| zerossl.ocsp.sectigo.com/ |  104.18.38.233 | | 728 B |
URL zerossl.ocsp.sectigo.com/ IP104.18.38.233:0
Hash40759e81211dd33dcb27c0f6b2b6f66d 712386504997159b2ebbf71b64d8b6395d283d7e 6577a710cd400d284c4bdeeb2f2b44fa1fbb603dd1c1d6d8b41139ed58dbad43
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 14 Nov 2023 06:54:26 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Sun, 12 Nov 2023 06:19:03 GMT
Expires: Sun, 19 Nov 2023 06:19:02 GMT
Etag: "712386504997159b2ebbf71b64d8b6395d283d7e"
Cache-Control: max-age=429275,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 825d57d8b91856c7-OSL
|
|
| www.googletagmanager.com/gtag/js?id=UA-142501317-5 |  142.250.74.168 | 200 OK | 69 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-142501317-5 IP142.250.74.168:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint3B:1D:9C:59:AC:F8:2F:47:8A:C6:AE:4F:88:F0:8D:84:C7:6A:47:DA ValidityMon, 16 Oct 2023 08:02:30 GMT - Mon, 08 Jan 2024 08:02:29 GMT
File typeASCII text, with very long lines (4179) Hash3f05253f70861b51ac4d87bff150113c b3c962d53323d9df73bc2f717f8cec48809d1423 ca884041596038a0d2a1ce381c05f1bb363993d713ea8cfb7144e93e644b9027
GET /gtag/js?id=UA-142501317-5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 14 Nov 2023 06:54:27 GMT
expires: Tue, 14 Nov 2023 06:54:27 GMT
cache-control: private, max-age=900
last-modified: Tue, 14 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-142501317-5 | 142.250.74.168 | 200 OK | 69 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-142501317-5 IP142.250.74.168:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint3B:1D:9C:59:AC:F8:2F:47:8A:C6:AE:4F:88:F0:8D:84:C7:6A:47:DA ValidityMon, 16 Oct 2023 08:02:30 GMT - Mon, 08 Jan 2024 08:02:29 GMT
File typeASCII text, with very long lines (4179) Hashc389f4a878033e8bac94518957d0d567 4c0db779283e81e41530e2c513ff8fd2d5a7593f 8ac83f0858b5e4adbba984a6afbf328f6e3cf588d2ca46207c6478e8c1187774
GET /gtag/js?id=UA-142501317-5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 14 Nov 2023 06:54:27 GMT
expires: Tue, 14 Nov 2023 06:54:27 GMT
cache-control: private, max-age=900
last-modified: Tue, 14 Nov 2023 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68598
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-431CC16XJX&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 81 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-431CC16XJX&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint3B:1D:9C:59:AC:F8:2F:47:8A:C6:AE:4F:88:F0:8D:84:C7:6A:47:DA ValidityMon, 16 Oct 2023 08:02:30 GMT - Mon, 08 Jan 2024 08:02:29 GMT
File typeASCII text, with very long lines (5955) Hash06349da5ca86aae9cc616df4a0f3f995 69e89a361b43115d173d58336c717115a7bc8588 07b8093a7b33e1cc994427b8df48c7152839784e3ba3c6bfa341c404d6a8fa9d
GET /gtag/js?id=G-431CC16XJX&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 14 Nov 2023 06:54:27 GMT
expires: Tue, 14 Nov 2023 06:54:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81009
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| w.ladicdn.com/s1440x1298/5c9893c323574e4c394c2cfd/mon2k-nguc-khung-hinh-12-1567939282.jpg | 143.204.55.80 | | 150 kB |
URL GET w.ladicdn.com/s1440x1298/5c9893c323574e4c394c2cfd/mon2k-nguc-khung-hinh-12-1567939282.jpg IP143.204.55.80:0
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjectw.ladicdn.com Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File typegzip compressed data, from Unix\012- data Size150 kB (150502 bytes) Hash7ca178f0ee5c2aeac3a869ab56352a90 3178c502ca3de0b47066931594ba4913aba3d8f5 b7a7b5f3c48735865ede0b492c53ba609d43fd37f7e920434f3148215b2e5475
GET /s1440x1298/5c9893c323574e4c394c2cfd/mon2k-nguc-khung-hinh-12-1567939282.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 12 Nov 2023 15:35:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 11 Nov 2024 15:35:39 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GOzGGd9cv-a_pghe6LfGh8CR3O6prH95SlbSFLr_zymXNTAJigDC4g==
age: 141528
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28 ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data Hashe2d74c5e631bc53a7240bbfe4be99c8f eb513857bb01cc4f7249067fc7e969bef415fc90 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 12 Nov 2023 06:45:14 GMT
