL

                                        
                                            GET /FileUpload/Images/logo_all07nha_trang.png HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=86400
Last-Modified: Sat, 09 Nov 2019 03:55:36 GMT
Accept-Ranges: bytes
ETag: "94cd1c8bb196d51:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 69536


--- Additional Info ---
Magic:  PNG image data, 135 x 96, 8-bit/color RGBA, non-interlaced\012- data
Size:   69536
Md5:    ec4a94f6205666e47cbf8216d730ba90
Sha1:   465b578500ca646e938b7d12aaf8050d84d94f3b
Sha256: 732a7b057e349fafae5347a76261b4b1f939fef1e6b6dda0f5daf9b29a9780c8
                                        
                                            GET /Scripts/jquery-ui/jquery-ui.js HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=86400
Transfer-Encoding: chunked
Content-Encoding: gzip
Last-Modified: Mon, 21 Dec 2015 21:13:09 GMT
Accept-Ranges: bytes
ETag: "4298b64343cd11:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (547)
Size:   158144
Md5:    95b104ce1b65e5ad291ab65dd09b62be
Sha1:   3136d97860dcbcbcc00bc7ffdb15db7894ca06d5
Sha256: 575e22f9956d9d4b8ab3c922110a16853da61b3c40ddea6e501e1dd40362ea59
                                        
                                            GET /js/retargeting.js HTTP/1.1 
Host: media.adnetwork.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         125.212.245.36
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Tue, 27 Sep 2022 13:01:11 GMT
content-length: 810
vary: Accept-Encoding, Origin, Access-Control-Request-Headers, Access-Control-Request-Method
content-encoding: gzip
last-modified: Thu, 13 Jun 2013 02:21:02 GMT
etag: "1491367318"
x-robots-tag: noindex
access-control-allow-credentials: true
accept-ranges: bytes
age: 0
x-served-by: AMBcache-35
x-cache: HIT(478times)
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1111), with CRLF line terminators
Size:   810
Md5:    132bbeb87a97288af933a78748d6acec
Sha1:   544f1eca01893e1016d7bf38a6d6cf28d5fa5c6c
Sha256: 2cd9fb9fc745b91322a7bce7a29766bd0a7bd3668655d54423212c9becf13d57
                                        
                                            GET /FileUpload/Images/bannerwebsite1349x355px02.jpg HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Cache-Control: max-age=86400
Last-Modified: Tue, 25 Aug 2020 04:34:56 GMT
Accept-Ranges: bytes
ETag: "45db515997ad61:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:10 GMT
Content-Length: 299460


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1349x355, components 3\012- data
Size:   299460
Md5:    48ed4fd7ca8070405561bb95c5bc2667
Sha1:   e14d46c0e059416185cafb0fa8d92198aae01077
Sha256: 1d16e3292d62bd9c209f40a23979dfd72d766e126af25d67e92715e39e3276aa
                                        
                                            GET /Controls/Adv/Adv.css HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:12 GMT
Content-Length: 1024


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Size:   1024
Md5:    199a63322dd6351198143c4f3fce3917
Sha1:   128deabd867b4158d85f9b0ef643ed822053cbc7
Sha256: 4329621d6ae8bb86ef897a460328f17c176ed167244d3d561d7e39b06fd3f98d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-TKNZDH HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/

search
                                         142.250.74.72
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.googletagmanager.com/gtm.js?id=GTM-TKNZDH
Cross-Origin-Resource-Policy: cross-origin
Date: Tue, 27 Sep 2022 13:01:12 GMT
Server: Google Tag Manager
Content-Length: 250
X-XSS-Protection: 0


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   250
Md5:    5db12ad479968590a5dfbded164bd2df
Sha1:   969feb7c3a49fe4a0055e77002c900e794107e91
Sha256: f785752f56d3913b7c8e2d9b8fb472b44221df8f495326d13d1cbfabf1f69101
                                        
