GET www.googletagmanager.com/gtag/js?id=US-11367016171
200 OK 44 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=US-11367016171
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (2213)
Hash 940029725395225241c4f2f0e4fbf9c2
e5ece55f8f7ab6b6e774fbe50f8017dee76763b0
52462c5f13e52d8969faf6a7337acd181ef43e5e27c9167c320f1eb03220587e
GET /gtag/js?id=US-11367016171 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 03 Dec 2023 14:29:05 GMT
expires: Sun, 03 Dec 2023 14:29:05 GMT
cache-control: private, max-age=900
last-modified: Sun, 03 Dec 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44217
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 293491
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data
Hash 057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:21:56 GMT
expires: Fri, 29 Nov 2024 23:21:56 GMT
cache-control: public, max-age=31536000
age: 227229
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
200 OK 28 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 27812, version 1.0\012- data
Hash 89711a1150919edc93f67f067ef94f62
9f2ac701d67d1ab3a2efe7d4edc663d3d5270fef
6e1f71b09a1de41dc109318bff4733fa7dfa6d03bf6b7fa9a994939274555dd9
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27812
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:14:00 GMT
expires: Thu, 28 Nov 2024 21:14:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:37:02 GMT
content-type: font/woff2
age: 321305
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
200 OK 21 kB URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 21444, version 1.0\012- data
Hash ffd3d57638a7899d80bcc108713c271c
d186409ee24fc3d1cc8194434dd707181ead20ec
99027d866818f716d208569108a962ac72200197cae503efe5b6bf002bf4915b
GET /s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21444
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:46:26 GMT
expires: Fri, 29 Nov 2024 04:46:26 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Aug 2023 18:38:40 GMT
content-type: font/woff2
age: 294159
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:03:39 GMT
expires: Fri, 29 Nov 2024 14:03:39 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
age: 260726
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.woff2
200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 18716, version 1.0\012- data
Hash cbbc9880606ac4b39811f82382f06a28
45e0aadf58676ffcaba8f6d8a04b9a1ec51a7425
a2af879c9d863ff503ebd89ef251c9d8caa2c8063f097c29e31856e27aca2630
GET /s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18716
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:54 GMT
expires: Fri, 29 Nov 2024 04:53:54 GMT
cache-control: public, max-age=31536000
age: 293711
last-modified: Tue, 15 Aug 2023 18:23:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.woff2
200 OK 6.2 kB URL GET HTTP/2 fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 6224, version 1.0\012- data
Hash 045105b61126e51491c58786d1016e6e
f7ed9bcd2c6a237f94ffd6f586526144e7edd9c0
31d66284204ab36bfd0b97ed55fcf8e4bbceafa0a8bd46b71f64db8d0ef9d500
GET /s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 6224
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 23:30:38 GMT
expires: Thu, 28 Nov 2024 23:30:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Aug 2023 18:25:00 GMT
content-type: font/woff2
age: 313107
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2
200 OK 9.5 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9512, version 1.0\012- data
Hash f5194249dc5d30c23f8f8803f3e98339
ec70bd1cc33a8fa79355d0d3639b757551a95e66
26a448d7f02e7b021d15ba5d546ce57d822e6c7728420eb089a23adf10ea26ef
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9512
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:06:49 GMT
expires: Fri, 29 Nov 2024 05:06:49 GMT
cache-control: public, max-age=31536000
age: 292936
last-modified: Wed, 13 Sep 2023 22:58:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33092, version 1.0\012- data
Hash 057478083c1d55ea0c2182b24f6dd72f
caf557cd276a76992084efc4c8857b66791a6b7f
bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 23:21:56 GMT
expires: Fri, 29 Nov 2024 23:21:56 GMT
cache-control: public, max-age=31536000
age: 227229
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
200 OK 28 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 27812, version 1.0\012- data
Hash 89711a1150919edc93f67f067ef94f62
9f2ac701d67d1ab3a2efe7d4edc663d3d5270fef
6e1f71b09a1de41dc109318bff4733fa7dfa6d03bf6b7fa9a994939274555dd9
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 27812
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:14:00 GMT
expires: Thu, 28 Nov 2024 21:14:00 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 22:37:02 GMT
content-type: font/woff2
age: 321305
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/barlowcondensed/v12/HTxwL3I-JCGChYJ8VI-L6OO_au7B46r2z3bWuQ.woff2
200 OK 21 kB URL GET HTTP/2 fonts.gstatic.com/s/barlowcondensed/v12/HTxwL3I-JCGChYJ8VI-L6OO_au7B46r2z3bWuQ.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 21440, version 1.0\012- data
Hash 93674060037764a36d225e483fcc24b5
d639ff4a3ee9a0569f47b13d95e17a66c0bc9911
8320299532b4b81498d5b3714d49c9d5938883b55f4c2a1efe6f105bf4a942bd
GET /s/barlowcondensed/v12/HTxwL3I-JCGChYJ8VI-L6OO_au7B46r2z3bWuQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 21440
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:53:14 GMT
expires: Fri, 29 Nov 2024 04:53:14 GMT
cache-control: public, max-age=31536000
age: 293751
last-modified: Tue, 19 Apr 2022 18:46:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2
200 OK 9.5 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 9512, version 1.0\012- data
Hash f5194249dc5d30c23f8f8803f3e98339
ec70bd1cc33a8fa79355d0d3639b757551a95e66
26a448d7f02e7b021d15ba5d546ce57d822e6c7728420eb089a23adf10ea26ef
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9512
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:06:49 GMT
expires: Fri, 29 Nov 2024 05:06:49 GMT
cache-control: public, max-age=31536000
age: 292936
last-modified: Wed, 13 Sep 2023 22:58:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET static.ladipage.net/5ea845b95da1a2557f302daa/mau-chu-1-769-x-544-px-20231125080352-diuma.jpg
134 B URL GET static.ladipage.net/5ea845b95da1a2557f302daa/mau-chu-1-769-x-544-px-20231125080352-diuma.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectstatic.ladipage.net
Fingerprint06:B7:EB:46:7B:BC:A9:4A:07:A9:CD:D7:29:22:67:15:02:7E:3D:F0
ValidityWed, 21 Jun 2023 00:00:00 GMT - Fri, 19 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /5ea845b95da1a2557f302daa/mau-chu-1-769-x-544-px-20231125080352-diuma.jpg HTTP/1.1
