GET cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1695124007
104.17.25.14200 OK 23 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1695124007
IP 104.17.25.14:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (63851)
Hash 6ceffd5b35d350764ce6cb72313190f5
1a8bcae2241d253c1a41050b20c840d29878f3ae
6dbe9c2e13cf06c6633ea3fcf6d7bd30452561202a205c75a035cd1d8b93368f
GET /ajax/libs/gsap/3.9.1/gsap.min.js?1695124007 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Oct 2023 02:00:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 22890
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942a86-596a"
last-modified: Thu, 22 Jun 2023 11:03:34 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4536140
expires: Sat, 12 Oct 2024 02:00:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1awjtKxUE4Vo%2FDK4cKUUo6MDP3q5ypi3z65pSOgtcgE0yiNr92Rh4gXABfN%2FApi61eYcmUwKf7GtcH6HkWPyB%2FSIDW2Bi%2FQPHSyIboTbyVISojioxKIe8z7rUPSVgu3uLVziqymM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81a662c1ed4f56c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn-adef.akamaized.net/landings/283107/1695124007/css/basics.css?1695124007
23.36.76.96200 OK 3.0 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283107/1695124007/css/basics.css?1695124007
IP 23.36.76.96:443
ASN #20940 Akamai International B.V.
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (406), with CRLF line terminators
Hash d7add061aaa3f334c2ecbf76548a7ce4
1f336297a6dab38de52ce721a8f82f95826b9e1d
04a33fef3eae30e33a588a56921090563d9310fb953d444fe6bc527fa62225bb
GET /landings/283107/1695124007/css/basics.css?1695124007 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: AOMlXRNbBcY3XxQKlHWvUkKBfME7FZ5DzadgUGIQny6QWIIhQ+glBIw0CzSYD9n0HCL9V9j3g1k=
x-amz-request-id: 850MCC9T28NT9YB2
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "d7add061aaa3f334c2ecbf76548a7ce4"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 23 Oct 2023 02:00:19 GMT
Content-Length: 3031
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-adef.akamaized.net/landings/283107/1695124007/js/collector.js?1695124007
23.36.76.96200 OK 1.3 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283107/1695124007/js/collector.js?1695124007
IP 23.36.76.96:443
ASN #20940 Akamai International B.V.
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash f2b084c56561aec35e77c7bff672d092
fe6ace52724040f8b5814a2b6ca215b2c5c208a4
01263e02d9f2e53b49c8ae2cfd1f84b0a51f6680354d748d2bb8656ad04835d9
GET /landings/283107/1695124007/js/collector.js?1695124007 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: JcDRocm3XwJbo04eB4YkeQ3rS0LFAE4kC6f5u98rhNUpeTdRH3yQDO39bzEnw4DGaYI9SR1BvCM=
x-amz-request-id: FCXF41R3RJB18PMV
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "f2b084c56561aec35e77c7bff672d092"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 23 Oct 2023 02:00:20 GMT
Content-Length: 1291
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-adef.akamaized.net/landings/283107/1695124007/js/main.js?1695124007
23.36.76.96200 OK 2.4 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283107/1695124007/js/main.js?1695124007
IP 23.36.76.96:443
ASN #20940 Akamai International B.V.
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash 3daee38623a7ff444cfe7c96548df818
0008ff906f9204f10e5650804dbb978e296e1780
66da130b4b08c3e7b1a339891d8020ddf188bf4cb2c31f3176cf60a7dc10a49a
GET /landings/283107/1695124007/js/main.js?1695124007 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: f49f/9D6lP3uc4DdOUksaJj+q3iumDnjuYaJ8JhNEHFyYzo/DcyeBx6I2oI5JxEUHKURXw186Po=
x-amz-request-id: FCX0S0KKTN959SPM
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "3daee38623a7ff444cfe7c96548df818"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 23 Oct 2023 02:00:20 GMT
Content-Length: 2393
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1695124007
206.189.196.86200 OK 92 kB URL GET HTTP/1.1 cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1695124007
IP 206.189.196.86:443
ASN #14061 DIGITALOCEAN-ASN
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectcdnjs.claudflare.io
Fingerprint18:7C:79:BA:FF:48:8B:AA:43:33:E2:1F:F8:A6:0C:12:EA:07:A9:13
ValidityWed, 04 Oct 2023 20:01:27 GMT - Tue, 02 Jan 2024 20:01:26 GMT
File type ASCII text, with very long lines (65447)
Hash 5f134267bb0bbb337c14d3e3c17598ed
b00469b424732323ab9e2025452bd0ed3ce16039
c87337fa4f744e422666cec67da64263346e0d1cabf1148fd3562f67a754ec00
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1695124007 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Mon, 23 Oct 2023 02:00:20 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 92013
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Mon, 23 Oct 2023 14:00:20 GMT
GET cdn.stfilecamp.com/multi_push.js
205.185.216.42200 OK 1.1 kB URL GET HTTP/1.1 cdn.stfilecamp.com/multi_push.js
IP 205.185.216.42:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hash a50322f9d3f3fafe3fb02be02285e433