                                            GET /maps/embed?pb=!1m18!1m12!1m3!1d3899.16485041189!2d109.1985770063738!3d12.237114987611937!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x3170677b2275de11%3A0x637dae03bebff463!2zNjAgVHLhuqduIFBow7o!5e0!3m2!1svi!2s!4v1448002918878 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Tue, 27 Sep 2022 13:01:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
vary: Accept-Language
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-p4D2rB3DF6thbDa0gA5llw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
content-encoding: gzip
server: mafe
content-length: 951
x-xss-protection: 0
server-timing: gfet4t7; dur=171
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1558)
Size:   951
Md5:    813cb55e426b28c4662f4b06b929ab64
Sha1:   5bbe5e5eb7d3f063257b1fdc6fd22665c1fda122
Sha256: 20d2a6434af9f35910197972d26caf4aff717d9a78baf4ac6da5cbd59116fc73
                                        
                                            GET /Styles/img/mt-ico-viet.png HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/Styles/layout.css
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=86400
Last-Modified: Mon, 21 Dec 2015 21:10:15 GMT
Accept-Ranges: bytes
ETag: "2c7124fd333cd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:12 GMT
Content-Length: 3064


--- Additional Info ---
Magic:  PNG image data, 11 x 11, 8-bit/color RGBA, non-interlaced\012- data
Size:   3064
Md5:    5ed147f8609b80020063d8b816d17a7f
Sha1:   e3a3cc939e213ab7f9cb7b0fcd8ce2d4e0203ae2
Sha256: 04b6c603231c8d60a4ff49f0c357d03b7a1e341859376b47beeb5d885318b9ed
                                        
                                            GET /Styles/img/mt_iconhotline.jpg HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/Styles/layout.css
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Cache-Control: max-age=86400
Last-Modified: Mon, 21 Dec 2015 21:10:15 GMT
Accept-Ranges: bytes
ETag: "69d6e8fc333cd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:12 GMT
Content-Length: 28930


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2015:10:26 23:21:56], progressive, precision 8, 25x24, components 3\012- data
Size:   28930
Md5:    cd4d2fab6cdd81e24d8b97172f95b9ad
Sha1:   92ec723ccffb7428c32b223afbefe65416b885b6
Sha256: ba8e220a29bf393c9c699d7d2c975842a35ba54bf951cccb88d65369e206e4bd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /Styles/img/mt-kengang.png HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/Styles/layout.css
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=86400
Last-Modified: Mon, 21 Dec 2015 21:10:15 GMT
Accept-Ranges: bytes
ETag: "c6e71afd333cd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:12 GMT
Content-Length: 2806


--- Additional Info ---
Magic:  PNG image data, 17 x 2, 8-bit/color RGBA, non-interlaced\012- data
Size:   2806
Md5:    488887dcce92f41f16bcda426d753458
Sha1:   53e37addff046f18b261917d9f0f7155b710225c
Sha256: a9eaa88579a2d04e9dd3c90bcccd3109c395dc6e77f4222d4c66abae8b5f22da
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.202
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 56931
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=13
date: Tue, 27 Sep 2022 12:37:23 GMT
expires: Tue, 27 Sep 2022 13:07:23 GMT
cache-control: public, max-age=1800
age: 1429
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2501)
Size:   56931
Md5:    ad5bda8fa092aea9b6a6c36267fc8955
Sha1:   26fa94d75976dbb7f1e20bb17acee21cee8b457e
Sha256: 9b28bac2c2b45dd74941ad481260d21fa9b8022aac676a9bc986a593e92cb636
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /maps-api-v3/embed/js/50/6/init_embed.js HTTP/1.1 
Host: maps.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 70449
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 19:17:53 GMT
expires: Mon, 25 Sep 2023 19:17:53 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 19:19:29 GMT
age: 150199
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2669)
Size:   70449
Md5:    28b2f8991cb293000d95bcd22b064bdb
Sha1:   6cd3d214658feca2cd46b21b0e7312e986e60c68
Sha256: 9bc7a89f847eb9ef92849d1ec663511a56a942e60d683ce8f916924684b19300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.41
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Tue, 27 Sep 2022 13:01:13 GMT
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Mon, 26 Sep 2022 20:42:12 GMT
Expires: Tue, 27 Sep 2022 20:42:12 GMT
ETag: "4120d3cb9039844f39f25c2dcb903deab9e84a65"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    1b040c665c7ecac7821ac606bbbee116
Sha1:   4120d3cb9039844f39f25c2dcb903deab9e84a65
Sha256: 09c2929887766a5b1986c488ff385da22915719618864e9f35f28c1e0d37061c
                                        