expires: Mon, 11 Nov 2024 06:45:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 173354
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28 ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Nov 2023 21:30:01 GMT
expires: Fri, 08 Nov 2024 21:30:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 379467
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28 ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data Hashe2d74c5e631bc53a7240bbfe4be99c8f eb513857bb01cc4f7249067fc7e969bef415fc90 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 12 Nov 2023 06:45:14 GMT
expires: Mon, 11 Nov 2024 06:45:14 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 173354
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28 ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 12 Nov 2023 06:30:10 GMT
expires: Mon, 11 Nov 2024 06:30:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 174258
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.227 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP216.58.207.227:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28 ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data Hashdd986ff1050050613be051863773d677 51a12487fd51cc02ca54a984f82d63318807ca2e d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:36:49 GMT
expires: Thu, 07 Nov 2024 21:36:49 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
age: 465459
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.227 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP216.58.207.227:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintEB:59:E9:F3:0F:CE:D8:1A:8C:BB:EE:7D:2E:B7:B8:39:73:7A:CE:28 ValidityMon, 16 Oct 2023 08:10:00 GMT - Mon, 08 Jan 2024 08:09:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data Hashdd986ff1050050613be051863773d677 51a12487fd51cc02ca54a984f82d63318807ca2e d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Nov 2023 21:36:49 GMT
expires: Thu, 07 Nov 2024 21:36:49 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
age: 465459
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| s.zzcdn.me/ztr/ztracker.js?id=7056840457216708608 |  123.30.58.17 | 200 OK | 7.8 kB |
URL GET HTTP/2s.zzcdn.me/ztr/ztracker.js?id=7056840457216708608 IP123.30.58.17:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerDigiCert, Inc. Subject*.zzcdn.me FingerprintF9:65:C4:9A:1D:A0:30:51:41:83:00:19:13:2B:14:DB:58:ED:61:48 ValidityTue, 10 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File typeASCII text, with very long lines (23835) Hashb23761a5547395d33e14d64d86fbb10e 58856a235a6414afe62cb23b667fd5b2867d7fb9 45b4fb3d724d209c5064eae7d20e445c8af7e7829aeebf0369de54febf7d8593
GET /ztr/ztracker.js?id=7056840457216708608 HTTP/1.1
Host: s.zzcdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
server: Universe
date: Tue, 14 Nov 2023 06:54:29 GMT
content-encoding: gzip
x-cache-status: HIT
age: 10277645
content-length: 7848
content-type: application/javascript
cache-control: no-cache
X-Firefox-Spdy: h2
|
|
| static.ladipage.net/59ba0328fa9d7a513d2a9abe/native-3-20210820090152.jpg |  52.76.24.172 | | 134 B |
URL GET static.ladipage.net/59ba0328fa9d7a513d2a9abe/native-3-20210820090152.jpg IP52.76.24.172:0
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjectstatic.ladipage.net Fingerprint06:B7:EB:46:7B:BC:A9:4A:07:A9:CD:D7:29:22:67:15:02:7E:3D:F0 ValidityWed, 21 Jun 2023 00:00:00 GMT - Fri, 19 Jul 2024 23:59:59 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /59ba0328fa9d7a513d2a9abe/native-3-20210820090152.jpg HTTP/1.1
Host: static.ladipage.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: awselb/2.0
date: Tue, 14 Nov 2023 06:54:29 GMT
content-type: text/html
content-length: 134
location: https://w.ladicdn.com:443/59ba0328fa9d7a513d2a9abe/native-3-20210820090152.jpg
X-Firefox-Spdy: h2
|
|
| log.adtimaserver.vn/ptrck/events?pixelId=7056840457216708608&url=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240 | 120.138.69.209 | 200 OK | 264 B |
URL GET HTTP/2log.adtimaserver.vn/ptrck/events?pixelId=7056840457216708608&url=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240 IP120.138.69.209:443 ASN#38244 VNG Corporation