Host: static.ladipage.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: awselb/2.0
date: Sun, 03 Dec 2023 14:29:08 GMT
content-type: text/html
content-length: 134
location: https://w.ladicdn.com:443/5ea845b95da1a2557f302daa/mau-chu-1-769-x-544-px-20231125080352-diuma.jpg
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg
200 OK 47 kB URL GET HTTP/3 embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (22356), with no line terminators
Hash f66e029841759471d2ec78b86760dca7
d9db67738984efee3dd63cb144759ac0521c7dda
5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526
GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: image/svg+xml
last-modified: Sat, 22 May 2021 07:25:19 GMT
etag: W/"f66e029841759471d2ec78b86760dca7"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 540760
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800e48a10b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/s221x57/5c7362c6c417ab07e5196b05/dfsr-20230720030511-amca9.jpg
66 kB URL GET w.ladicdn.com/s221x57/5c7362c6c417ab07e5196b05/dfsr-20230720030511-amca9.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash bac7af71df3017cda74d94d87b60e286
21e4f17c7316af428cc8cbe69acdb8a2c318e033
8c0b21bf257feda7a9fa45396810c4c8a584d0258282871314c7418a39cde031
GET /s221x57/5c7362c6c417ab07e5196b05/dfsr-20230720030511-amca9.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GW9ut6k5FarZEbOlb1thf0XwTVWexkBwWFWBKwSc5SN33xXhnHmG5Q==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2c776523.js
200 OK 2.5 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2c776523.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (7924), with no line terminators
Hash 589bcaf3fa2f5394494ee99582c6bee6
eb7d46d5e3a7479ee94c63f0f7128f0f893e15e8
b089f5f65d03da61b611f98336194eb97c019203a97c3899a0d26cd28079b65e
GET /_s/v4/app/6549ac0173e/js/twk-chunk-2c776523.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"589bcaf3fa2f5394494ee99582c6bee6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 474896
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800c8fca0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-4fe9d5dd.js
200 OK 66 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-4fe9d5dd.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (906), with no line terminators
Hash 1c5ecf371149feca23bd895ba9dfec4d
6f6213ae4c63d959441572d232f0425467ed05de
fb193c2bcf1a14030cea8d72baa20ab7b1cf88f9e90adb31895279beedf6bf84
GET /_s/v4/app/6549ac0173e/js/twk-chunk-4fe9d5dd.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"1c5ecf371149feca23bd895ba9dfec4d"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 554023
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800cafde0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET channel.mediacdn.vn/2019/7/10/photo-9-15627338799981442995189.jpg
200 OK 78 kB URL GET HTTP/2 channel.mediacdn.vn/2019/7/10/photo-9-15627338799981442995189.jpg
IP
ASN #18403 FPT Telecom Company
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGlobalSign nv-sa
Subject*.mediacdn.vn
Fingerprint9D:15:AA:4E:34:67:EC:3F:5B:65:22:29:59:3D:0A:F2:07:D1:B4:FC
ValidityThu, 01 Jun 2023 03:04:22 GMT - Tue, 02 Jul 2024 03:04:21 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x960, components 3\012- data
Hash db49dd48b8edad7215e816148e6dedd9
ac805a8cd5e9218e16566a4f314a182e54534945
6a7a1a501ac3ac56437d51df1720a4ba026cbf08125c39ea713e96e90410e289
GET /2019/7/10/photo-9-15627338799981442995189.jpg HTTP/1.1
Host: channel.mediacdn.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:14 GMT
content-type: image/jpeg
content-length: 77972
last-modified: Tue, 05 Sep 2023 15:11:45 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD, POST, OPTIONS
timing-allow-origin: *
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Length,Content-Type,DNT,If-Modified-Since,Keep-Alive,Key,Origin,Range,User-Agent,X-Requested-With
x-content-type-options: nosniff
server: VCCloud CDN / 563.7711f79c7425bd5e019107a75254b68a
x-xss-protection: 1; mode=block
x-cache: HIT from VCCloud CDN
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.khotonghcm.com/kinhmatnangtamdangcap
200 OK 370 kB URL User Request GET HTTP/2 www.khotonghcm.com/kinhmatnangtamdangcap
IP
Certificate IssuerLet's Encrypt
Subjectwww.khotonghcm.com
Fingerprint2C:38:3D:32:84:2C:79:19:87:95:76:93:6E:42:AB:C9:25:52:19:74
ValidityMon, 30 Oct 2023 08:33:54 GMT - Sun, 28 Jan 2024 08:33:53 GMT
Size 370 kB (370005 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /kinhmatnangtamdangcap HTTP/1.1
Host: www.khotonghcm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Sun, 03 Dec 2023 14:29:04 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
set-cookie: LADI_DNS_CHECK="2023-12-03 14:29:04.976019393 +0000 UTC m=+2188745.642079112"; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_CLIENT_ID=6ac27ff3-997f-4d36-5b79-b989153dbdd1; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_PAGE_VIEW=0; Path=/kinhmatnangtamdangcap; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_PAGE_VIEW_PATH=0; Path=/kinhmatnangtamdangcap; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_FORM_SUBMIT=0; Path=/kinhmatnangtamdangcap; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_FORM_SUBMIT_PATH=0; Path=/kinhmatnangtamdangcap; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_PAGE_VIEW=1; Path=/kinhmatnangtamdangcap; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_PAGE_VIEW_PATH=1; Path=/kinhmatnangtamdangcap; Expires=Wed, 30 Nov 2033 14:29:04 GMT
LADI_CAMP_ID=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_NAME=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_TYPE=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_ORIGIN_URL=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_TARGET_URL=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_PAGE_VIEW=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_PAGE_VIEW_PATH=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_FORM_SUBMIT=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_FORM_SUBMIT_PATH=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW_PATH=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT_PATH=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_CONFIG=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_CAMP_END_DATE=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_FUNNEL_NEXT_URL=; Path=/kinhmatnangtamdangcap; Max-Age=0
LADI_FUNNEL_PREV_URL=; Path=/kinhmatnangtamdangcap; Max-Age=0
statuscode: 200
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
