Fct.vn

cache-control: public, max-age=0, must-revalidate
content-type: text/plain
date: Thu, 10 Sep 2026 23:59:48 GMT
location: https://www.fct.vn/
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-id: fra1::8xs8v-1789084788363-506a03cdd324

HTTP/2 307 
cache-control: public, max-age=0, must-revalidate
content-security-policy: default-src 'self';    script-src 'self' 'unsafe-eval' 'unsafe-inline' https://challenges.cloudflare.com https://cdn.jsdelivr.net;    style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net;    img-src 'self' blob: data: https://www.google.com https://*.googleapis.com https://*.gstatic.com https://cdn.jsdelivr.net https://images.unsplash.com;    font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net;    object-src 'none';    base-uri 'self';    form-action 'self';    frame-ancestors 'none';    frame-src 'self' https://www.google.com https://challenges.cloudflare.com;    child-src 'self' https://www.google.com https://challenges.cloudflare.com;    connect-src 'self' https://challenges.cloudflare.com https://*.cloudflare.com https://www.google.com https://*.googleapis.com https://cdn.jsdelivr.net;    media-src 'self';    manifest-src 'self';    worker-src 'self';    upgrade-insecure-requests;    block-all-mixed-content;
content-type: text/plain
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
date: Thu, 10 Sep 2026 23:59:48 GMT
location: /vi/
permissions-policy: camera=(), microphone=(), geolocation=(), payment=()
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-vercel-id: fra1::mw8q9-1789084788684-7f789d9a7904
x-xss-protection: 1; mode=block

HTTP/2 308 
cache-control: public, max-age=0, must-revalidate
content-type: text/plain
date: Thu, 10 Sep 2026 23:59:48 GMT
location: /vi
refresh: 0;url=/vi
server: Vercel
strict-transport-security: max-age=63072000
x-vercel-id: fra1::mw8q9-1789084788742-394c3943ab1e

HTTP/2 200 
access-control-allow-origin: *
age: 311441
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-security-policy: default-src 'self';    script-src 'self' 'unsafe-eval' 'unsafe-inline' https://challenges.cloudflare.com https://cdn.jsdelivr.net;    style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net;    img-src 'self' blob: data: https://www.google.com https://*.googleapis.com https://*.gstatic.com https://cdn.jsdelivr.net https://images.unsplash.com;    font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net;    object-src 'none';    base-uri 'self';    form-action 'self';    frame-ancestors 'none';    frame-src 'self' https://www.google.com https://challenges.cloudflare.com;    child-src 'self' https://www.google.com https://challenges.cloudflare.com;    connect-src 'self' https://challenges.cloudflare.com https://*.cloudflare.com https://www.google.com https://*.googleapis.com https://cdn.jsdelivr.net;    media-src 'self';    manifest-src 'self';    worker-src 'self';    upgrade-insecure-requests;    block-all-mixed-content;
content-type: text/html; charset=utf-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
date: Thu, 10 Sep 2026 23:59:48 GMT
etag: W/"a41b2489007a9f2419682a7d497eecf2"
permissions-policy: camera=(), microphone=(), geolocation=(), payment=()
referrer-policy: strict-origin-when-cross-origin
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-content-type-options: nosniff
x-frame-options: DENY
x-matched-path: /vi
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-permitted-cross-domain-policies: none
x-vercel-cache: HIT
x-vercel-id: fra1::mw8q9-1789084788766-0d6616350952
x-xss-protection: 1; mode=block