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerDigiCert Inc Subject*.adtimaserver.vn Fingerprint02:8D:C0:05:EA:F0:64:2B:1F:9F:C8:40:D2:EC:0C:66:5F:5A:9E:82 ValidityMon, 24 Apr 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hashc6bbdc33605f30531edcb8c878592990 827804654203f18692be943c0084ebb4f2f6b6f2 26b7a3d62b776389695e8b5946c8ff9a014c006b00a46edc9da189b0c17ae708
GET /ptrck/events?pixelId=7056840457216708608&url=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240 HTTP/1.1
Host: log.adtimaserver.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 14 Nov 2023 06:54:30 GMT
content-type: application/json;charset=utf-8
content-length: 264
access-control-allow-origin: *
access-control-expose-headers: X-sessionId,token
server: za-ngx-srv
X-Firefox-Spdy: h2
|
|
| log.adtimaserver.vn/tracklp?type=pageview&pId=7056840457216708608&adtid=null&curl=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&uid=&ver=1.1.29&ref=&dur=1&atmrk=0.11022246678616743 | 120.138.69.209 | 200 OK | 8 B |
URL GET HTTP/2log.adtimaserver.vn/tracklp?type=pageview&pId=7056840457216708608&adtid=null&curl=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&uid=&ver=1.1.29&ref=&dur=1&atmrk=0.11022246678616743 IP120.138.69.209:443 ASN#38244 VNG Corporation
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerDigiCert Inc Subject*.adtimaserver.vn Fingerprint02:8D:C0:05:EA:F0:64:2B:1F:9F:C8:40:D2:EC:0C:66:5F:5A:9E:82 ValidityMon, 24 Apr 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hashae780585f49b94ce1444eb7d28906123 7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86 81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /tracklp?type=pageview&pId=7056840457216708608&adtid=null&curl=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&uid=&ver=1.1.29&ref=&dur=1&atmrk=0.11022246678616743 HTTP/1.1
Host: log.adtimaserver.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 14 Nov 2023 06:54:30 GMT
content-type: text/html;charset=utf-8
content-length: 8
access-control-allow-origin: *
access-control-allow-credentials: true
server: za-ngx-srv
X-Firefox-Spdy: h2
|
|
| log.adtimaserver.vn/ptrck/log?pId=7056840457216708608&eId=1393893465614933723&et=3&url=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&value=&adtid=null&curl=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&uid=&ver=1.1.29&ref=&estd=ViewContent&atmrk=0.7549217147087331 | 120.138.69.209 | 200 OK | 21 B |
URL GET HTTP/2log.adtimaserver.vn/ptrck/log?pId=7056840457216708608&eId=1393893465614933723&et=3&url=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&value=&adtid=null&curl=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&uid=&ver=1.1.29&ref=&estd=ViewContent&atmrk=0.7549217147087331 IP120.138.69.209:443 ASN#38244 VNG Corporation
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerDigiCert Inc Subject*.adtimaserver.vn Fingerprint02:8D:C0:05:EA:F0:64:2B:1F:9F:C8:40:D2:EC:0C:66:5F:5A:9E:82 ValidityMon, 24 Apr 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hashed0bf75af858f5591d1a828b1eb0401e 77b895a46960cfb0136381ac4102edbbff62c754 2db5c83947e9ea77e157e2cc0bc39aee8008dea9459684908f2742eec3a07d09
GET /ptrck/log?pId=7056840457216708608&eId=1393893465614933723&et=3&url=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&value=&adtid=null&curl=https%3A%2F%2Fwww.pleasureshop.xyz%2Fsexy-school-girl%2Futm%3Dexoclick%26ad%3Dnativead%26zone%3D4464240&uid=&ver=1.1.29&ref=&estd=ViewContent&atmrk=0.7549217147087331 HTTP/1.1
Host: log.adtimaserver.vn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 14 Nov 2023 06:54:30 GMT
content-type: application/json;charset=utf-8
content-length: 21
access-control-allow-origin: *
access-control-expose-headers: X-sessionId,token
server: za-ngx-srv
X-Firefox-Spdy: h2
|
|
| a.ladipage.com/event | 13.250.196.120 | 200 OK | 106 B |
IP13.250.196.120:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjecta.ladipage.com Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash1b0fbcd644b2fd5e7f516acf3aecbd83 8154d902bb9bcc1d424998b5cfd94ae1b065d6ac 09b06d2aef938b6e871e050d0d1079b124634036a142fa23cc47aed667c9f5bc
POST /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