GET w.ladicdn.com/s700x350/5c7362c6c417ab07e5196b05/ggggggggg-20200923023825.jpg
0 B URL GET w.ladicdn.com/s700x350/5c7362c6c417ab07e5196b05/ggggggggg-20200923023825.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s700x350/5c7362c6c417ab07e5196b05/ggggggggg-20200923023825.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sat, 02 Dec 2023 14:12:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Sun, 01 Dec 2024 14:12:54 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V23jLnYvw9mKBXmRE0yVQOhuJvEvRgtaNVW3OmHN--ZFAVErXwRBTA==
age: 87372
X-Firefox-Spdy: h2
GET va.tawk.to/v1/widget-settings?propertyId=6550a603cec6a912820f0ca2&widgetId=1hf1ggvnb&sv=undefined
200 OK 2.7 kB URL GET HTTP/3 va.tawk.to/v1/widget-settings?propertyId=6550a603cec6a912820f0ca2&widgetId=1hf1ggvnb&sv=undefined
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (3086), with no line terminators
Hash ac63c6709a05d8a85caed9f2e0ee31ca
b584abc04c9e94ef404bdb331612fe99ab898e26
bd96ce264f38ebe054cb4b228a66f66b2f68a7537ed476d6c289cf761eca1492
GET /v1/widget-settings?propertyId=6550a603cec6a912820f0ca2&widgetId=1hf1ggvnb&sv=undefined HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.khotonghcm.com/
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-3vs0
access-control-allow-origin: *
access-control-allow-methods: GET,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
cache-control: public, max-age=7200, s-maxage=1800
etag: W/"2-18-0"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800878a20b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/6550a603cec6a912820f0ca2/1hf1ggvnb
200 OK 2.1 kB URL GET HTTP/2 embed.tawk.to/6550a603cec6a912820f0ca2/1hf1ggvnb
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2310), with no line terminators
Hash 94f3ec75ab5a818c500e846346100f78
6b246db2e4c4cbdcd47b490fbec94f76461071aa
91d373cdeec69dc878d2a3097ee15b264da94387c516e105e7921009700f028e
GET /6550a603cec6a912820f0ca2/1hf1ggvnb HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:06 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-6549ac0173e"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc7ff5a8de56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET w.ladicdn.com/s700x600/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg
0 B URL GET w.ladicdn.com/s700x600/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s700x600/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 03 Dec 2023 02:45:24 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 02:45:24 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: MUkfjoa41rhwiFpCVX454aRhX1CbhCAN8_qRRP0KbPOt9jiGRTSVjw==
age: 42222
X-Firefox-Spdy: h2
POST a.ladipage.com/event
200 OK 106 B IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjecta.ladipage.com
Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D
ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 1b0fbcd644b2fd5e7f516acf3aecbd83
8154d902bb9bcc1d424998b5cfd94ae1b065d6ac
09b06d2aef938b6e871e050d0d1079b124634036a142fa23cc47aed667c9f5bc
POST /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
LADI_CLIENT_ID: 6ac27ff3-997f-4d36-5b79-b989153dbdd1
LADI_PAGE_VIEW: 1
LADI_FORM_SUBMIT: 0
LADI_CAMP_ID:
LADI_CAMP_NAME:
LADI_CAMP_TYPE:
LADI_CAMP_TARGET_URL:
LADI_CAMP_ORIGIN_URL:
LADI_CAMP_PAGE_VIEW: 0
LADI_CAMP_FORM_SUBMIT: 0
Content-Length: 243
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:07 GMT
content-type: text/plain; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/css/message-preview.css
200 OK 41 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/css/message-preview.css
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (40699), with no line terminators
Hash c7393b57847a249cf71e453cff9c5693
2b151e46ff61023cac973343c951b4210cd4d374
7bd9666b0959d868276da481746b74e6a76fbc19f7957e528b8fb022367980bc
GET /_s/v4/app/6549ac0173e/css/message-preview.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=40832
access-control-allow-origin: *
etag: W/"cf4a08d496f49489af30571e3cbb48f3"
last-modified: Tue, 07 Nov 2023 03:18:37 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 814599
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800e08860b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/s1100x800/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg
0 B URL GET w.ladicdn.com/s1100x800/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s1100x800/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: SwdZxfH8tL2_j0Lo4SvcalEnPK-ad73jshd3dZn1OJPVnafv0483og==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b383d.js
200 OK 699 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b383d.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (725), with no line terminators
Hash 7c2c957f3cf80dadfd0cbb7c677a0869
30e8962bf64cc7349c9e61b40b8bab5aa598c63c
606127d882e34faee4895ad2cbf8a94d805fac37792c2cc2b9bc05ca3de743b1
GET /_s/v4/app/6549ac0173e/js/twk-chunk-2d0b383d.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"838903127a65ec440893b4945c40ca4a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 987583
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800c9fd70b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
OPTIONS va.tawk.to/log-performance/v3
200 OK 0 B URL OPTIONS HTTP/3 va.tawk.to/log-performance/v3
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.khotonghcm.com/
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:10 GMT
x-served-by: visitor-application-preemptive-rb2z
access-control-allow-origin: https://www.khotonghcm.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80114a330b3d-OSL
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/_s/v4/app/6549ac0173e/css/min-widget.css
200 OK 25 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/css/min-widget.css
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (24751), with no line terminators
Hash d4f9ad34fae3ba64cbc48057dc47e968
f8d0d55dc6e9b5d53f74b0b8bfc5e2edbdb0618d
2b5b9f68ace12b789b1371204754547021dcbf3e9df630e7e22b49ee56e05b8c
GET /_s/v4/app/6549ac0173e/css/min-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=24831
access-control-allow-origin: *
etag: W/"5742a34aaab2a5983c7c11cdeef1c0ee"
last-modified: Tue, 07 Nov 2023 03:18:37 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 635720
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800d884d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/v2/source/ladipagev3.min.js?v=1701507914972
200 OK 397 kB URL GET HTTP/2 w.ladicdn.com/v2/source/ladipagev3.min.js?v=1701507914972
