cdn-adef.akamaized.net/landings/283148/1696402910/css/style.css?1696402910
95.101.10.67200 OK 2.0 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283148/1696402910/css/style.css?1696402910
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash ada51aa333cceacda11ab9605e004e0a
f96761fbb59b413bcd16e088e88d0c28a11bd874
c33b7d13fecd62cc5c182d12e567d9703128b206b25f156a3883cc521e58676e
GET /landings/283148/1696402910/css/style.css?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: nxXvk+RCxLUgdC2xG0NGuK3Pov55POJ3CxFptDd+Y8scKLQGwMVCwRKGd6LmA8LIMGNttHryvdI=
x-amz-request-id: C238PEGMYC4HW6NX
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "ada51aa333cceacda11ab9605e004e0a"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 22 Oct 2023 20:00:21 GMT
Content-Length: 1980
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/283148/1696402910/js/collector.js?1696402910
95.101.10.67200 OK 1.3 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283148/1696402910/js/collector.js?1696402910
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash 93e4a4c9c70b874b19f31dc31f0aaa16
80dd02667e6dbbcb27e9640432206428a08861c2
b9c056ce3df686a7b1462e24754bb83f4b522f167a79f38e6e2e467341c71ad0
GET /landings/283148/1696402910/js/collector.js?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: NrcxogyzAUFXc0jBxGAqNKKuhdpRJLvF80Vz4YVlMNUEFEgT4UCX56Cmn2BxafinYU6o4jKolIE=
x-amz-request-id: 5FP64K090XX2H2CK
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "93e4a4c9c70b874b19f31dc31f0aaa16"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 22 Oct 2023 20:00:21 GMT
Content-Length: 1293
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
api.imotech.video/ad/events.js?pixel_id=903883351103051008
164.90.105.98200 OK 22 kB URL GET HTTP/2 api.imotech.video/ad/events.js?pixel_id=903883351103051008
IP 164.90.105.98:443
ASN #10122 BIGO TECHNOLOGY PTE. LTD.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File type Unicode text, UTF-8 text, with very long lines (63765), with no line terminators
Hash 23dcfaf1121f59dae1a879f3caa81803
b07663ff8d798e149fd233449578e919ae436658
e0e073c811c4eb13048220e8c0cab51d0c447e16ef2d674da9e84bb6cd634726
GET /ad/events.js?pixel_id=903883351103051008 HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 20:00:21 GMT
content-type: application/javascript;charset=utf-8
content-length: 21627
access-control-allow-origin: *
bigotraceresponse: 00-011ab1ed0c8d15792e79177c8fb4aaae-0-00
content-encoding: gzip
cache-control: private, max-age=900
X-Firefox-Spdy: h2
cdn-adef.akamaized.net/landings/283148/1696402910/js/canvas-scratch.js?1696402910
95.101.10.67200 OK 1.7 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283148/1696402910/js/canvas-scratch.js?1696402910
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash 3a7fb854caf6c278c14e86d216d1edec
3cecc1d6aa9509c7a9cfcaf2c79a42f7d3b7c9ca
0511a0eac20b207c0fb4cbab01ec325db9a56316e16f321624a7d76c24747c27
GET /landings/283148/1696402910/js/canvas-scratch.js?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: dNVVUaJwRmleS3CjgD9LkOdaYK6VWJbP8vM87EJ0mtLHT7/DuJhsdHs7ru7jhPXELlnzOQVN4Wc=
x-amz-request-id: 5FP5FHM7AVWD96P8
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "3a7fb854caf6c278c14e86d216d1edec"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 22 Oct 2023 20:00:21 GMT
Content-Length: 1662
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/283148/1696402910/js/main.js?1696402910
95.101.10.67200 OK 5.0 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283148/1696402910/js/main.js?1696402910
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (3559), with CRLF line terminators
Hash c420dc0249fc264d41b706092c5fc7f2
e18fbeab2fb32c77972aee77f337d83ee4f4986f
35e21fba5f6b28dca1c8105d3cfdb903933bdfd02d1bb3bf0d150180d3925ff4
GET /landings/283148/1696402910/js/main.js?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 9+hfxT2X8bu6Kw1Pw/pzSRONIsGVzvJvJ8qnbqelfBc3KXRQbUUKs0hndn+ZT/M3E5G7g29v0Zk=
x-amz-request-id: 5FP5PC9KCJBVGK9N
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "c420dc0249fc264d41b706092c5fc7f2"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 22 Oct 2023 20:00:21 GMT
Content-Length: 5038
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402910
206.189.196.86200 OK 92 kB URL GET HTTP/1.1 cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402910
