103.18.6.109 0 B IP 103.18.6.109:0
ASN #131392 GMO-Z.com Runsystem Joint Stock Company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: ttslotgift.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved
Date: Sun, 26 Nov 2023 01:12:48 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16
Location: http://www.ttslotgift.click
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
52.220.48.161 6.5 kB IP 52.220.48.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15449)
Hash d3a43866528aa29e36561b7d95eda861
9063dc18bed2d3f9b26626ce319eaed0eb2d5090
ad2d242c755683cd81acd80202bf59e2d9e240fb57268bc9ddec86cf072d4eba
GET / HTTP/1.1
Host: www.ttslotgift.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 26 Nov 2023 01:15:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, max-age=0
Set-Cookie: LADI_DNS_CHECK="2023-11-26 01:15:28.377500306 +0000 UTC m=+1536309.392991452"; Expires=Wed, 23 Nov 2033 01:15:28 GMT
LADI_CLIENT_ID=82a8fe11-980b-4652-50c3-ae4c1a6c316a; Expires=Wed, 23 Nov 2033 01:15:28 GMT
LADI_PAGE_VIEW=0; Expires=Wed, 23 Nov 2033 01:15:28 GMT
LADI_FORM_SUBMIT=0; Expires=Wed, 23 Nov 2033 01:15:28 GMT
LADI_PAGE_VIEW=1; Expires=Wed, 23 Nov 2033 01:15:28 GMT
LADI_CAMP_ID=; Max-Age=0
LADI_CAMP_NAME=; Max-Age=0
LADI_CAMP_TYPE=; Max-Age=0
LADI_CAMP_ORIGIN_URL=; Max-Age=0
LADI_CAMP_TARGET_URL=; Max-Age=0
LADI_CAMP_PAGE_VIEW=; Max-Age=0
LADI_CAMP_FORM_SUBMIT=; Max-Age=0
LADI_CAMP_BEHAVIOR_PAGE_VIEW=; Max-Age=0
LADI_CAMP_BEHAVIOR_FORMSUBMIT=; Max-Age=0
LADI_CAMP_CONFIG=; Max-Age=0
LADI_CAMP_END_DATE=; Max-Age=0
LADI_FUNNEL_NEXT_URL=; Max-Age=0
LADI_FUNNEL_PREV_URL=; Max-Age=0
Statuscode: 200
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Content-Encoding: gzip
www.ttslotgift.click/favicon.ico
52.220.48.161200 OK 15 kB URL GET HTTP/1.1 www.ttslotgift.click/favicon.ico
IP 52.220.48.161:80
Requested by http://www.ttslotgift.click/
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 32a0aef71ca5113bd857a5532330c59c
980a70ba1a93c15182faac369a99e8efcb180d2c
17322c2580cc44463b9df06184f8005bd15af3e0ef9237db4371ba1eba55f6e3
GET /favicon.ico HTTP/1.1
Host: www.ttslotgift.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Cookie: LADI_DNS_CHECK="2023-11-26 01:15:28.377500306 +0000 UTC m=+1536309.392991452"; LADI_CLIENT_ID=82a8fe11-980b-4652-50c3-ae4c1a6c316a; LADI_PAGE_VIEW=1; LADI_FORM_SUBMIT=0; _timenow=1700961332349; LADI_UNIQUE_ID=4498edfd-fcb3-4d3d-8164-6b36b962fce9
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sun, 26 Nov 2023 01:15:29 GMT
Content-Type: image/x-icon
Content-Length: 15406
Last-Modified: Sun, 09 Apr 2023 11:31:27 GMT
Connection: keep-alive
Accept-Ranges: bytes
s.zzcdn.me/ztr/ztracker.js?id=7056840457216708608
123.30.58.20200 OK 7.8 kB URL GET HTTP/2 s.zzcdn.me/ztr/ztracker.js?id=7056840457216708608
IP 123.30.58.20:443
Requested by http://www.ttslotgift.click/
Certificate IssuerDigiCert, Inc.