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Size 397 kB (396756 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/source/ladipagev3.min.js?v=1701507914972 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
server: nginx
date: Sat, 02 Dec 2023 09:15:12 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Sun, 01 Dec 2024 09:15:12 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u5PkN-InkZggsIqE44VHzJrC-R4A4mdOxFMwQxysuZ1gqO1-3fuwrA==
age: 105233
X-Firefox-Spdy: h2
GET w.ladicdn.com/s600x350/5c7362c6c417ab07e5196b05/sd-20200923023339.png
0 B URL GET w.ladicdn.com/s600x350/5c7362c6c417ab07e5196b05/sd-20200923023339.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s600x350/5c7362c6c417ab07e5196b05/sd-20200923023339.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Mon, 16 Oct 2023 01:37:43 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Tue, 15 Oct 2024 01:37:43 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rZ0xxBwl7ig7Ax9pIJ-j8Z-ZotBIPgtBjb2F-H2QxQMKMKBHksoZIg==
age: 4193483
X-Firefox-Spdy: h2
GET w.ladicdn.com/s600x500/5c7362c6c417ab07e5196b05/88-20200923023541.png
0 B URL GET w.ladicdn.com/s600x500/5c7362c6c417ab07e5196b05/88-20200923023541.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s600x500/5c7362c6c417ab07e5196b05/88-20200923023541.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YDxGki_JlK99NK37aXYChlp9aG_Vcr0Y4l4DOxAvfsjBsjc_d3iQKw==
X-Firefox-Spdy: h2
GET w.ladicdn.com/s850x750/5ea845b95da1a2557f302daa/kinh_2_xin-removebg-preview-20231126111729-2t_ee.png
0 B URL GET w.ladicdn.com/s850x750/5ea845b95da1a2557f302daa/kinh_2_xin-removebg-preview-20231126111729-2t_ee.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s850x750/5ea845b95da1a2557f302daa/kinh_2_xin-removebg-preview-20231126111729-2t_ee.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QynoT94pCXkvyFLqHR9823BfgjlBD8RdGPi-v2eEevJdl7Qrfh-SFw==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-main.js
200 OK 121 B URL GET HTTP/2 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-main.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 3b41342f7e3be590563e8e3b5ff770c7
c9ca54d23ea78b320f080b76e22bb6b4e704d55f
ef04d89daeed55613a63a4af62c147ce86e4a7f22c8ce700dd6bdb11ab187e43
GET /_s/v4/app/6549ac0173e/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:08 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80044ecc56c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST va.tawk.to/v1/session/start
200 OK 1.0 kB URL POST HTTP/3 va.tawk.to/v1/session/start
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1112), with no line terminators
Hash 7cf68041b1c0b2e10ec17f86ef6830b7
0d51dcbbc394ddf9265d397f14e68dbbe347ab9a
ee737ce5d5090d571b8e1457e2ccc1553ea3cf4e14cfed0a5e187bc4ad59f862
POST /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.khotonghcm.com/
Content-Type: application/json; charset=utf-8
Content-Length: 201
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/json
x-served-by: visitor-application-preemptive-l88m
access-control-allow-origin: https://www.khotonghcm.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800a3e6c0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/_s/v4/app/6549ac0173e/css/bubble-widget.css
200 OK 14 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/css/bubble-widget.css
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (13521), with no line terminators
Hash 950518e32fd92957181f766f08d3cf98
9fe20c86b818d3576e9d70e6ed091964cb8b7427
2f56f47d64037d5aa3a96b50c840580e5549fee6f9fafff8af3d1821d189fa5c
GET /_s/v4/app/6549ac0173e/css/bubble-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=13594
access-control-allow-origin: *
etag: W/"ce7913b80c763449b3895d46419f7a6b"
last-modified: Tue, 07 Nov 2023 03:18:37 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: STALE
cf-cache-status: HIT
age: 561118
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800db85d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/s600x400/5c7362c6c417ab07e5196b05/sd-20200923023339.png
0 B URL GET w.ladicdn.com/s600x400/5c7362c6c417ab07e5196b05/sd-20200923023339.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s600x400/5c7362c6c417ab07e5196b05/sd-20200923023339.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 02:45:31 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 02:45:31 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _4geA5ZPcEm8zMA6tSNQT7AetdqJtQR6P-H3kc9b-nsrBfnJ7v3rNQ==
age: 42215
X-Firefox-Spdy: h2
GET w.ladicdn.com/s500x450/5c7362c6c417ab07e5196b05/6-20230721024256-xeduu.png
0 B URL GET w.ladicdn.com/s500x450/5c7362c6c417ab07e5196b05/6-20230721024256-xeduu.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s500x450/5c7362c6c417ab07e5196b05/6-20230721024256-xeduu.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HaeiPNw30GX7c3maztdMyhVnr4U9P5b0ZctaYbKlWHjS9Otr8aiHJQ==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-f1565420.js
200 OK 11 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-f1565420.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (10992), with no line terminators
Hash e66b5b5406f1411c203d6a14b3268446
16d128903623ff99706f40ec7a35d85d44caff21
1221dfd515b54f32dc7d169eb8c5bbc892d85c310ef286aa9b80eeeef2cf9643
GET /_s/v4/app/6549ac0173e/js/twk-chunk-f1565420.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"e66b5b5406f1411c203d6a14b3268446"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 980270
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800c9fd30b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/s1440x1010/5c7362c6c417ab07e5196b05/ffff-20230720032441-_f6gc.jpg
0 B URL GET w.ladicdn.com/s1440x1010/5c7362c6c417ab07e5196b05/ffff-20230720032441-_f6gc.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s1440x1010/5c7362c6c417ab07e5196b05/ffff-20230720032441-_f6gc.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g5uIynv2DpIs_gNl9RiOhVjfhwC6Yb7WSl5OQGTPB6FEuUUjYHPwqA==
X-Firefox-Spdy: h2
GET w.ladicdn.com/s400x400/5c7362c6c417ab07e5196b05/3-20230721024255-nquiq.png
0 B URL GET w.ladicdn.com/s400x400/5c7362c6c417ab07e5196b05/3-20230721024255-nquiq.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s400x400/5c7362c6c417ab07e5196b05/3-20230721024255-nquiq.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 2P9Bk6AtfgmN_EGJfCisTxHSB0F-GtuBWhtQy0-avyqL1aYUmdG9jA==
X-Firefox-Spdy: h2
GET vsa27.tawk.to/s/?k=656c90b43a6a4684578ad6e6&cver=0&pop=false&asver=12&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NTUwYTYwM2NlYzZhOTEyODIwZjBjYTIiLCJ2aWQiOiI2NTUwYTYwM2NlYzZhOTEyODIwZjBjYTItSnpkSmpqaXlONlhVd1Aza05naW9TIiwic2lkIjoiNjU2YzkwYjQzYTZhNDY4NDU3OGFkNmU2IiwiaWF0IjoxNzAxNjEzNzQ5LCJleHAiOjE3MDE2MTU1NDksImp0aSI6Ikh6SXFNcXhhYmQ3UGxYV1hvUGpZWCJ9.WDQofmROLe059qCdvuZi38ZNig_J8QamALwQLWOYmePd4RfVxLsaZ8a1VUrsJ2fVPPeCU0e7AETx8TfRjF9Tbw&EIO=3&transport=websocket&__t=Omm5LYf