IP 206.189.196.86:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectcdnjs.claudflare.io
Fingerprint18:7C:79:BA:FF:48:8B:AA:43:33:E2:1F:F8:A6:0C:12:EA:07:A9:13
ValidityWed, 04 Oct 2023 20:01:27 GMT - Tue, 02 Jan 2024 20:01:26 GMT
File type ASCII text, with very long lines (65447)
Hash b5c3d25047eb3415e401a40da41e5118
d0a4ccdf5cd564dd297e783911dd108e5f6a8ef3
8877058afffb4c9b8bffde8daf79fc766ad4234631f9446ebe1df65d877b34f9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402910 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Sun, 22 Oct 2023 20:00:21 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 92013
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Mon, 23 Oct 2023 08:00:21 GMT
cdn-adef.akamaized.net/landings/283148/1696402910/images/modalImg.png
95.101.10.67200 OK 156 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283148/1696402910/images/modalImg.png
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 744 x 450, 8-bit/color RGBA, non-interlaced\012- data
Size 156 kB (156052 bytes)
Hash b455862233020904c288e800b66d94ae
e748b869561314242c6eb681c2e5235e52d8479a
021aed6b5c3faec547872ebcfdf5698a33ccedf6d5d73aa63f60e27af6e4a579
GET /landings/283148/1696402910/images/modalImg.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: lUykow8whc6MyPaLSuO6pCqcOVi8daLh43eB+iothR/bpN7dYEnet8blciDJccxqHCHDzu+js2g=
x-amz-request-id: 0TJE0S521GT2Y8JX
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "b455862233020904c288e800b66d94ae"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 156052
Date: Sun, 22 Oct 2023 20:00:22 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/283148/1696402910/images/logo.png
95.101.10.67200 OK 8.5 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283148/1696402910/images/logo.png
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 300 x 68, 4-bit colormap, non-interlaced\012- data
Hash a0157852d2a3d6e9aefbd7c23419e566
27d57dbdf88d42be5defcea6a1675d4932d13664
3b6b61919a663134edcdfe300b4de7e821ffa07cc72c15611988fb86fbba935c
GET /landings/283148/1696402910/images/logo.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: IcD6j5luRyi11avH0SAWP/ThgyIlBkoEK1Ckc7X89Y1CXCIT3LV+Hhh0V3pVVSyAgGtMt+/o+LU=
x-amz-request-id: 0TJBWCV3HJFAHD9C
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "a0157852d2a3d6e9aefbd7c23419e566"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8491
Date: Sun, 22 Oct 2023 20:00:22 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn-adef.akamaized.net/landings/283148/1696402910/images/cardsAfter.png
95.101.10.67200 OK 64 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283148/1696402910/images/cardsAfter.png
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 997 x 902, 8-bit/color RGBA, non-interlaced\012- data
Hash 74d879117359c9c53532166769b154bc
237e6d57552b51d9476ca60f81d2f6c54e40bbf5
beec6ee62646521bf3edc212c162607c469346d31a3dfb9707593b4d3a636315
GET /landings/283148/1696402910/images/cardsAfter.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: pl8oajp7Uu8iqCy4cj8c86MXjlhP0v1xpe8pAb9i2JSUlJ/2HTDQFtHc+8wfL+2PYD8ySewzMNY=
x-amz-request-id: 0TJ178V7NAQ1YB0F
Last-Modified: Wed, 04 Oct 2023 07:01:52 GMT
ETag: "74d879117359c9c53532166769b154bc"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 64163
Date: Sun, 22 Oct 2023 20:00:22 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D&pixel_id=log_pixel_id
164.90.105.98200 OK 104 B URL POST HTTP/2 api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D&pixel_id=log_pixel_id
IP 164.90.105.98:443
ASN #10122 BIGO TECHNOLOGY PTE. LTD.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File type ASCII text, with no line terminators
Hash db1778860f9201c240b35bd37b2a7757
fd36c6a902a5cf77981a6765f84f16250066b6e4
3da13935c769012619899f0fa63f62b3ea9d3bdac27310087b8cfffbc3cbc5c7
POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 20:00:22 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-e2b8652357b42ee2ad0b096f158aa840-0-00
X-Firefox-Spdy: h2
tt.stfilecamp.com/jsfiles/site-protect2.0.js
205.185.216.42200 OK 3.1 kB URL GET HTTP/1.1 tt.stfilecamp.com/jsfiles/site-protect2.0.js
IP 205.185.216.42:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
Hash fc96ab06b0f9fcea6731405215ae5daf
8af9f27d895eb69754919a2fc0d74760fecd3860
9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e
GET /jsfiles/site-protect2.0.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 20:00:22 GMT
Connection: Keep-Alive