                                            GET /vi/Footer.html HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Upgrade-Insecure-Requests: 1

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private
Content-Encoding: gzip
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Set-Cookie: ASP.NET_SessionId=0y41ywhhwgxk4lbq2nucxcpc; path=/; HttpOnly; SameSite=Lax
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:12 GMT
Content-Length: 4454


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2956), with CRLF line terminators
Size:   4454
Md5:    a8556c3c72a013f81dc97ae583f36e3d
Sha1:   11f84f25734ce25c557282317a87e59b65fc6be8
Sha256: 7259d6bcf0aecd1cd5db123f4c91120ae1dbb5329fd12d1c8e9e2ed111567971

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /Styles/fonts/MYRIADPRO-BOLD.ttf HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/Styles/layout.css
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Cache-Control: max-age=86400
Last-Modified: Mon, 21 Dec 2015 21:10:15 GMT
Accept-Ranges: bytes
ETag: "59eaffc333cd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:12 GMT
Content-Length: 114468


--- Additional Info ---
Magic:  TrueType Font data, 16 tables, 1st "BASE", 24 names, Macintosh\012- data
Size:   114468
Md5:    c23b16e28f64c3763367d68fac66128f
Sha1:   e49662f720083bd61bc262aac589c82561634edc
Sha256: a9a5c50a68d48db316b7f47405f5452cfaa5b5f3fc960439364b742539b7b121
                                        
                                            GET /Styles/fonts/EBGaramond.ttf HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/Styles/layout.css
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Cache-Control: max-age=86400
Last-Modified: Mon, 21 Dec 2015 21:10:15 GMT
Accept-Ranges: bytes
ETag: "774ec0fc333cd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:12 GMT
Content-Length: 136536


--- Additional Info ---
Magic:  TrueType Font data, 15 tables, 1st "FFTM", 16 names, Macintosh\012- data
Size:   136536
Md5:    834d77f8b1df02035308113d613c1e73
Sha1:   cd6398aefb18b70e0af5c5dcc9d53591789c35c8
Sha256: e7991b938acaeedb56d992918f10293acea21925d6538ea1f041f936dd01c8e2
                                        
                                            GET /FileUpload/Images/thumb/facebook_cover01.jpg HTTP/1.1 
Host: muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nhatrangcentre.muongthanh.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.21.150.111
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 27 Sep 2022 12:56:57 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Sat, 24 Mar 2018 06:20:42 GMT
ETag: "27965-568228a4c8280"
Accept-Ranges: bytes
Content-Length: 162149
Cache-Control: max-age=31536000
Expires: Wed, 27 Sep 2023 12:56:57 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 360 x 202, 8-bit/color RGBA, non-interlaced\012- data
Size:   162149
Md5:    6b2fe7bb9c45b7da1cf22bc5b42dbfcb
Sha1:   2cdfea18d540e8d7462f7be020210000ff4016bb
Sha256: a51c8bcd1b500e9d7f0aea0fe65965a07f4e6e4def786d9e33b7782d4bf9cdda
                                        
                                            GET /Styles/reset.css HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=2592000
Content-Encoding: gzip
Last-Modified: Tue, 13 Jan 2015 04:23:34 GMT
Accept-Ranges: bytes
ETag: "5a371cb2e82ed01:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:13 GMT
Content-Length: 1631


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   1631
Md5:    3f3fe73b41fbd3e71f36e43d67f4fc1a
Sha1:   54f2f2ffc9ef013a7b5df0828ef8934d1e36fbf0
Sha256: aaf412bb8cc1f349bf303f0bab51eddc8fbf7cacccd1f010636da9302bfd0b37
                                        
                                            GET /Scripts/lib.js HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=2592000
Content-Encoding: gzip
Last-Modified: Wed, 05 Sep 2018 03:41:35 GMT
Accept-Ranges: bytes
ETag: "b47c5758ca44d41:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:13 GMT
Content-Length: 4777