Subject*.zzcdn.me
FingerprintF9:65:C4:9A:1D:A0:30:51:41:83:00:19:13:2B:14:DB:58:ED:61:48
ValidityTue, 10 Jan 2023 00:00:00 GMT - Tue, 09 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (23835)
Hash b23761a5547395d33e14d64d86fbb10e
58856a235a6414afe62cb23b667fd5b2867d7fb9
45b4fb3d724d209c5064eae7d20e445c8af7e7829aeebf0369de54febf7d8593
GET /ztr/ztracker.js?id=7056840457216708608 HTTP/1.1
Host: s.zzcdn.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
server: Universe
date: Sun, 26 Nov 2023 01:15:29 GMT
content-encoding: gzip
x-cache-status: HIT
age: 11294104
content-length: 7848
content-type: application/javascript
cache-control: no-cache
X-Firefox-Spdy: h2
w.ladicdn.com/v2/source/ladipagev3.min.js?v=1698827959206
143.204.55.86200 OK 93 kB URL GET HTTP/2 w.ladicdn.com/v2/source/ladipagev3.min.js?v=1698827959206
IP 143.204.55.86:443
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash be6905626830bc464de951a1d448c705
2ed6765246babec688d6105cda7a13d3359f6577
8039c28a33ff220b8fa6dcf953adf663bf2caf399ac207cc985ce10907ffa353
GET /v2/source/ladipagev3.min.js?v=1698827959206 HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
server: nginx
date: Wed, 22 Nov 2023 07:12:15 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Thu, 21 Nov 2024 07:12:15 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: YUN2R_8Cvm9tDXk58_ZZ4KB6GsGwBIXPMMdAI3AdybP96hHxXPO-hA==
age: 324193
X-Firefox-Spdy: h2
log.adtimaserver.vn/tracklp?type=pageview&pId=7056840457216708608&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&dur=2&atmrk=0.6126914211822536
120.138.69.209200 OK 8 B URL GET HTTP/2 log.adtimaserver.vn/tracklp?type=pageview&pId=7056840457216708608&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&dur=2&atmrk=0.6126914211822536
IP 120.138.69.209:443
ASN #38244 VNG Corporation
Requested by http://www.ttslotgift.click/
Certificate IssuerDigiCert Inc
Subject*.adtimaserver.vn
Fingerprint02:8D:C0:05:EA:F0:64:2B:1F:9F:C8:40:D2:EC:0C:66:5F:5A:9E:82
ValidityMon, 24 Apr 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /tracklp?type=pageview&pId=7056840457216708608&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&dur=2&atmrk=0.6126914211822536 HTTP/1.1
Host: log.adtimaserver.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 01:15:31 GMT
content-type: text/html;charset=utf-8
content-length: 8
access-control-allow-origin: *
access-control-allow-credentials: true
server: za-ngx-srv
X-Firefox-Spdy: h2
log.adtimaserver.vn/tracklp?type=viewable&value=view_area%3D90%3Bduration%3D1952&pId=7056840457216708608&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&atmrk=0.2133470253063543
120.138.69.209200 OK 8 B URL GET HTTP/2 log.adtimaserver.vn/tracklp?type=viewable&value=view_area%3D90%3Bduration%3D1952&pId=7056840457216708608&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&atmrk=0.2133470253063543
IP 120.138.69.209:443
ASN #38244 VNG Corporation
Requested by http://www.ttslotgift.click/
Certificate IssuerDigiCert Inc
Subject*.adtimaserver.vn
Fingerprint02:8D:C0:05:EA:F0:64:2B:1F:9F:C8:40:D2:EC:0C:66:5F:5A:9E:82
ValidityMon, 24 Apr 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
Hash ae780585f49b94ce1444eb7d28906123
7d5ca8c0c03e883c56c4eb1ef6f6bb9bccad4d86
81b2bd4ea98c8db66554fbc8d7637a1a69a130f331feb732b75caab4c4868fd5