Cache-Control: max-age=1384
Content-Length: 3137
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "fc96ab06b0f9fcea6731405215ae5daf"
x-amz-request-id: tx00000ed71528e20044cbc-00653576ae-7a12decc-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698004822.dop225.sk1.t,1698004822.cds242.sk1.shn,1698004822.dop225.sk1.t,1698004822.cds231.sk1.c
route.frest.pro/is_redirect
172.67.211.109200 OK 17 B URL POST HTTP/2 route.frest.pro/is_redirect
IP 172.67.211.109:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGoogle Trust Services LLC
Subjectfrest.pro
FingerprintA1:6D:80:97:81:5F:7D:81:A1:3A:F7:AD:B0:7C:80:EF:AF:09:8F:04
ValiditySun, 08 Oct 2023 16:23:46 GMT - Sat, 06 Jan 2024 16:23:45 GMT
File type JSON data\012- , ASCII text
Hash 6dec798efb56f56f33660938f6249ff6
e889219883cef38754dc1e5df7ca5277b3b314c8
b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4
POST /is_redirect HTTP/1.1
Host: route.frest.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:00:22 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SBldpw5jQPB7NRptjI2A0htokzdmTATBbqlYMpDpKs6dm4RKWBdR%2BZpNcxqeewpaK75UozY%2Bkqg%2FQBom%2BZZ5XfTeDhbn6A1H4TKA42DhiOwr137r9K37%2BPeNVmeUZ0slOS0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a4537b1bd75696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A2252%7D&pixel_id=log_pixel_id
164.90.105.98200 OK 104 B URL POST HTTP/2 api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A2252%7D&pixel_id=log_pixel_id
IP 164.90.105.98:443
ASN #10122 BIGO TECHNOLOGY PTE. LTD.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File type ASCII text, with no line terminators
Hash e52f75dd26ed888a16bd604166977ad6
e9b101b5939b42ff2e45dad45f81da2adc7fbbff
d79af27aa39492406ddd3214c6d74bdda552cf5c51d933933cf3310900a8c33b
POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A2252%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 20:00:22 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-1bdb3218612f882bc746484a18fb841a-0-00
X-Firefox-Spdy: h2
api.imotech.video/bigoad/trackingview?it=1698004823022&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.1124645850.1698004823&session_id=BA1.1.5922693928.1698004823&pixel_id=903883351103051008×tamp_ms=1698004823024&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D
164.90.105.98200 OK 104 B URL POST HTTP/2 api.imotech.video/bigoad/trackingview?it=1698004823022&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.1124645850.1698004823&session_id=BA1.1.5922693928.1698004823&pixel_id=903883351103051008×tamp_ms=1698004823024&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D
IP 164.90.105.98:443
ASN #10122 BIGO TECHNOLOGY PTE. LTD.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File type ASCII text, with no line terminators
Hash 55e88e4bb9825381f38d9e4ec8a2fd4c
a2bd7ee5c3ef2a423897bb59a4d42306709726de
8cbce81bf9cc993898a1a271aca79508712f81d2320465f7afdbbef5ae87e0fe
POST /bigoad/trackingview?it=1698004823022&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.1124645850.1698004823&session_id=BA1.1.5922693928.1698004823&pixel_id=903883351103051008×tamp_ms=1698004823024&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 20:00:22 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-9e4732b86109a59a94aaca925c4feb05-0-00
X-Firefox-Spdy: h2
api.imotech.video/bigoad/trackingview?it=1698004823022&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.1124645850.1698004823&session_id=BA1.1.5922693928.1698004823&pixel_id=903883351103051008×tamp_ms=1698004823023&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D
164.90.105.98200 OK 104 B URL POST HTTP/2 api.imotech.video/bigoad/trackingview?it=1698004823022&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.1124645850.1698004823&session_id=BA1.1.5922693928.1698004823&pixel_id=903883351103051008×tamp_ms=1698004823023&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D
IP 164.90.105.98:443
ASN #10122 BIGO TECHNOLOGY PTE. LTD.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File type ASCII text, with no line terminators
Hash 40a552f336f2b06c71d95cb416e60706
fda6b8acdc0e8e9718371e67ddff0a52a225da93
bf31f3def12c79ed87b75ebe289979faaffda0f7bf68c09ea816a28881050e3d