--- Additional Info ---
Magic:  HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   4777
Md5:    f4cba6e15f6b467ab65918c021bf37db
Sha1:   b85812c3919413f4ebb66b7bf4d962426fa4dab5
Sha256: de9675f0052a966b78ca4b7c8b79964c8f89467fdf0e604a7271fe1a92b7f843

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /Styles/layout.css HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Cache-Control: max-age=2592000
Content-Encoding: gzip
Last-Modified: Mon, 20 Mar 2017 08:40:06 GMT
Accept-Ranges: bytes
ETag: "0f7229355a1d21:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:13 GMT
Content-Length: 12008


--- Additional Info ---
Magic:  assembler source, Unicode text, UTF-8 (with BOM) text, with very long lines (415), with CRLF line terminators
Size:   12008
Md5:    dc79bc2d9178e9405e95a11d9308edf9
Sha1:   4a7e531c86b673464ecde9f43c954fcea1b938df
Sha256: 2bd832044e1cbd1a5ea593b38d5538f656d101fcfe5714b6710e1b3dcf6878a4
                                        
                                            GET /FileUpload/Images/thumb/am_no_ngay_tet_2018.jpg HTTP/1.1 
Host: muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nhatrangcentre.muongthanh.vn/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.21.150.111
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 27 Sep 2022 12:56:57 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.6.40
Last-Modified: Thu, 01 Feb 2018 03:56:10 GMT
ETag: "3698a-5641e93802a80"
Accept-Ranges: bytes
Content-Length: 223626
Cache-Control: max-age=31536000
Expires: Wed, 27 Sep 2023 12:56:57 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 360 x 239, 8-bit/color RGBA, non-interlaced\012- data
Size:   223626
Md5:    211b4520872618b03916ed4332f3af84
Sha1:   b82899ed38a41fbcfd5f329b788f8a41ac57b092
Sha256: 0ea17c1cd975ca6b4dc271b99830c93a7eebdf94d05749275475cd040bbbd440
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:34:08 GMT
expires: Thu, 21 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 494825
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 18:14:12 GMT
expires: Mon, 25 Sep 2023 18:14:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
age: 154021
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:35:48 GMT
expires: Thu, 21 Sep 2023 19:35:48 GMT
cache-control: public, max-age=31536000
age: 494725
last-modified: Wed, 11 May 2022 19:25:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   13151
Md5:    fc31b4d345365575bb20e898b3daa446
Sha1:   7efa8ec9abbfdc39ff0e8255e720c87b3f71f932
Sha256: 631aa046436cd1b241820356aeeaa648ef3ae15c855bf337c62e5e306eac8f4c

Alerts:
  File Analyzers:
    - virustotal: 0/0
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:35:48 GMT
expires: Thu, 21 Sep 2023 19:35:48 GMT
cache-control: public, max-age=31536000
age: 494725
last-modified: Wed, 11 May 2022 19:25:01 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Size:   11872
Md5:    87ace20058325aa069320aa4af875dff
Sha1:   b743548770c46d905ae1ba06310bc001c587fe8e
Sha256: 3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
                                        
                                            GET /WebResource.axd?d=7zdNVBf7xJ5AWQKr6vPw0D4YDL2E0Bs7DUR6T-KA-5o3p286cbDFOgCc-U6m_EpjxLMoJWD8rTg3zlVYYK53JOpvqsA1&t=637454320754849868 HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Cache-Control: public
Content-Encoding: gzip
Expires: Tue, 26 Sep 2023 03:14:31 GMT
Last-Modified: Tue, 05 Jan 2021 01:27:55 GMT
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:13 GMT
Content-Length: 6007


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   6007
Md5:    06fd446079195e9866f38728a31b8416
Sha1:   bce7935598a51703a7077dd75e1d30882533c6e1
Sha256: 5466d19b6349cc09de47de356c3195b2fd367a5ab8f1c55e8aaf2f296915d46d
                                        