GET /tracklp?type=viewable&value=view_area%3D90%3Bduration%3D1952&pId=7056840457216708608&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&atmrk=0.2133470253063543 HTTP/1.1
Host: log.adtimaserver.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 01:15:32 GMT
content-type: text/html;charset=utf-8
content-length: 8
access-control-allow-origin: *
access-control-allow-credentials: true
server: za-ngx-srv
X-Firefox-Spdy: h2
log.adtimaserver.vn/ptrck/log?pId=7056840457216708608&eId=1393893465614933723&et=3&url=http%3A%2F%2Fwww.ttslotgift.click%2F&value=&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&estd=ViewContent&atmrk=0.9279929618546725
120.138.69.209200 OK 21 B URL GET HTTP/2 log.adtimaserver.vn/ptrck/log?pId=7056840457216708608&eId=1393893465614933723&et=3&url=http%3A%2F%2Fwww.ttslotgift.click%2F&value=&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&estd=ViewContent&atmrk=0.9279929618546725
IP 120.138.69.209:443
ASN #38244 VNG Corporation
Requested by http://www.ttslotgift.click/
Certificate IssuerDigiCert Inc
Subject*.adtimaserver.vn
Fingerprint02:8D:C0:05:EA:F0:64:2B:1F:9F:C8:40:D2:EC:0C:66:5F:5A:9E:82
ValidityMon, 24 Apr 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ed0bf75af858f5591d1a828b1eb0401e
77b895a46960cfb0136381ac4102edbbff62c754
2db5c83947e9ea77e157e2cc0bc39aee8008dea9459684908f2742eec3a07d09
GET /ptrck/log?pId=7056840457216708608&eId=1393893465614933723&et=3&url=http%3A%2F%2Fwww.ttslotgift.click%2F&value=&adtid=null&curl=http%3A%2F%2Fwww.ttslotgift.click%2F&uid=&ver=1.1.29&ref=&estd=ViewContent&atmrk=0.9279929618546725 HTTP/1.1
Host: log.adtimaserver.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Nov 2023 01:15:32 GMT
content-type: application/json;charset=utf-8
content-length: 21
access-control-allow-origin: *
access-control-expose-headers: X-sessionId,token
server: za-ngx-srv
X-Firefox-Spdy: h2
w.ladicdn.com/s1000x1050/626a69d9104743002c3b7ecb/8-chotcd-16165069933642122229767-20220626112658.jpg
0.0.0.0 0 B URL GET w.ladicdn.com/s1000x1050/626a69d9104743002c3b7ecb/8-chotcd-16165069933642122229767-20220626112658.jpg
IP 0.0.0.0:0
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s1000x1050/626a69d9104743002c3b7ecb/8-chotcd-16165069933642122229767-20220626112658.jpg HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
date: Sun, 26 Nov 2023 01:15:30 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 25 Nov 2024 01:15:30 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8x3QBn7epVZB6jyR0VfzLbdSMxXpvx1MDahddCO12-4DGA3FtHdXkw==
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&display=swap
142.250.74.106200 OK 5.9 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:wght@400;700&display=swap
IP 142.250.74.106:443
Requested by http://www.ttslotgift.click/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (6016), with no line terminators
Hash 6d7c704f1c3610116485e92c5c3aedab
fd9c9d3857c67978c125caa452214eaea4b77023
35d7fde7f35ca547f6e9e88e7677ea2393b54289ff568d7ec9e4a8fdaea76e01
GET /css2?family=Open+Sans:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 26 Nov 2023 01:15:28 GMT
date: Sun, 26 Nov 2023 01:15:28 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
w.ladicdn.com/s351x120/626a69d9104743002c3b7ecb/whatsapp-button-3-20231022025135-vroe5.png
0.0.0.0 0 B URL GET w.ladicdn.com/s351x120/626a69d9104743002c3b7ecb/whatsapp-button-3-20231022025135-vroe5.png