POST /bigoad/trackingview?it=1698004823022&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.1124645850.1698004823&session_id=BA1.1.5922693928.1698004823&pixel_id=903883351103051008×tamp_ms=1698004823023&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A1977%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 20:00:22 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-af9241d17045222978b10e33d79865a1-0-00
X-Firefox-Spdy: h2
tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js
205.185.216.42200 OK 2.3 kB URL GET HTTP/1.1 tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js
IP 205.185.216.42:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
File type HTML document, ASCII text
Hash 96af925d55cad494665471c73ac01b04
5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b
1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2
GET /jsfiles/second_back_multi_bigo.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 20:00:22 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 2307
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "96af925d55cad494665471c73ac01b04"
x-amz-request-id: tx000007241a3fb1de494fe-0065357f56-7a135a4e-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698004822.dop003.sk1.t,1698004822.cds260.sk1.shn,1698004822.dop003.sk1.t,1698004822.cds239.sk1.pr
tt.stfilecamp.com/static/group.png
205.185.216.42200 OK 480 kB URL GET HTTP/1.1 tt.stfilecamp.com/static/group.png
IP 205.185.216.42:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
File type PNG image data, 998 x 900, 8-bit/color RGBA, non-interlaced\012- data
Size 480 kB (480395 bytes)
Hash 75ce79eb698adf7e83f690015001cd47
fd5a7554d7d29f2c2c7a2903f1e8fe4ae0539287
4b10ee63368f4b594655c205b9b8fc1c424adf3731cf65d297771235d0f50b18
GET /static/group.png HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 20:00:22 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 480395
Content-Type: image/png
Last-Modified: Mon, 11 Sep 2023 13:10:42 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "75ce79eb698adf7e83f690015001cd47"
x-amz-request-id: tx00000dedb81f13ef59964-0065357f56-7a12c411-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698004822.dop202.sk1.t,1698004822.cds254.sk1.shn,1698004822.dop202.sk1.t,1698004822.cds255.sk1.pr
cdn-adef.akamaized.net/images/favicon.ico
95.101.10.67200 OK 4.1 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/images/favicon.ico
IP 95.101.10.67:443
ASN #20940 Akamai International B.V.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: IjvSRVcJlrA8KRtuHCIvySb7T9M4setamspkp4J4t5oLIH6qyzaHxu8PdVPZHXMCPnB1SRcSZOs=
x-amz-request-id: 9B7689322D7626CA
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
X-Akamai-EW-Subworker: 8096267
Date: Sun, 22 Oct 2023 20:00:23 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
cdn.stfilecamp.com/multi_push.js
205.185.216.10200 OK 1.1 kB URL GET HTTP/1.1 cdn.stfilecamp.com/multi_push.js
IP 205.185.216.10:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hash a50322f9d3f3fafe3fb02be02285e433
c0a894b3bfa545832c3ad1c2f145005d02e50ac4
cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99
GET /multi_push.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 20:00:23 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 1072
Content-Type: text/javascript
Last-Modified: Thu, 07 Jul 2022 14:21:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "a50322f9d3f3fafe3fb02be02285e433"
x-amz-request-id: tx00000d0bbee90816a4ddd-0065357f56-3c6f48ac-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698004822.dop208.sk1.t,1698004822.cds218.sk1.shn,1698004822.dop208.sk1.t,1698004823.cds203.sk1.pr
cdn.stfilecamp.com/stormtrk.js
205.185.216.10200 OK 6.8 kB URL GET HTTP/1.1 cdn.stfilecamp.com/stormtrk.js
IP 205.185.216.10:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hash 39e5f8ad757fe438c784e8d883e47ab0
6b2905489485100c83605f43186c5843031e1f3b
e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a
GET /stormtrk.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 20:00:23 GMT
Connection: Keep-Alive
Cache-Control: max-age=1983
Content-Length: 6807
Content-Type: text/javascript
Last-Modified: Sat, 24 Dec 2022 08:48:24 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx0000084059191831bdb85-0065357906-3c6f48ac-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698004822.dop208.sk1.t,1698004822.cds218.sk1.shn,1698004823.dop208.sk1.t,1698004823.cds014.sk1.c
api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_page_loaded%22%2C%22pixel_num%22%3A%22single%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A2839%7D&pixel_id=log_pixel_id