                                            GET /Scripts/jquery-1.7.1.min.js HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=2592000
Content-Encoding: gzip
Last-Modified: Tue, 13 Jan 2015 04:23:18 GMT
Accept-Ranges: bytes
ETag: "cc5a42a8e82ed01:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:13 GMT
Content-Length: 42031


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Size:   42031
Md5:    567c57562d21bc696577399d87e28cb2
Sha1:   b5fa1798ac7fddba678395a9d038a9ca791167e2
Sha256: 384a631d346914dcfcbf3c4432a0ca30f68df59d7d3fd89522bf84a02cff5e1a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /Styles/img/mt-map.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Sat, 05 Sep 2015 03:20:00 GMT
Accept-Ranges: bytes
ETag: "ae8b5fbf89e7d01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 36600


--- Additional Info ---
Magic:  PNG image data, 262 x 210, 8-bit/color RGBA, non-interlaced\012- data
Size:   36600
Md5:    e1c8cf518c8d5c159b6db1efadc7f92b
Sha1:   5d6f94ffa831e5ac12a06f9fc5a51db84cf6ca94
Sha256: cf11e48bb69b67150183b10c77efeb751643f7dfc677b51d3e681f0af561e246
                                        
                                            GET /Styles/img/tw_color.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Sat, 05 Sep 2015 03:46:50 GMT
Accept-Ranges: bytes
ETag: "693d7c7f8de7d01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 1212


--- Additional Info ---
Magic:  PNG image data, 18 x 18, 8-bit/color RGB, non-interlaced\012- data
Size:   1212
Md5:    f2127920b6fa4366275f839be8dd366b
Sha1:   d9502bbdb7132198cf56927d07c6c44788346f06
Sha256: 0b279438ffb9612a2b4d3e4d9e594a48e74b6a716bcbca9459c7010277731c21
                                        
                                            GET /Styles/img/trip_color.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Sat, 05 Sep 2015 03:54:40 GMT
Accept-Ranges: bytes
ETag: "adeb94978ee7d01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 2352


--- Additional Info ---
Magic:  PNG image data, 28 x 17, 8-bit/color RGBA, non-interlaced\012- data
Size:   2352
Md5:    214a327b313e895cd99df5a13193d67d
Sha1:   283196a92d14f1825fd67870bf93a08ff2b3c55d
Sha256: 74a71e8baf074c11340c1af35bc37bbca48b55e12315c5fb28ca3f62a6c72698
                                        
                                            GET /Styles/img/you_color.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Sat, 05 Sep 2015 03:49:48 GMT
Accept-Ranges: bytes
ETag: "85f30e98de7d01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 1303


--- Additional Info ---
Magic:  PNG image data, 18 x 18, 8-bit/color RGB, non-interlaced\012- data
Size:   1303
Md5:    7bf28490e358bef857b7e9c986f0d066
Sha1:   fbc19a340e99a261709e1ebb633b39f31fb758c7
Sha256: 74a2b9497c497872f1636e6a090f2e8a4101608a229c5205f87efaecaa73ac65
                                        
                                            GET /Styles/img/g_color.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Sat, 05 Sep 2015 03:53:44 GMT
Accept-Ranges: bytes
ETag: "6536c0758ee7d01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 1251


--- Additional Info ---
Magic:  PNG image data, 18 x 18, 8-bit/color RGB, non-interlaced\012- data
Size:   1251
Md5:    643dc53807e91e2064c882137b0b4b41
Sha1:   4dd722e5d9c252e6bc74f7ba6bb75c091f6a6c26
Sha256: f9eaa448abe4ccc15de9bfaa79e4f71ba644e329b818d605b56a8c2fd75f10af
                                        
                                            GET /Styles/img/fb_color.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/vi/Footer.html

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Sat, 05 Sep 2015 03:48:10 GMT
Accept-Ranges: bytes
ETag: "f5beefae8de7d01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 1048


--- Additional Info ---
Magic:  PNG image data, 18 x 18, 8-bit/color RGB, non-interlaced\012- data
Size:   1048
Md5:    30122a018076692fec2e060886980f11
Sha1:   e6183f31ca089072848132e4562dc034b2c08f93
Sha256: d664e7b539c88b643d9a1821fb253a2307f66ef99e4469aaae2c21c5ee5d6d4f
                                        