c0a894b3bfa545832c3ad1c2f145005d02e50ac4
cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99
GET /multi_push.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=80
Content-Length: 1072
Content-Type: text/javascript
Last-Modified: Thu, 07 Jul 2022 14:21:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "a50322f9d3f3fafe3fb02be02285e433"
x-amz-request-id: tx000008caa265a3ad17fd7-006535c5f4-3c6f487a-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop001.sk1.t,1698026420.cds245.sk1.shn,1698026420.dop001.sk1.t,1698026420.cds203.sk1.c
GET tt.stfilecamp.com/jsfiles/site-protect2.0.js
205.185.216.42200 OK 3.1 kB URL GET HTTP/1.1 tt.stfilecamp.com/jsfiles/site-protect2.0.js
IP 205.185.216.42:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
Hash fc96ab06b0f9fcea6731405215ae5daf
8af9f27d895eb69754919a2fc0d74760fecd3860
9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e
GET /jsfiles/site-protect2.0.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=2356
Content-Length: 3137
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "fc96ab06b0f9fcea6731405215ae5daf"
x-amz-request-id: tx00000986d85379ad6506f-006535ced8-7a12decc-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop225.sk1.t,1698026420.cds223.sk1.shn,1698026420.dop225.sk1.t,1698026420.cds231.sk1.c
GET tt.stfilecamp.com/jsfiles/second_back_multi.js
205.185.216.42200 OK 2.2 kB URL GET HTTP/1.1 tt.stfilecamp.com/jsfiles/second_back_multi.js
IP 205.185.216.42:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
File type HTML document, ASCII text
Hash 4034050f2be05cd41b77c4bb153f89eb
395187f1b6ad0a67fcdede70756a1c455903d84d
717b9e3b39eb201ec4cf8ade5f0ce9f2f2537b02b0b7f822ae159a8d1496df60
GET /jsfiles/second_back_multi.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=2281
Content-Length: 2209
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "4034050f2be05cd41b77c4bb153f89eb"
x-amz-request-id: tx00000418d981e67c69c81-006535ce8d-7a12c411-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop012.sk1.t,1698026420.cds237.sk1.shn,1698026420.dop012.sk1.t,1698026420.cds203.sk1.c
GET cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo.png
23.36.76.96200 OK 8.5 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo.png
IP 23.36.76.96:443
ASN #20940 Akamai International B.V.
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 300 x 68, 4-bit colormap, non-interlaced\012- data
Hash a0157852d2a3d6e9aefbd7c23419e566
27d57dbdf88d42be5defcea6a1675d4932d13664
3b6b61919a663134edcdfe300b4de7e821ffa07cc72c15611988fb86fbba935c
GET /landings/283107/1695124007/images/visa-logo.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: k9V3nd25uM6xkjtl2QTvk3ZuDlj3e9bEicSW5cdfCHl6+F+JYVoY9/6TnckYRpyFa9U9BR89DGI=
x-amz-request-id: 1T9F8VA4MBAA311H
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "a0157852d2a3d6e9aefbd7c23419e566"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8491
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
POST route.frest.pro/is_redirect
172.67.211.109200 OK 17 B URL POST HTTP/2 route.frest.pro/is_redirect
IP 172.67.211.109:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerGoogle Trust Services LLC
Subjectfrest.pro
FingerprintA1:6D:80:97:81:5F:7D:81:A1:3A:F7:AD:B0:7C:80:EF:AF:09:8F:04
ValiditySun, 08 Oct 2023 16:23:46 GMT - Sat, 06 Jan 2024 16:23:45 GMT
File type JSON data\012- , ASCII text
Hash 6dec798efb56f56f33660938f6249ff6
e889219883cef38754dc1e5df7ca5277b3b314c8
b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4
POST /is_redirect HTTP/1.1
Host: route.frest.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Oct 2023 02:00:21 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iXgbR2%2BtA7MSj%2BFufxyihr1E83H2113nWnZaOPvgHvBi2rBPHM%2F5s2nLJL5MF9rh1UHQ4ElpikQGk1SoDIOmg8RY8VOG29GoycSDeliKqIkgiFRMJXAmMsVlKIXam3NpNWI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a662c94eafb4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo-sq.png
23.36.76.96200 OK 16 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo-sq.png
IP 23.36.76.96:443
ASN #20940 Akamai International B.V.
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 174 x 172, 8-bit/color RGBA, non-interlaced\012- data
Hash ddb1a54620ba3a4424cb262e457ddbd9
0b0278f1dab8754cba8f1ab74e333f7a69e6f999
1fcf40f6f008f09af6b9d5e62a611d9b7c9920b37c5cbfb99621ffcc97243c95
GET /landings/283107/1695124007/images/visa-logo-sq.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: ABH0uJlIVcs8HWdMHaxLvfU5FdhZpIo+FeyHU4jgYCp5G2AIO5evhMnHw8BIRPokv7FlH+6owO8=
x-amz-request-id: 1T99M8ZTXJEC5GEV
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "ddb1a54620ba3a4424cb262e457ddbd9"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 16103
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-adef.akamaized.net/images/favicon.ico
23.36.76.96200 OK 4.1 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/images/favicon.ico
IP 23.36.76.96:443
ASN #20940 Akamai International B.V.