LADI_CLIENT_ID: d6dbad13-d3af-415b-6115-4d4c305c0c61
LADI_PAGE_VIEW: 1
LADI_FORM_SUBMIT: 0
LADI_CAMP_ID:
LADI_CAMP_NAME:
LADI_CAMP_TYPE:
LADI_CAMP_TARGET_URL:
LADI_CAMP_ORIGIN_URL:
LADI_CAMP_PAGE_VIEW: 0
LADI_CAMP_FORM_SUBMIT: 0
Content-Length: 280
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 14 Nov 2023 06:54:28 GMT
content-type: text/plain; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
X-Firefox-Spdy: h2
|
|
| a.ladipage.com/event | 13.250.196.120 | 200 OK | 0 B |
IP13.250.196.120:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjecta.ladipage.com Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,ladi_camp_form_submit,ladi_camp_id,ladi_camp_name,ladi_camp_origin_url,ladi_camp_page_view,ladi_camp_target_url,ladi_camp_type,ladi_client_id,ladi_form_submit,ladi_page_view
Referer: https://www.pleasureshop.xyz/
Origin: https://www.pleasureshop.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 14 Nov 2023 06:54:28 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/v2/source/ladipage.formdata.min.js?v=1698396014328 | 143.204.55.80 | 200 OK | 56 kB |
URL GET HTTP/2w.ladicdn.com/v2/source/ladipage.formdata.min.js?v=1698396014328 IP143.204.55.80:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjectw.ladicdn.com Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/source/ladipage.formdata.min.js?v=1698396014328 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
server: nginx
date: Sat, 21 Oct 2023 06:11:19 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Sun, 20 Oct 2024 06:11:19 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UqHqbXKVSznMFr4ORtWk0zZd4YvdfGAtSXKAuVKqVwxfjMQjYzKLdA==
age: 2076188
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/s600x400/59ba0328fa9d7a513d2a9abe/pleasureshopph-20210819133908.png | 0.0.0.0 | | 0 B |
URL GET w.ladicdn.com/s600x400/59ba0328fa9d7a513d2a9abe/pleasureshopph-20210819133908.png IP0.0.0.0:0
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjectw.ladicdn.com Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s600x400/59ba0328fa9d7a513d2a9abe/pleasureshopph-20210819133908.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 12 Nov 2023 15:35:39 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 11 Nov 2024 15:35:39 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X60Oqc1mwnkvDj8lYrcQQ-zgj3k62n4ol_QxlhozED1ZnZGRqdNxwg==
age: 141528
X-Firefox-Spdy: h2
|
|
| www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 | 13.213.230.75 | 200 OK | 145 kB |
URL User Request GET HTTP/2www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 IP13.213.230.75:443
CertificateIssuerZeroSSL Subjectwww.pleasureshop.xyz Fingerprint94:24:39:29:B5:FC:F1:AB:D9:2B:42:24:F9:88:A2:92:54:F3:71:21 ValidityThu, 09 Nov 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
Size145 kB (145089 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 HTTP/1.1
Host: www.pleasureshop.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Tue, 14 Nov 2023 06:54:26 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
set-cookie: LADI_DNS_CHECK="2023-11-14 06:54:26.986535458 +0000 UTC m=+519867.652595191"; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_CLIENT_ID=d6dbad13-d3af-415b-6115-4d4c305c0c61; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_PAGE_VIEW=0; Path=/sexy-school-girl; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_PAGE_VIEW_PATH=0; Path=/sexy-school-girl; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_FORM_SUBMIT=0; Path=/sexy-school-girl; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_FORM_SUBMIT_PATH=0; Path=/sexy-school-girl; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_PAGE_VIEW=1; Path=/sexy-school-girl; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_PAGE_VIEW_PATH=1; Path=/sexy-school-girl; Expires=Fri, 11 Nov 2033 06:54:26 GMT
LADI_CAMP_ID=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_NAME=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_TYPE=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_ORIGIN_URL=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_TARGET_URL=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_PAGE_VIEW=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_PAGE_VIEW_PATH=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_FORM_SUBMIT=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_FORM_SUBMIT_PATH=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW_PATH=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT_PATH=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_CONFIG=; Path=/sexy-school-girl; Max-Age=0