                                            GET /Styles/img/mtstandard.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/Styles/layout.css

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Wed, 13 Jan 2016 11:06:00 GMT
Accept-Ranges: bytes
ETag: "efc4a962f24dd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 5123


--- Additional Info ---
Magic:  PNG image data, 183 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size:   5123
Md5:    4f89e0fe6286f5d4c52fba9e09c7bea6
Sha1:   ef597c6b69067b81239621d6c86da24badc7abbe
Sha256: e44748a8b66c3ff7d8cd0172c463e57a9d1f41cc044af0fc276cdc6e32574379
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/

search
                                         142.250.74.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 19826
Date: Tue, 27 Sep 2022 12:20:53 GMT
Expires: Tue, 27 Sep 2022 14:20:53 GMT
Cache-Control: public, max-age=7200
Age: 2421
Last-Modified: Sun, 11 Sep 2022 13:50:09 GMT


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   19826
Md5:    cae538dcce82598fbe43c0bf443e62dd
Sha1:   cc68ac6be9c5e0087a0000e5735b83270ace30f5
Sha256: 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
                                        
                                            GET /vi_VN/sdk.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/

search
                                         157.240.200.14
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: da554eb83a9f01daae204f338876f9b1
ETag: "5fa8977de7928883e9eb8bea6f4124eb"
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Tue, 27 Sep 2022 13:01:57 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: aw4/Qn1jK465TPYdCQnr5Q==
X-FB-Debug: 7IM7lUGrORMEonigCl+rlGsROQKs9LLBjiJWhOpE/TSYLvFfooOh+I3SS/uYSL3LhTsSCnEoup3YHTYJmwRADQ==
X-FB-TRIP-ID: 1679558926
Date: Tue, 27 Sep 2022 13:01:14 GMT
Alt-Svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 1685


--- Additional Info ---
Magic:  ASCII text, with very long lines (1961)
Size:   1685
Md5:    6b0e3f427d632b8eb94cf61d0909ebe5
Sha1:   7fc6b6e59cbc8057ddad4543ff6772cc578113af
Sha256: 233f4bd5642c32fe0f94f772393988bf32307e0540fc2a7ffec655a56c70e7df
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 44
Cache-Control: public, max-age=1800
Date: Tue, 27 Sep 2022 13:01:14 GMT
Etag: "f116c7e6b28e2aebeb60ade5bdc8e2b4+gzip"
Last-Modified: Wed, 31 Aug 2022 20:41:50 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F6FC)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29220


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (33915)
Size:   29220
Md5:    0ccf02d52b75b85c65aa5460aa24aebf
Sha1:   50d1a19cb9ebbd6d42173ce2d963ea4df29e8e5a
Sha256: d13778acf057777bad23fd020088463d65d2b7baff042cd4529d27faa46daf38
                                        
                                            GET /Controls/adv/filter.svg HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/Styles/layout.css

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Cache-Control: max-age=2592000
Last-Modified: Tue, 13 Jan 2015 04:22:51 GMT
Accept-Ranges: bytes
ETag: "6c93c98e82ed01:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 239


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size:   239
Md5:    f96087ff4a94bf0a79ed5c0fa5c5c6c5
Sha1:   dcd340edc4ad856ad0e83a1b9803af9c95c076ad
Sha256: c74f3d8297a4f8ae0e2eb43fcc3acfecfd2cbb1499d5463bfb5f575f5f187bbe

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /Styles/img/mtholiday.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/Styles/layout.css

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Wed, 13 Jan 2016 11:04:47 GMT
Accept-Ranges: bytes
ETag: "f7ec7b37f24dd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 6472


--- Additional Info ---
Magic:  PNG image data, 183 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size:   6472
Md5:    dbb6ab5b14ff7fc55ad6973b712585e4
Sha1:   cf09f76d4f91963f6223b386969d3b4bbdcf4d08
Sha256: 6921cd0efb394160ae18a43eaa9ae461a4fdd0a3bbe04d35cc9467227a9d4dd4
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20362
date: Tue, 27 Sep 2022 13:01:14 GMT
expires: Tue, 27 Sep 2022 13:01:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5f35d22782378ad2"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1277)
Size:   20362
Md5:    202067c443611dc148225b75c0e3d556
Sha1:   9e6be316508f5c2a2e4b8cecc561b0e7415bd38c
Sha256: 5d9db864eb7c211f62d61436846b80db003b0102c903dda9bc15af29e5eefa39
                                        