101 Switching Protocols 0 B URL GET HTTP/1.1 vsa27.tawk.to/s/?k=656c90b43a6a4684578ad6e6&cver=0&pop=false&asver=12&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NTUwYTYwM2NlYzZhOTEyODIwZjBjYTIiLCJ2aWQiOiI2NTUwYTYwM2NlYzZhOTEyODIwZjBjYTItSnpkSmpqaXlONlhVd1Aza05naW9TIiwic2lkIjoiNjU2YzkwYjQzYTZhNDY4NDU3OGFkNmU2IiwiaWF0IjoxNzAxNjEzNzQ5LCJleHAiOjE3MDE2MTU1NDksImp0aSI6Ikh6SXFNcXhhYmQ3UGxYV1hvUGpZWCJ9.WDQofmROLe059qCdvuZi38ZNig_J8QamALwQLWOYmePd4RfVxLsaZ8a1VUrsJ2fVPPeCU0e7AETx8TfRjF9Tbw&EIO=3&transport=websocket&__t=Omm5LYf
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?k=656c90b43a6a4684578ad6e6&cver=0&pop=false&asver=12&tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2NTUwYTYwM2NlYzZhOTEyODIwZjBjYTIiLCJ2aWQiOiI2NTUwYTYwM2NlYzZhOTEyODIwZjBjYTItSnpkSmpqaXlONlhVd1Aza05naW9TIiwic2lkIjoiNjU2YzkwYjQzYTZhNDY4NDU3OGFkNmU2IiwiaWF0IjoxNzAxNjEzNzQ5LCJleHAiOjE3MDE2MTU1NDksImp0aSI6Ikh6SXFNcXhhYmQ3UGxYV1hvUGpZWCJ9.WDQofmROLe059qCdvuZi38ZNig_J8QamALwQLWOYmePd4RfVxLsaZ8a1VUrsJ2fVPPeCU0e7AETx8TfRjF9Tbw&EIO=3&transport=websocket&__t=Omm5LYf HTTP/1.1
Host: vsa27.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www.khotonghcm.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UsQNiJBFdinng/TVRc4JIw==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Date: Sun, 03 Dec 2023 14:29:09 GMT
Connection: upgrade
upgrade: websocket
sec-websocket-accept: kAwF0beIln4RQuxupYNC/WU/0ro=
sec-websocket-extensions: permessage-deflate
strict-transport-security: max-age=0; includeSubDomains; preload
CF-Cache-Status: DYNAMIC
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 82fc800d4f38b524-OSL
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-vendor.js
200 OK 83 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-vendor.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6549ac0173e/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:08 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"ce3014b09c6dfbd6f92bc585fd840580"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80044ee056c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-common.js
200 OK 220 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-common.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size 220 kB (219989 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6549ac0173e/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:08 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"72cdc9849868f49ab20a7a4a581454f9"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80047f0756c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
200 OK 303 kB URL GET HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Size 303 kB (302554 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: br
accept-ranges: bytes
date: Sun, 03 Dec 2023 14:29:09 GMT
age: 21036643
x-served-by: cache-fra-eddf8230136-FRA, cache-bma1662-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 41275
X-Firefox-Spdy: h2
GET w.ladicdn.com/s650x650/5ea845b95da1a2557f302daa/them_tieu_de_5_-removebg-preview-2-20231119190002-tro2x.png
0 B URL GET w.ladicdn.com/s650x650/5ea845b95da1a2557f302daa/them_tieu_de_5_-removebg-preview-2-20231119190002-tro2x.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s650x650/5ea845b95da1a2557f302daa/them_tieu_de_5_-removebg-preview-2-20231119190002-tro2x.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 02:45:24 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 02:45:24 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: JxvC1zGFNDKg6DSEPf3EvtTUmCuk7lPtcTUre7eDrWUXJWzsiH06fg==
age: 42222
X-Firefox-Spdy: h2
GET w.ladicdn.com/v2/source/ladipage.formdata.min.js?v=1701507914972
200 OK 56 kB URL GET HTTP/2 w.ladicdn.com/v2/source/ladipage.formdata.min.js?v=1701507914972
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/source/ladipage.formdata.min.js?v=1701507914972 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
server: nginx
date: Sat, 02 Dec 2023 09:15:11 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Sun, 01 Dec 2024 09:15:11 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L17bwIGTF4_liLOJ4eqGCmJmTwJgqGEM6VipE5ivZauDP4gdMwCbAg==
age: 105235
X-Firefox-Spdy: h2
GET w.ladicdn.com/s500x450/5c7362c6c417ab07e5196b05/1-20230721024255-ubc-s.png
0 B URL GET w.ladicdn.com/s500x450/5c7362c6c417ab07e5196b05/1-20230721024255-ubc-s.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s500x450/5c7362c6c417ab07e5196b05/1-20230721024255-ubc-s.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: EUEWnl_NoyWocxEmApeqh8gn88oak3FrBcXM-jp2L0eQo30EZn2E2A==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-9294da6c.js
200 OK 18 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-9294da6c.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (17930), with no line terminators
Hash 751a8c2fa870d0a6b7d3a4eb10f7319b
898d17e4c7d3f9fcadebbc8d2e47c071fe23697f
fe18d700aa574127472795bb7369624cb90ca55f62d66b548eb7df53d2a46a74
GET /_s/v4/app/6549ac0173e/js/twk-chunk-9294da6c.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"751a8c2fa870d0a6b7d3a4eb10f7319b"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 811968
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800c9fcc0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-24d8db78.js
200 OK 110 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-24d8db78.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65464)
Size 110 kB (110194 bytes)
Hash 519cd8dd510e341d4270a4d8445b203c
f6b73cb9a7c9d057e02fb346c1cb2d9aaf629e1c
793d0a6a56e7f7bec01bfab95ae6c1bba6a7a4d15f5c24e85143cf6730612b76
GET /_s/v4/app/6549ac0173e/js/twk-chunk-24d8db78.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"519cd8dd510e341d4270a4d8445b203c"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 801648
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800cafe30b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET i.pinimg.com/736x/63/36/b0/6336b0195426c8d26aedc5365bfac67f.jpg
200 OK 66 kB URL GET HTTP/2 i.pinimg.com/736x/63/36/b0/6336b0195426c8d26aedc5365bfac67f.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x852, components 3\012- data
Hash 712409d2d29c93c03bbd3d03c37e3bd8
8fbc24c404e7d8e1dc781c6879f754b3c1eb4fb7
f26e85ead8e4e37cd1704e64f09e436acba099bd9d4b95e16a29be400c6b9217
GET /736x/63/36/b0/6336b0195426c8d26aedc5365bfac67f.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: "712409d2d29c93c03bbd3d03c37e3bd8"
content-type: image/jpeg