IP 0.0.0.0:0
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s351x120/626a69d9104743002c3b7ecb/whatsapp-button-3-20231022025135-vroe5.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 26 Nov 2023 01:15:30 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 25 Nov 2024 01:15:30 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xX_hY8IEUy0CVh21n3M3H99A3KLT195EN0QeykUZ7PwT2aXBKrDYaA==
X-Firefox-Spdy: h2
w.ladicdn.com/s650x700/626a69d9104743002c3b7ecb/place-your-image-here-20230621125315-oxmtu.png
0.0.0.0 0 B URL GET w.ladicdn.com/s650x700/626a69d9104743002c3b7ecb/place-your-image-here-20230621125315-oxmtu.png
IP 0.0.0.0:0
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s650x700/626a69d9104743002c3b7ecb/place-your-image-here-20230621125315-oxmtu.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 26 Nov 2023 01:15:29 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 25 Nov 2024 01:15:29 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: KFI8VaP7bO92j3b3kfw7YcYQSElHG13kfirpd4AK3vclrCJjU9_rww==
X-Firefox-Spdy: h2
w.ladicdn.com/s700x400/626a69d9104743002c3b7ecb/10-minutes-receive-1000-20231025074030-qhzjn.png
0.0.0.0 0 B URL GET w.ladicdn.com/s700x400/626a69d9104743002c3b7ecb/10-minutes-receive-1000-20231025074030-qhzjn.png
IP 0.0.0.0:0
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s700x400/626a69d9104743002c3b7ecb/10-minutes-receive-1000-20231025074030-qhzjn.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 26 Nov 2023 01:15:28 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 25 Nov 2024 01:15:28 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tSZBv_5Wg3ze3XTYtd-tBUHrPzprmzGUjWAc4uVQ-LT_mdF5RxRo2w==
X-Firefox-Spdy: h2
a.ladipage.com/event
13.250.196.120200 OK 0 B IP 13.250.196.120:443
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjecta.ladipage.com
Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D
ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,ladi_camp_form_submit,ladi_camp_id,ladi_camp_name,ladi_camp_origin_url,ladi_camp_page_view,ladi_camp_target_url,ladi_camp_type,ladi_client_id,ladi_form_submit,ladi_page_view
Referer: http://www.ttslotgift.click/
Origin: http://www.ttslotgift.click
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 01:15:29 GMT
content-type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
log.adtimaserver.vn/ptrck/events?pixelId=7056840457216708608&url=http%3A%2F%2Fwww.ttslotgift.click%2F
120.138.69.209200 OK 264 B URL GET HTTP/2 log.adtimaserver.vn/ptrck/events?pixelId=7056840457216708608&url=http%3A%2F%2Fwww.ttslotgift.click%2F
IP 120.138.69.209:443
ASN #38244 VNG Corporation
Requested by http://www.ttslotgift.click/
Certificate IssuerDigiCert Inc
Subject*.adtimaserver.vn
Fingerprint02:8D:C0:05:EA:F0:64:2B:1F:9F:C8:40:D2:EC:0C:66:5F:5A:9E:82
ValidityMon, 24 Apr 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash b4f6c67f471870ac437386d4912e7225
a2a81b0a86c6af8ef4d81a5b735c9b8bd9fbb09d
802d8314424271cb165d9447913dc96c2947b7bbe6ac6ed3b8c3ef40879f0234
GET /ptrck/events?pixelId=7056840457216708608&url=http%3A%2F%2Fwww.ttslotgift.click%2F HTTP/1.1
Host: log.adtimaserver.vn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.ttslotgift.click
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 01:15:31 GMT