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI=
x-amz-request-id: 78F19547EBC3B810
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
X-Akamai-EW-Subworker: 8096267
Date: Mon, 23 Oct 2023 02:00:21 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn-adef.akamaized.net/landings/283107/1695124007/images/prize.png
23.36.76.96200 OK 121 kB URL GET HTTP/1.1 cdn-adef.akamaized.net/landings/283107/1695124007/images/prize.png
IP 23.36.76.96:443
ASN #20940 Akamai International B.V.
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File type PNG image data, 599 x 364, 8-bit/color RGBA, non-interlaced\012- data
Size 121 kB (121134 bytes)
Hash 9baf931fb00cffaf06a4f35d2278c84f
9080ebaa1e91376a8612cadd92ea4853a363b1da
57a7519e652fc50a895fd9e0b98c449188af8d27d7fde2a5294d7e1c80aec4ac
GET /landings/283107/1695124007/images/prize.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 7PqyUh+Xw1Tw7O+uwy7FuaY6bARb7zOK2SEz6KP9QToqiOb/fE8p51sWJD0SIYyYCimolBy3y1o=
x-amz-request-id: 1T9F5952V3298CXE
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "9baf931fb00cffaf06a4f35d2278c84f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 121134
Date: Mon, 23 Oct 2023 02:00:21 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
GET cdn.stfilecamp.com/stormtrk.js
205.185.216.42200 OK 6.8 kB URL GET HTTP/1.1 cdn.stfilecamp.com/stormtrk.js
IP 205.185.216.42:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hash 39e5f8ad757fe438c784e8d883e47ab0
6b2905489485100c83605f43186c5843031e1f3b
e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a
GET /stormtrk.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:21 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 6807
Content-Type: text/javascript
Last-Modified: Sat, 24 Dec 2022 08:48:24 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx00000d58f8a112f28491b-006535d3b5-3c6f48c0-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop001.sk1.t,1698026420.cds245.sk1.shn,1698026420.dop001.sk1.t,1698026421.cds014.sk1.pr
GET cdn.stfilecamp.com/fp.min.js
205.185.216.42200 OK 32 kB URL GET HTTP/1.1 cdn.stfilecamp.com/fp.min.js
IP 205.185.216.42:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
File type Unicode text, UTF-8 text, with very long lines (31370)
Hash 198f2f5b0a649f41fe890c59d37319aa
f24629687612889bb59f610df3879afcd766fb80
d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912
GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:22 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 31705
Content-Type: text/javascript
Last-Modified: Mon, 13 Jun 2022 11:23:14 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx00000df07035b8ec281da-006535d3b6-3c6f48ac-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop001.sk1.t,1698026420.cds245.sk1.shn,1698026421.dop001.sk1.t,1698026422.cds237.sk1.pr
GET stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2Ffa18787e86e4ff8f%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__-__GROUP_NAME__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__
104.26.5.120200 OK 485 B URL GET HTTP/2 stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2Ffa18787e86e4ff8f%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__-__GROUP_NAME__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__
IP 104.26.5.120:443
Requested by https://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint12:CF:2B:DC:A1:B5:77:12:91:68:E8:DD:F0:22:9A:1B:06:84:6A:74
ValidityFri, 09 Dec 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (506), with no line terminators
Hash 29da369f13f896af408697fa5405c9a4
877b7b757e9706a84a943100c70cbf6d4ef23e72
c9c5747b9a129d01598b9fd82e3e429fcf0dbcce6d5ee78d161faf46d71f8622
GET /api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2Ffa18787e86e4ff8f%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__-__GROUP_NAME__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__ HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Oct 2023 02:00:21 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LjB8Jjy2q9HYvnJ2ZAtrMaEfhIx5nDJ0wzd3HKtUm96DRbRQGibXZmI1rt9tfL4tFFXAr3mHw%2BIeNj6mUd6sa8UVVkdz9I2T8Qk8fe9hX%2BqbEbMrQOao70HdpV3%2Fow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a662cdfc2a0b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
52.19.101.114200 OK 26 kB URL User Request GET HTTP/2 hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__
IP 52.19.101.114:443
Certificate IssuerLet's Encrypt
Subjecthllj.giftcardmagiczone.club
Fingerprint21:24:0D:C0:5C:29:D9:F8:70:2A:08:26:D4:A9:3A:B6:F8:85:17:00
ValidityWed, 11 Oct 2023 02:15:18 GMT - Tue, 09 Jan 2024 02:15:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ HTTP/1.1
Host: hllj.giftcardmagiczone.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 02:00:19 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6535d3b3000a203e; Path=/; Expires=Fri, 22 Dec 2023 02:00:19 GMT; Secure; SameSite=None
unique_id2=6535d3b3000a2766; Path=/; Expires=Sun, 21 Jan 2024 02:00:19 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Mon, 23 Oct 2023 02:00:19 GMT; Secure; SameSite=None
6535d3b3000a2766_sl=[283107]; Path=/; Expires=Mon, 06 Nov 2023 02:00:19 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2