                                            GET /pagead/viewthroughconversion/867796130/?random=1664283669999&cv=9&fst=1664283669999&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&ig=1&frm=0&url=http%3A%2F%2Fnhatrangcentre.muongthanh.vn%2F&tiba=M%C6%AF%E1%BB%9CNG%20THANH%20LUXURY%20NHA%20TRANG&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.162
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 13:01:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1034
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Tue, 27-Sep-2022 13:16:14 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2200), with no line terminators
Size:   1034
Md5:    1002ce88b42a769959fa4f9aaa3796a2
Sha1:   e1a70978d5745a6c067ac0af4242c96ae3990db8
Sha256: e0117ab916b550e553d224ad94b2e18f2fc7c10caa6259913a24d5bf8b950a61
                                        
                                            GET /Styles/img/mtluxury.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/Styles/layout.css

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Wed, 13 Jan 2016 11:05:08 GMT
Accept-Ranges: bytes
ETag: "a6ac9643f24dd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 6180


--- Additional Info ---
Magic:  PNG image data, 183 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size:   6180
Md5:    0c2dfe48a3292c4686e66c272817a073
Sha1:   dc51555aaee17db980b216d8267872e9770338b2
Sha256: 76a56334ec5ffe6a49bef0c57bbfc89bd333af4282977771803ed162728dd2eb
                                        
                                            GET /Styles/img/mtgrand.png HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/Styles/layout.css

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Cache-Control: max-age=2592000
Last-Modified: Wed, 13 Jan 2016 11:02:24 GMT
Accept-Ranges: bytes
ETag: "139f44e2f14dd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 6139


--- Additional Info ---
Magic:  PNG image data, 183 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size:   6139
Md5:    ac85ba6251781bfeb7d03c5acd8a634e
Sha1:   169dfc0d51b45c3360a32694051ee612137f6202
Sha256: f1a1485b1ddd4a04d546735d3fe9780d8cdbe57ebb282dcc4e7e35b1f3eea253
                                        
                                            GET /u/0/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=vi&origin=http%3A%2F%2Fnhatrangcentre.muongthanh.vn&url=http%3A%2F%2Fnhatrangcentre.muongthanh.vn%2Fdefault.aspx&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.174
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 13:01:14 GMT
expires: Tue, 27 Sep 2022 13:31:14 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   226
Md5:    4df07581948280a6e769a24c5d99d775
Sha1:   843a2c95362347eb8894a6acb607f139be65ded4
Sha256: 3561b93a48d81fac116ccd6e60163bd382abb1d594c81240f5718feb1f197f73
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: nhatrangcentre.muongthanh.vn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Cookie: ASP.NET_SessionId=ntlhk0tv5aohtca2uoa4azvl

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Cache-Control: max-age=86400
Last-Modified: Mon, 21 Dec 2015 21:11:38 GMT
Accept-Ranges: bytes
ETag: "e43d9b2e343cd11:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 5430


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Size:   5430
Md5:    a480ad6dc7f3e5fc59050bd2b4c30894
Sha1:   7d1627ba6939d0487b645acec5fc8cd5683fd86b
Sha256: dabf183562f70eb2ebaadd6790a9f892006445e8ee5b7530b1e6551689c07f4c
                                        
                                            GET / HTTP/1.1 
Host: developers.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://nhatrangcentre.muongthanh.vn/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Location: https://developers.google.com/
X-Cloud-Trace-Context: eaaaab06140983f5abc10b47ecb19b21
Date: Tue, 27 Sep 2022 13:01:14 GMT
Server: Google Frontend
Content-Length: 0