cache-control: max-age=31536000, immutable
accept-ranges: bytes
vary: Origin
x-cdn: fastly
alt-svc: h3=":443";ma=600
date: Sun, 03 Dec 2023 14:29:10 GMT
content-length: 65789
X-Firefox-Spdy: h2
GET w.ladicdn.com/s550x450/5c7362c6c417ab07e5196b05/sdgsrr-20230720025407-2ceh3.png
0 B URL GET w.ladicdn.com/s550x450/5c7362c6c417ab07e5196b05/sdgsrr-20230720025407-2ceh3.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s550x450/5c7362c6c417ab07e5196b05/sdgsrr-20230720025407-2ceh3.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 02:45:31 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 02:45:31 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Xt6AGFeXFyLQlmNB5A6-2Lb2tvK0ve3e5cpxGgzTAWsffYqE6WbIwg==
age: 42214
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Montserrat:wght@400;700&family=Barlow+Condensed:wght@400;700&family=Roboto:wght@400;700&family=Oswald:wght@400;700&display=swap
200 OK 15 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Montserrat:wght@400;700&family=Barlow+Condensed:wght@400;700&family=Roboto:wght@400;700&family=Oswald:wght@400;700&display=swap
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 578a830fd94ca22960fe5f1fd61a61de
1e46e8ecba91dd8aac4e18fb855b53193e06c9da
a27da8365b1c1e567b7cfd9412e072ca663fc608714cf368e95d284ed77b49b8
GET /css2?family=Montserrat:wght@400;700&family=Barlow+Condensed:wght@400;700&family=Roboto:wght@400;700&family=Oswald:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 03 Dec 2023 14:29:05 GMT
date: Sun, 03 Dec 2023 14:29:05 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET w.ladicdn.com/source/notify.svg?v=1.0
200 OK 1.5 kB URL GET HTTP/2 w.ladicdn.com/source/notify.svg?v=1.0
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1695), with no line terminators
Hash a6ef83a9621e490bc7674e224777934b
819f5b0b0cd845d95ef6aa7c96843c10ec404aeb
833bee4a65715725e5a5feb7249969b60b4d799d12f9da911a110a6ff74b7a40
GET /source/notify.svg?v=1.0 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
server: nginx
date: Mon, 16 Oct 2023 01:25:27 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Tue, 15 Oct 2024 01:25:27 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: OV3ePyxGH5TMcD9U35oyeF5vVZwrOkG2_2H0rFQ8-Us3v9iAiVdqpQ==
age: 4194218
X-Firefox-Spdy: h2
GET w.ladicdn.com/s750x550/5c7362c6c417ab07e5196b05/sdgsrr-20230720025407-2ceh3.png
0 B URL GET w.ladicdn.com/s750x550/5c7362c6c417ab07e5196b05/sdgsrr-20230720025407-2ceh3.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s750x550/5c7362c6c417ab07e5196b05/sdgsrr-20230720025407-2ceh3.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DxMKRgG1EuRDpxQeqPSrLKAWR18P_F_NTaOhx7pCjJ10pdqxcBQxMA==
X-Firefox-Spdy: h2
GET w.ladicdn.com/5ea845b95da1a2557f302daa/mau-chu-1-769-x-544-px-20231125080352-diuma.jpg
0 B URL GET w.ladicdn.com/5ea845b95da1a2557f302daa/mau-chu-1-769-x-544-px-20231125080352-diuma.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /5ea845b95da1a2557f302daa/mau-chu-1-769-x-544-px-20231125080352-diuma.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.khotonghcm.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 03 Dec 2023 14:29:08 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:08 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J4DUNR4vfFTDIUK2azH0AeukOZJSvxK-Cy-hGVvOq0_vJXz3QHW3yA==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b9454.js
200 OK 535 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-2d0b9454.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (557), with no line terminators
Hash 3f4a6312d60391bda06462d7321ffcdc
9f09295297840a36d2ac95344b39b0af1a729f82
28d61df22c079e51c45b6f87db516f03cb85cf3f2c3a970be369944c3f91bcf1
GET /_s/v4/app/6549ac0173e/js/twk-chunk-2d0b9454.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"c506281367048d4a134c9affbc68c8c6"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 896131
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800cafe20b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/s600x550/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png
0 B URL GET w.ladicdn.com/s600x550/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s600x550/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: CDIENaniiWzv0k76AYSDa_sQdMj9pWqyKXEW8ndweFRRhYaQJe2cyQ==
X-Firefox-Spdy: h2
GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/88-20200923023541.png
0 B URL GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/88-20200923023541.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s450x400/5c7362c6c417ab07e5196b05/88-20200923023541.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Thu, 23 Nov 2023 12:57:13 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Fri, 22 Nov 2024 12:57:13 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vgWcQop-pyyTDe54JSX82AmWoSdPRTQbXRka7wxQBBAVFkuLtih17A==
age: 869513
X-Firefox-Spdy: h2
GET w.ladicdn.com/s500x400/5c7362c6c417ab07e5196b05/fgjfghjdty-20200923023541.png
0 B URL GET w.ladicdn.com/s500x400/5c7362c6c417ab07e5196b05/fgjfghjdty-20200923023541.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s500x400/5c7362c6c417ab07e5196b05/fgjfghjdty-20200923023541.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Mon, 16 Oct 2023 01:45:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Tue, 15 Oct 2024 01:45:54 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nGdeBwjAgk40Yyw7TQ0EieiLHS9lZ80ZxMALzq7b1NKAu-xQEOuzyA==
age: 4192992
X-Firefox-Spdy: h2
GET docs.google.com/spreadsheets/d/1wL560GB0APHuejpOlbHk-9cvhtHaWbyQhoBQtWUCKE0/gviz/tq?tqx=out:json
200 OK 3.8 kB URL GET HTTP/2 docs.google.com/spreadsheets/d/1wL560GB0APHuejpOlbHk-9cvhtHaWbyQhoBQtWUCKE0/gviz/tq?tqx=out:json
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type Unicode text, UTF-8 text, with very long lines (4220), with no line terminators
Hash 06b98b281c848883060026cfbdb8613c
6ec1f26b123fec0a88cc1bef74f32a481aba9e9b
b13603c3c505ded1f33b3173a51572d29995b403d8cb61ee6838a8c4707ec26d
GET /spreadsheets/d/1wL560GB0APHuejpOlbHk-9cvhtHaWbyQhoBQtWUCKE0/gviz/tq?tqx=out:json HTTP/1.1
Host: docs.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
x-robots-tag: noindex, nofollow, nosnippet
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 03 Dec 2023 14:29:06 GMT
content-disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt
content-encoding: gzip
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
access-control-allow-origin: https://www.khotonghcm.com
access-control-expose-headers: Cache-Control,Content-Disposition,Content-Encoding,Content-Length,Content-Type,Date,Expires,Pragma,Server,Transfer-Encoding