LADI_CAMP_END_DATE=; Path=/sexy-school-girl; Max-Age=0
LADI_FUNNEL_NEXT_URL=; Path=/sexy-school-girl; Max-Age=0
LADI_FUNNEL_PREV_URL=; Path=/sexy-school-girl; Max-Age=0
statuscode: 200
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| trk.ero-analytics.com/tracking/track.js | 0.0.0.0 | | 0 B |
URL GET trk.ero-analytics.com/tracking/track.js IP0.0.0.0:0
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tracking/track.js HTTP/1.1
Host: trk.ero-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&family=Roboto:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 10 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&family=Roboto:wght@400;700&display=swap IP142.250.74.106:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintFA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9 ValidityMon, 16 Oct 2023 08:10:01 GMT - Mon, 08 Jan 2024 08:10:00 GMT
Hash9a00ff90678d8d3093b10c70a4abf32c b019dc5688ae6e40861c21759d85ebb6a215fa06 b652537223da3131b5bc05b5487b63142e5f8e0dca47b75b0b5c335fee8c7f47
GET /css2?family=Open+Sans:wght@400;700&family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 14 Nov 2023 06:54:27 GMT
date: Tue, 14 Nov 2023 06:54:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/v2/source/ladipagev3.min.js?v=1698396014328 | 143.204.55.80 | 200 OK | 395 kB |
URL GET HTTP/2w.ladicdn.com/v2/source/ladipagev3.min.js?v=1698396014328 IP143.204.55.80:443
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjectw.ladicdn.com Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Size395 kB (395136 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/source/ladipagev3.min.js?v=1698396014328 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
server: nginx
date: Wed, 08 Nov 2023 10:15:14 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Thu, 07 Nov 2024 10:15:14 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sDupIj8WPlI4gjRlNDkpJS1UKXdF0TArVH9YJdeVfut_i9nb51pvhg==
age: 506353
X-Firefox-Spdy: h2
|
|
| w.ladicdn.com/59ba0328fa9d7a513d2a9abe/native-3-20210820090152.jpg | 0.0.0.0 | | 0 B |
URL GET w.ladicdn.com/59ba0328fa9d7a513d2a9abe/native-3-20210820090152.jpg IP0.0.0.0:0
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjectw.ladicdn.com Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /59ba0328fa9d7a513d2a9abe/native-3-20210820090152.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pleasureshop.xyz/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 12 Nov 2023 11:57:51 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 11 Nov 2024 11:57:51 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ucJhXU4lDj-atAlG33Dz3l1_eiEMFcKX0vxLMccnWKDbOOaOm6PMIA==
age: 154598
X-Firefox-Spdy: h2
|
|
| trk.ero-analytics.com/tracking/track.js | 0.0.0.0 | | 0 B |
URL GET trk.ero-analytics.com/tracking/track.js IP0.0.0.0:0
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tracking/track.js HTTP/1.1
Host: trk.ero-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| w.ladicdn.com/s750x750/5c9893c323574e4c394c2cfd/sexy-school-girl-95x165x85-20200423071004.jpg | 0.0.0.0 | | 0 B |
URL GET w.ladicdn.com/s750x750/5c9893c323574e4c394c2cfd/sexy-school-girl-95x165x85-20200423071004.jpg IP0.0.0.0:0
Requested byhttps://www.pleasureshop.xyz/sexy-school-girl/utm=exoclick&ad=nativead&zone=4464240 CertificateIssuerAmazon Subjectw.ladicdn.com Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s750x750/5c9893c323574e4c394c2cfd/sexy-school-girl-95x165x85-20200423071004.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pleasureshop.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Tue, 14 Nov 2023 06:54:28 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Wed, 13 Nov 2024 06:54:28 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i1X5F1eXXxKOaqcYIkarkKa3-BDMajCzwRy0ckdyLE8GBt8GSc7umw==
X-Firefox-Spdy: h2
|
|
0.0.0.0