164.90.105.98200 OK 104 B URL POST HTTP/2 api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_page_loaded%22%2C%22pixel_num%22%3A%22single%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A2839%7D&pixel_id=log_pixel_id
IP 164.90.105.98:443
ASN #10122 BIGO TECHNOLOGY PTE. LTD.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File type ASCII text, with no line terminators
Hash 87c97a4216be1f3d40644d4c34586b68
f5ff1a5eb57b99ff7f9e911a32148e82864b69d1
7fcfa430133387d25d48516efbbf9cf869caf6a89b633dd43e50699d3f6fcc35
POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_page_loaded%22%2C%22pixel_num%22%3A%22single%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A262%2C%22drt%22%3A1958%2C%22lgt%22%3A2839%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 20:00:23 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-9c7fb6038498538e75ea3028e8396a83-0-00
X-Firefox-Spdy: h2
cdn.stfilecamp.com/fp.min.js
205.185.216.10200 OK 32 kB URL GET HTTP/1.1 cdn.stfilecamp.com/fp.min.js
IP 205.185.216.10:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
File type Unicode text, UTF-8 text, with very long lines (31370)
Hash 198f2f5b0a649f41fe890c59d37319aa
f24629687612889bb59f610df3879afcd766fb80
d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912
GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 20:00:23 GMT
Connection: Keep-Alive
Cache-Control: max-age=3427
Content-Length: 31705
Content-Type: text/javascript
Last-Modified: Mon, 13 Jun 2022 11:23:14 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx000005478f0edce40cc0a-0065357eaa-3c6f4933-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698004822.dop208.sk1.t,1698004822.cds218.sk1.shn,1698004823.dop208.sk1.t,1698004823.cds237.sk1.c
stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__
104.26.5.120200 OK 445 B URL GET HTTP/2 stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__
IP 104.26.5.120:443
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint12:CF:2B:DC:A1:B5:77:12:91:68:E8:DD:F0:22:9A:1B:06:84:6A:74
ValidityFri, 09 Dec 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (485)
Hash 9f72892b1dc23729a5256bb8c86029c5
915c440e883ece57bdea55f630f3790ede4a1019
406d3f5216a074e945400de12f4d78dba9d0467aa77fa04cec34d80e93afce43
GET /api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__ HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 22 Oct 2023 20:00:23 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fxDUExapBcCeD7gV60RoEAPEpVPs4uU%2BH5vHY1cjG1B90Le7m6U6r6wA5fiFd9ntiGupy3AIdxE1o8p0fQihCG0EKHCFky05h2OAAK%2FgRtBlB6Mp77lnxpxVfMUHDg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a453816d87b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
52.19.101.114200 OK 22 kB URL User Request GET HTTP/2 luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
IP 52.19.101.114:443
Certificate IssuerLet's Encrypt
Subjectluxl.cashappcard.club
FingerprintEF:11:EF:D3:28:65:BF:3D:23:A3:93:22:27:83:B0:61:33:C5:79:D8
ValidityWed, 27 Sep 2023 21:15:22 GMT - Tue, 26 Dec 2023 21:15:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert OpenPhish phishing Square, Inc.
GET /c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ HTTP/1.1
Host: luxl.cashappcard.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 22 Oct 2023 20:00:20 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=65357f54000a244d; Path=/; Expires=Thu, 21 Dec 2023 20:00:20 GMT; Secure; SameSite=None
unique_id2=65357f54000a2dfc; Path=/; Expires=Sat, 20 Jan 2024 20:00:20 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Sun, 22 Oct 2023 20:00:20 GMT; Secure; SameSite=None
65357f54000a2dfc_sl=[283148]; Path=/; Expires=Sun, 05 Nov 2023 20:00:20 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
api.imotech.video/ad/pixelfile.html
164.90.105.98200 OK 1.9 kB URL GET HTTP/2 api.imotech.video/ad/pixelfile.html
IP 164.90.105.98:443
ASN #10122 BIGO TECHNOLOGY PTE. LTD.
Requested by https://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1954), with no line terminators
Hash a68c3fd612781cf83ba376590dcc0d98
8b105bb0d774d95049b96a8dba785276789cde39
d3d89a8fe5379c59c594b886d54504462d96fba4e8e86ec32107b26124b0681f
GET /ad/pixelfile.html HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 20:00:22 GMT
content-type: text/html;charset=utf-8
bigotraceresponse: 00-80794fa5d0ba846f48fd41a3c4352510-0-00
content-encoding: gzip
X-Firefox-Spdy: h2