content-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt, base-uri 'self';object-src 'self';report-uri https://docs.google.com/spreadsheets/cspreport;script-src 'nonce-PuOHRlXLVX3JwwZWXF8ixw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
reporting-endpoints: default="/spreadsheets/d/1wL560GB0APHuejpOlbHk-9cvhtHaWbyQhoBQtWUCKE0/web-reports?context=eJwV1Xl4zVcex_Fvzu_UtJYKEtsQjIiJJUXsWa4rP9GMWPLQnEPU0FqGICrCjBZ5UspjaYsQtCkZQi01E6bGFlUpxQyTkVLzGEE0dtGbzCWJbd79I8_NXXLP8vl-Xql7Oii_vxXZFuBciIzR2wcZ6Z1oJXhRlUpyrLSYaGRAmjhnX_Ho8QNj9NCHRspaWIlZZ-TxFJ9K3D1Az_Yb-SzU1Q_bVasn8-N0q8NGcvYZuT3ByMveVv71NFmSWxnJHmVkVh8jm7Y9UQVpRkZ9aETmWCn3GRmS9VxtWm8k4WdX5zc38u4xI_cO-9WXY31q6HZXj_Zaecy6RzYYKYyuVuNjrDQZbaQm3qvzymJ17_5PVNcQI0s_eK4iNz1Tl4YZ2VFlJDTCyrXgf0vrn8SZ8LGRw_WsLP_eSHWCEU9dK4mZfvUkwMin3ax8weuvbzSyvjt_91cjB1KNHGpkxJcTowMuGdnCms5pI61bG5kw3croWVbaJPO5r56rwcOsdFrkU6f5zJyeflUcHqN3bzNilzrO9jWDdPeZXm3mWem4olp1K2D9W0aKufcjDcX5uq-RYJ-r694QJ5LH_KIYHcs9vN3GSPd22jlMJg-vK6eCXNZEGBldGKfrTgpwBk_26tJvjCSOtfJov6tNeytPM4zsr2-kXQ8jZ6YY-d9Zx0maZqXLLY9u-46RoC1GRlRE69dZO7LcyFf1yC7SyCV-D8p29bK9nHmlR6fXcFcfcLezrby3wK_61Bop2WGk-StGaqdYiTjj0QWsW1FoJG8C8_PA1QcGuVq9RnbdtXPnbpTeRh5LtJX8vlZCGhsxjWvV_XzlHA2xUkPm89ZUqpQ6Rkp7xOorP9SoHPZRyb49o634h0frecvidYMuRjYmVqkMsv4-yci0flZ--J0R_zwjY2eLs60Xe-_CGtFGqiL8qtuXrm76a2bLdXXBtAE6O7tKDTlqZM5UKwmf8jo5r2K_WwON9OxppXqRkUBm9coox-mVY6RVcpU6wV1EhpJVsZF62nFKyHn4SMc5SSbzLovT6w9W1s6N03-s51d3Mo00Yo_P90Tr744b2fyqkfKIKvXf7UYanlNO2Arm_qhXp-yL0a3Ze2UzcdZy_pIMK527su78GnW3Hx0b-UIN6-3Vy1q9VHHMySfealUSHKdnpD5Rve5F6eMtjXzEXLbuOFCP3WpkxlGPTo22EtDB1QvGWZkeaeXt1YP0whGO800zI-PI5btgI-8vrFbXxxgJp08fbR6k8z3Ruo81cuo_3L-1Ek83c6f51J8bRunyrFp1bHicDmfWVzatUf2Ka5Q70crFR64uz_CpT-jLjp_IK8tI-yFWkv5BX8gvdK6VZvSkC71NCzOy829GjvDZx4uN3OljpX-n-yr3nJFb6cpJ90fpYZOrVVa6q98LFKfkCPNyM07fvFGp2pUauVrkU98uNzKxPX7Q1w28dpv5H9rOyqm1cXpHPFlXROk1Z2vUX5gBl46mZPlV7mQjLV0r0wKtnGbPO2fG6cT3rWzJjtZzqz26VctYvYO5er7Qq8PkpTrGPpeR5_6aZIm4YeRZWyuFHiNvcY63XqebHisPMapxuJH-mVYubalVWeFWvq3jV1dSfSo9JEqrSbF6Zdkz9Yj7enOVkfycSpU22Uqt9eiFS4w87UR_mbMlGJQ3gL3sH6jP0cWEBnQx9aW6wNk6klFx5DM1qonj1NDNinFGptL7dfSzemuAcxaT13P-MLrfAJO9mPwaJvfF5BOYbDE5BpMvYGNXTK7AZBeT38HkFZhcjsmPMLk-Jv-Ix4_weDEOr8HgPM7nYvDP6WRMH-MweDkGe7mXkcxLGf5uwd8Y_E3A3zP0fTf-fo2_I36xkE768Hcj_kbg7yLs7Yy9p7A3B3uDOHcw7iaR4y7cnY-vbzAXLuZm0sOPef6C7wvC2u3keAtnfRexmO-u4r0kjE2ge3vxtQ--_gZfD_LedHy92M2vPsPXofj6Bb6G4-tgetMGX9vi6x18Pc4d7sfXBpiqsLUzj7nY2pvzhePqLu61DFdLudskTP1TWKU6Wd9xzmNqNGe9hqmDMfU-pgbi0iE8fYCnXjIMxVNNXm9i6Qt63R4zTvHzeYc4vQBDCzD0XQzdhaGrMXQqhnbE0CIMvYefYfiZxxql9HQ1HlXfd_nf6-oU7LyOnRm4mY2bwzHzJmbuwYy7ZJSGmZfwsgQv32Ce1Unl3DjIGhg5iTz-jpFj2E8RRl6jH6Mw8hQ-3sfG32Kji4s7cXElLkbh4kRc7IeLLnksYB-hmHgHEwUTSzCxAyYGYeI-ztYeE5thooOJReQyGBMLucs0TOyAiSswcRYmXsZEPx7uxcOrWPhPLPwVFjbFwsVYOAILG7DH21j4IecqwsISHOyLgfEYmImBkWS5FAOLMHASBnbFwGDsm4R7KbjnY7Zn4F4y7g3Fvbm4N4y7TMe7YrxrwfwuxLtcvOuIdwfwbgrercO6TVh3Fev2Yl0LursY67pjXU_cOId1V7FuEXOag3Xnsa4J1nmxLgjnxuHGRnzbzfu38O0yvvXAt1X4VopvqfgWj2-z8W0qvhXhWwq-XcG3RvT9Ir4V4NuPdGIZz2Nw7Riu5eBaLq4tx7XN5NaTPozEtVW4VhfXxuDaeO4zD9eicW0Drs3EtSBcy_nl_yWuheBaJnmE4NkDPNuDZ8dx7Co974Rh5zFsNoYdwrASDEvFsNqJsXoxhl3jHvpiWC6G_R7DKjFsJoZl0OHV2LUBuwqZey92NceuE-z9NG4l4tZdelCKW43rv7ovb9_uOoEHy55-rv4Pvj6JaQ"
x-xss-protection: 1; mode=block
server: GSE
set-cookie: COMPASS=apps-spreadsheets=CmUACWuJVzpcvItLpnATy0g8orsGumdIJWjAEMxYj_E4Rj308uf5fe4-qzpZlXsGZnc4l_CvKLMC1-evLpE3ESpylR3v8m4aX7yuNWGrBrYMveK6n4xqvM5deO1dAeR_KLUOewHz2BDCvbKrBhp2AAlriVc35hY1cp0ASQlnE-LjnbdO1xk8KeXneYttI2C1xOH_zZ9EWcqLZRzgYNqReVLQWX3FwvT2huToKKUsvfR0ElBX6s3ngF0ZkJAZDqKsA48m2lKtwJPBUOzr9J-wziT1gr_l0t_xMOn8SdfYIHHZG7YUNw==; Domain=.docs.google.com; Expires=Sun, 03-Dec-2023 15:29:06 GMT; Path=/spreadsheets/d/1wL560GB0APHuejpOlbHk-9cvhtHaWbyQhoBQtWUCKE0; Secure; HttpOnly; SameSite=none
NID=511=R7BD8_Ipl53jr8F8DRhTdiACLgoMQCxAx-y_3x786ZJUMwOkB41UGG2s8sG0t-mhhoTMT9U9OCwbDdGAuiv4uEw7Ds9twepovx_vTwif-QBAij7TQ0DI-Lup1352B_gjGCBk_DMQU4mstFivJGEsE6dFZhN7gJ58unW_baYzvAk; expires=Mon, 03-Jun-2024 14:29:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
x-l2-request-path: l2-managed-6
X-Firefox-Spdy: h2
OPTIONS a.ladipage.com/event
200 OK 0 B IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjecta.ladipage.com
Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D
ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,ladi_camp_form_submit,ladi_camp_id,ladi_camp_name,ladi_camp_origin_url,ladi_camp_page_view,ladi_camp_target_url,ladi_camp_type,ladi_client_id,ladi_form_submit,ladi_page_view
Referer: https://www.khotonghcm.com/
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:06 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-vendors.js
200 OK 217 kB URL GET HTTP/2 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-vendors.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Size 217 kB (217124 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6549ac0173e/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 03 Dec 2023 14:29:08 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"86b32a04921a039ace69980bacd1b639"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80047f0656c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
OPTIONS va.tawk.to/v1/session/start
200 OK 0 B URL OPTIONS HTTP/3 va.tawk.to/v1/session/start
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/session/start HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.khotonghcm.com/
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:08 GMT
x-served-by: visitor-application-preemptive-snmn
access-control-allow-origin: https://www.khotonghcm.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800878a30b45-OSL
alt-svc: h3=":443"; ma=86400
GET cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
200 OK 303 kB URL GET HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Size 303 kB (302554 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: br
accept-ranges: bytes
date: Sun, 03 Dec 2023 14:29:09 GMT
age: 21036643
x-served-by: cache-fra-eddf8230136-FRA, cache-bma1662-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 41275
X-Firefox-Spdy: h2
GET w.ladicdn.com/s400x450/5ea845b95da1a2557f302daa/giadungplaza-3-20231102030253-v0vx7.png
0 B URL GET w.ladicdn.com/s400x450/5ea845b95da1a2557f302daa/giadungplaza-3-20231102030253-v0vx7.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s400x450/5ea845b95da1a2557f302daa/giadungplaza-3-20231102030253-v0vx7.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: psKm6ikWr__eBuD3TgQgYnbabxUL_-Ksd34fCUH4WX9uQHytUR3V-A==
X-Firefox-Spdy: h2
GET w.ladicdn.com/s1050x1050/653f3ad25e0e24001214dea7/mau-tre-_-removebg-preview-20231122084347-hlnqj.png