content-type: application/json;charset=utf-8
content-length: 264
access-control-allow-origin: *
access-control-expose-headers: X-sessionId,token
server: za-ngx-srv
X-Firefox-Spdy: h2
w.ladicdn.com/s768x727/626a69d9104743002c3b7ecb/shape-background-20230621125503-mszzi.png
0.0.0.0 0 B URL GET w.ladicdn.com/s768x727/626a69d9104743002c3b7ecb/shape-background-20230621125503-mszzi.png
IP 0.0.0.0:0
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s768x727/626a69d9104743002c3b7ecb/shape-background-20230621125503-mszzi.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 26 Nov 2023 01:15:31 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 25 Nov 2024 01:15:31 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -N8i_-zbPwBdbG-zMB46jD6oTXvv8InVcjNkfcC2yba0xuGXQ-9B1Q==
X-Firefox-Spdy: h2
w.ladicdn.com/s650x350/626a69d9104743002c3b7ecb/worktime-_-10h-19h-20231101164203-meywa.png
0.0.0.0 0 B URL GET w.ladicdn.com/s650x350/626a69d9104743002c3b7ecb/worktime-_-10h-19h-20231101164203-meywa.png
IP 0.0.0.0:0
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjectw.ladicdn.com
Fingerprint91:81:42:8B:13:4C:F4:4D:E5:26:56:40:9C:9C:C9:AA:28:98:4B:4D
ValidityThu, 12 Oct 2023 00:00:00 GMT - Sun, 10 Nov 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s650x350/626a69d9104743002c3b7ecb/worktime-_-10h-19h-20231101164203-meywa.png HTTP/1.1
Host: w.ladicdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
date: Sun, 26 Nov 2023 01:15:28 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Access-Control-Allow-Credentials
access-control-allow-credentials: true
access-control-max-age: 2592000
cache-control: public, max-age=31536000
expires: Mon, 25 Nov 2024 01:15:28 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dgYD0NGxUwtpfZdY2Q6nENj2bldTsSVd2Jh81A2Z0aR6pYveM6aAVA==
X-Firefox-Spdy: h2
a.ladipage.com/event
13.250.196.120200 OK 106 B IP 13.250.196.120:443
Requested by http://www.ttslotgift.click/
Certificate IssuerAmazon
Subjecta.ladipage.com
Fingerprint62:67:EE:A4:F2:A1:8E:D8:49:2A:21:9C:99:14:BF:72:5A:21:0A:9D
ValidityThu, 18 May 2023 00:00:00 GMT - Sat, 15 Jun 2024 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 1b0fbcd644b2fd5e7f516acf3aecbd83
8154d902bb9bcc1d424998b5cfd94ae1b065d6ac
09b06d2aef938b6e871e050d0d1079b124634036a142fa23cc47aed667c9f5bc
POST /event HTTP/1.1
Host: a.ladipage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
LADI_CLIENT_ID: 82a8fe11-980b-4652-50c3-ae4c1a6c316a
LADI_PAGE_VIEW: 1
LADI_FORM_SUBMIT: 0
LADI_CAMP_ID:
LADI_CAMP_NAME:
LADI_CAMP_TYPE:
LADI_CAMP_TARGET_URL:
LADI_CAMP_ORIGIN_URL:
LADI_CAMP_PAGE_VIEW: 0
LADI_CAMP_FORM_SUBMIT: 0
Content-Length: 225
Origin: http://www.ttslotgift.click
DNT: 1
Connection: keep-alive
Referer: http://www.ttslotgift.click/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 26 Nov 2023 01:15:30 GMT
content-type: text/plain; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-download-options: noopen
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, Accept-Encoding, ladi_camp_form_submit, ladi_camp_form_submit_daily, ladi_camp_id, ladi_camp_name, ladi_camp_origin_url, ladi_camp_page_view, ladi_camp_page_view_daily, ladi_camp_target_url, ladi_camp_type, ladi_client_id, ladi_form_submit, ladi_form_submit_daily, ladi_page_view, ladi_page_view_daily
access-control-max-age: 2592000
X-Firefox-Spdy: h2