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /Styles/fonts/EBGaramond.ttf HTTP/1.1 
Host: old.muongthanh.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://old.muongthanh.com/Styles/layout.css

search
                                         103.21.150.103
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Cache-Control: max-age=2592000
Last-Modified: Mon, 21 Apr 2014 11:51:54 GMT
Accept-Ranges: bytes
ETag: "069ea16585dcf1:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Tue, 27 Sep 2022 13:01:14 GMT
Content-Length: 136536


--- Additional Info ---
Magic:  TrueType Font data, 15 tables, 1st "FFTM", 16 names, Macintosh\012- data
Size:   136536
Md5:    834d77f8b1df02035308113d613c1e73
Sha1:   cd6398aefb18b70e0af5c5dcc9d53591789c35c8
Sha256: e7991b938acaeedb56d992918f10293acea21925d6538ea1f041f936dd01c8e2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5580
Cache-Control: 'max-age=158059'
Date: Tue, 27 Sep 2022 13:01:16 GMT
Last-Modified: Tue, 27 Sep 2022 11:28:17 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/1p-user-list/867796130/?random=1664283669999&cv=9&fst=1664283600000&num=1&guid=ON&eid=375603260&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0&sendb=1&frm=0&url=http%3A%2F%2Fnhatrangcentre.muongthanh.vn%2F&tiba=M%C6%AF%E1%BB%9CNG%20THANH%20LUXURY%20NHA%20TRANG&fmt=3&is_vtc=1&random=904391939&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.3
HTTP/2 200 OK
content-type: image/gif
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Tue, 27 Sep 2022 13:01:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /vi_VN/sdk.js?hash=23702d94bd576a8e7bdbeed59dee32e4 HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nhatrangcentre.muongthanh.vn
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 77cb346040f936fe3f732c2e46e52ea6
etag: "fe3138b54ed29efb2f5a4e7201ebb361"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 27 Sep 2023 12:41:58 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: G4QwecWNtcedueK/3fimjQ==
x-fb-debug: lxyh5+zkO6boPo62Vtdjqq2jGlOi8DLd8O7ZiMvdhc9EQkY0xYeFBzni1DTp+UMSsiE4qLSMAPfBWMY65L+CLw==
content-length: 88963
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 13:01:16 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18598)
Size:   88963
Md5:    1b843079c58db5c79db9e2bfddf8a68d
Sha1:   2e6f3666baa02e9489f36e201bf7cb42f62e919e
Sha256: 31306b2a559f125256c134a4dfdefe89e3632d5de7a05eff2e22de0f82085d04
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Sep 2022 13:01:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.99
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 08:56:30 GMT
expires: Mon, 25 Sep 2023 08:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 22:13:13 GMT
age: 187486
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2267)
Size:   4294
Md5:    3f7502705229ccec9d066c5cd75e6c31
Sha1:   ede1663155afaa5a5213d075e6295c6d839b05c3
Sha256: 2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-112092331-21&cid=313004590.1664283673&jid=1552116315&gjid=1294127019&_gid=1714358275.1664283673&_u=IEBAAEAAAAAAAC~&z=507731037 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://nhatrangcentre.muongthanh.vn
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         64.233.162.156
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://nhatrangcentre.muongthanh.vn
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Tue, 27 Sep 2022 13:01:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fnhatrangcentre.muongthanh.vn&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__ HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://nhatrangcentre.muongthanh.vn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         216.58.207.237
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 27 Sep 2022 13:01:16 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /o/cspreport, script-src 'nonce-94lL1gM7EzxS-xSgdHhIYw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: developers.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nhatrangcentre.muongthanh.vn/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.14
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
last-modified: Thu, 22 Sep 2022 21:43:21 GMT
set-cookie: _ga_devsite=GA1.3.283503571.1664283676; Expires=Thu, 26 Sep 2024 13:01:16 GMT; Max-Age=63072000; Path=/
content-security-policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-D+1f6PFkrUNdbPIm2cfaPoZarahnIS' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
cache-control: no-cache, must-revalidate
expires: 0
pragma: no-cache
content-encoding: gzip
x-cloud-trace-context: 86f76a0ea3c38e2eacdefe74054e4e13
vary: Accept-Encoding
date: Tue, 27 Sep 2022 13:01:16 GMT
server: Google Frontend
content-length: 21516
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---