0 B URL GET w.ladicdn.com/s1050x1050/653f3ad25e0e24001214dea7/mau-tre-_-removebg-preview-20231122084347-hlnqj.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s1050x1050/653f3ad25e0e24001214dea7/mau-tre-_-removebg-preview-20231122084347-hlnqj.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xcXV0tIIMePBypk3MNMEYaABKvvHPi73zhUCDmWq4oscvGQ336kDog==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-app.js
200 OK 151 B URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-app.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 04a9862af6efaf787bc8fb8e99ba6987
a57bb8f258eb1a60dc3b288a608ad8ef9fbecef3
ecc74c329a700e3e6ca29aed5ffe3c166cf39670c8b11573fa7f837f79a71b5c
GET /_s/v4/app/6549ac0173e/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:08 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80048f0b0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/_s/v4/app/6549ac0173e/css/max-widget.css
200 OK 78 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/css/max-widget.css
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d778223a957b2d3cdc540ff6547c0bfd
6fea621f551d26661f3a87c5d56d66b15afd0aca
799596c2833003b4bd92b1454ba52de29fb4fd07edb07648d64e567b0d293f85
GET /_s/v4/app/6549ac0173e/css/max-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=78180
access-control-allow-origin: *
etag: W/"0ab357443b798b4a1db6c4f22b1590f4"
last-modified: Tue, 07 Nov 2023 03:18:37 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
age: 721447
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800e28910b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png
0 B URL GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s450x400/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: AVON2dr0c6JvauPfXOyVb6JfJ8t7i1ZmfDTesq8zbF4PqU9CexNRNQ==
X-Firefox-Spdy: h2
GET w.ladicdn.com/s600x500/5c7362c6c417ab07e5196b05/5-20230721024256-he82h.png
0 B URL GET w.ladicdn.com/s600x500/5c7362c6c417ab07e5196b05/5-20230721024256-he82h.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s600x500/5c7362c6c417ab07e5196b05/5-20230721024256-he82h.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i_4L6GhtxRWVPsUhMov0XQnJvrYGz_C8v1qS_2eAzFf1EMZ3p7a__A==
X-Firefox-Spdy: h2
GET w.ladicdn.com/s550x500/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png
0 B URL GET w.ladicdn.com/s550x500/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s550x500/5c7362c6c417ab07e5196b05/4-20230721024256-n7pel.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 03 Dec 2023 14:29:06 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 02 Dec 2024 14:29:06 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tATXLHJZ2sqlUTy7XfdtUB7Unw46YlvkELhexU0FLnSpXprU2fOCsA==
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-runtime.js
200 OK 2.3 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-runtime.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (2349), with no line terminators
Hash 08b902c691d4caf60c10d21ed6618c8f
50e650828e6a53bc1b074f5838d0f3eb338a81db
58775eee253402af6ada3b2dcff3c6bbba198b18ba11b00653a8dcc8d478875b
GET /_s/v4/app/6549ac0173e/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:08 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"2369bd11bd41e47e53691438c8e45c5b"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80048f0a0b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET embed.tawk.to/_s/v4/app/6549ac0173e/languages/vi.js
200 OK 18 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/languages/vi.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_s/v4/app/6549ac0173e/languages/vi.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"d81fc1e3435374600ca4e2b12286a82b"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: MISS
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 804810
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800c4f8d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg
0 B URL GET w.ladicdn.com/s450x400/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s450x400/5c7362c6c417ab07e5196b05/jjjjjjj-20200923024146.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Mon, 16 Oct 2023 01:55:32 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Tue, 15 Oct 2024 01:55:32 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vXU419ehb1gcCCLTlMXtwZDzYho32LBEx-V4rDuq0PJ6-mVxlTlLag==
age: 4192414
X-Firefox-Spdy: h2
GET embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-48f3b594.js
200 OK 19 kB URL GET HTTP/3 embed.tawk.to/_s/v4/app/6549ac0173e/js/twk-chunk-48f3b594.js
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (18850), with no line terminators
Hash 47db95af2c62c97e1a27f8588673834d
649bc52740e10b8e4b4f6f81bf35411b3627935e
95e02c2271f74519b9f70eb8dfcad4735bcd7ac485b0bfcf953fdc246bde4c86
GET /_s/v4/app/6549ac0173e/js/twk-chunk-48f3b594.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.khotonghcm.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:09 GMT
content-type: application/javascript
last-modified: Tue, 07 Nov 2023 03:18:38 GMT
etag: W/"47db95af2c62c97e1a27f8588673834d"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: STALE
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
age: 641011
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc800cafdd0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST va.tawk.to/log-performance/v3
200 OK 5 B URL POST HTTP/3 va.tawk.to/log-performance/v3
IP
Requested by https://www.khotonghcm.com/kinhmatnangtamdangcap
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint61:E8:BF:90:FC:F6:AA:AD:96:84:8C:EE:A7:5A:5E:1A:AA:60:57:E3
ValidityFri, 28 Apr 2023 00:00:00 GMT - Sat, 27 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 38a8a3e3b4b6a6e4f295b2e0f899b1f0
474f5fac3d23afbaf16c5a31c98dfcd956e4c186
7652c7891ed06bce4174ab00a6ee9721daf6a4286929213ecb7daf42cd866615
POST /log-performance/v3 HTTP/1.1
Host: va.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.khotonghcm.com/
Content-Type: application/json; charset=utf-8
Content-Length: 95
Origin: https://www.khotonghcm.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 03 Dec 2023 14:29:10 GMT
content-type: text/html; charset=utf-8
x-served-by: visitor-application-preemptive-8872
access-control-allow-origin: https://www.khotonghcm.com
access-control-allow-credentials: true
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: content-type,x-tawk-token
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: DYNAMIC
x-content-type-options: nosniff
server: cloudflare
cf-ray: 82fc80128b080b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
52.220.48.161
104.22.24.131
42.112.37.34
142.250.74.106
151.101.244.84