| cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1695124007 | 104.17.25.14 | 200 OK | 23 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1695124007 IP 104.17.25.14:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (63851) Hash6ceffd5b35d350764ce6cb72313190f5 1a8bcae2241d253c1a41050b20c840d29878f3ae 6dbe9c2e13cf06c6633ea3fcf6d7bd30452561202a205c75a035cd1d8b93368f
GET /ajax/libs/gsap/3.9.1/gsap.min.js?1695124007 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Oct 2023 02:00:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 22890
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942a86-596a"
last-modified: Thu, 22 Jun 2023 11:03:34 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4536140
expires: Sat, 12 Oct 2024 02:00:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1awjtKxUE4Vo%2FDK4cKUUo6MDP3q5ypi3z65pSOgtcgE0yiNr92Rh4gXABfN%2FApi61eYcmUwKf7GtcH6HkWPyB%2FSIDW2Bi%2FQPHSyIboTbyVISojioxKIe8z7rUPSVgu3uLVziqymM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81a662c1ed4f56c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn-adef.akamaized.net/landings/283107/1695124007/css/basics.css?1695124007 | 23.36.76.96 | 200 OK | 3.0 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283107/1695124007/css/basics.css?1695124007 IP 23.36.76.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (406), with CRLF line terminators Hashd7add061aaa3f334c2ecbf76548a7ce4 1f336297a6dab38de52ce721a8f82f95826b9e1d 04a33fef3eae30e33a588a56921090563d9310fb953d444fe6bc527fa62225bb
GET /landings/283107/1695124007/css/basics.css?1695124007 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: AOMlXRNbBcY3XxQKlHWvUkKBfME7FZ5DzadgUGIQny6QWIIhQ+glBIw0CzSYD9n0HCL9V9j3g1k=
x-amz-request-id: 850MCC9T28NT9YB2
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "d7add061aaa3f334c2ecbf76548a7ce4"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 23 Oct 2023 02:00:19 GMT
Content-Length: 3031
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/landings/283107/1695124007/js/collector.js?1695124007 | 23.36.76.96 | 200 OK | 1.3 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283107/1695124007/js/collector.js?1695124007 IP 23.36.76.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hashf2b084c56561aec35e77c7bff672d092 fe6ace52724040f8b5814a2b6ca215b2c5c208a4 01263e02d9f2e53b49c8ae2cfd1f84b0a51f6680354d748d2bb8656ad04835d9
GET /landings/283107/1695124007/js/collector.js?1695124007 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: JcDRocm3XwJbo04eB4YkeQ3rS0LFAE4kC6f5u98rhNUpeTdRH3yQDO39bzEnw4DGaYI9SR1BvCM=
x-amz-request-id: FCXF41R3RJB18PMV
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "f2b084c56561aec35e77c7bff672d092"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 23 Oct 2023 02:00:20 GMT
Content-Length: 1291
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/landings/283107/1695124007/js/main.js?1695124007 | 23.36.76.96 | 200 OK | 2.4 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283107/1695124007/js/main.js?1695124007 IP 23.36.76.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash3daee38623a7ff444cfe7c96548df818 0008ff906f9204f10e5650804dbb978e296e1780 66da130b4b08c3e7b1a339891d8020ddf188bf4cb2c31f3176cf60a7dc10a49a
GET /landings/283107/1695124007/js/main.js?1695124007 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: f49f/9D6lP3uc4DdOUksaJj+q3iumDnjuYaJ8JhNEHFyYzo/DcyeBx6I2oI5JxEUHKURXw186Po=
x-amz-request-id: FCX0S0KKTN959SPM
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "3daee38623a7ff444cfe7c96548df818"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Mon, 23 Oct 2023 02:00:20 GMT
Content-Length: 2393
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1695124007 | 206.189.196.86 | 200 OK | 92 kB |
URL GET HTTP/1.1cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1695124007 IP 206.189.196.86:443
ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectcdnjs.claudflare.io Fingerprint18:7C:79:BA:FF:48:8B:AA:43:33:E2:1F:F8:A6:0C:12:EA:07:A9:13 ValidityWed, 04 Oct 2023 20:01:27 GMT - Tue, 02 Jan 2024 20:01:26 GMT
File typeASCII text, with very long lines (65447) Hash5f134267bb0bbb337c14d3e3c17598ed b00469b424732323ab9e2025452bd0ed3ce16039 c87337fa4f744e422666cec67da64263346e0d1cabf1148fd3562f67a754ec00
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1695124007 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Mon, 23 Oct 2023 02:00:20 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 92013
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Mon, 23 Oct 2023 14:00:20 GMT
|
|
| cdn.stfilecamp.com/multi_push.js | 205.185.216.42 | 200 OK | 1.1 kB |
URL GET HTTP/1.1cdn.stfilecamp.com/multi_push.js IP 205.185.216.42:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32 ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hasha50322f9d3f3fafe3fb02be02285e433 c0a894b3bfa545832c3ad1c2f145005d02e50ac4 cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99
GET /multi_push.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=80
Content-Length: 1072
Content-Type: text/javascript
Last-Modified: Thu, 07 Jul 2022 14:21:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "a50322f9d3f3fafe3fb02be02285e433"
x-amz-request-id: tx000008caa265a3ad17fd7-006535c5f4-3c6f487a-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop001.sk1.t,1698026420.cds245.sk1.shn,1698026420.dop001.sk1.t,1698026420.cds203.sk1.c
|
|
| tt.stfilecamp.com/jsfiles/site-protect2.0.js | 205.185.216.42 | 200 OK | 3.1 kB |
URL GET HTTP/1.1tt.stfilecamp.com/jsfiles/site-protect2.0.js IP 205.185.216.42:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
Hashfc96ab06b0f9fcea6731405215ae5daf 8af9f27d895eb69754919a2fc0d74760fecd3860 9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e
GET /jsfiles/site-protect2.0.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=2356
Content-Length: 3137
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "fc96ab06b0f9fcea6731405215ae5daf"
x-amz-request-id: tx00000986d85379ad6506f-006535ced8-7a12decc-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop225.sk1.t,1698026420.cds223.sk1.shn,1698026420.dop225.sk1.t,1698026420.cds231.sk1.c
|
|
| tt.stfilecamp.com/jsfiles/second_back_multi.js | 205.185.216.42 | 200 OK | 2.2 kB |
URL GET HTTP/1.1tt.stfilecamp.com/jsfiles/second_back_multi.js IP 205.185.216.42:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
File typeHTML document, ASCII text Hash4034050f2be05cd41b77c4bb153f89eb 395187f1b6ad0a67fcdede70756a1c455903d84d 717b9e3b39eb201ec4cf8ade5f0ce9f2f2537b02b0b7f822ae159a8d1496df60
GET /jsfiles/second_back_multi.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=2281
Content-Length: 2209
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "4034050f2be05cd41b77c4bb153f89eb"
x-amz-request-id: tx00000418d981e67c69c81-006535ce8d-7a12c411-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop012.sk1.t,1698026420.cds237.sk1.shn,1698026420.dop012.sk1.t,1698026420.cds203.sk1.c
|
|
| cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo.png | 23.36.76.96 | 200 OK | 8.5 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo.png IP 23.36.76.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 300 x 68, 4-bit colormap, non-interlaced\012- data Hasha0157852d2a3d6e9aefbd7c23419e566 27d57dbdf88d42be5defcea6a1675d4932d13664 3b6b61919a663134edcdfe300b4de7e821ffa07cc72c15611988fb86fbba935c
GET /landings/283107/1695124007/images/visa-logo.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: k9V3nd25uM6xkjtl2QTvk3ZuDlj3e9bEicSW5cdfCHl6+F+JYVoY9/6TnckYRpyFa9U9BR89DGI=
x-amz-request-id: 1T9F8VA4MBAA311H
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "a0157852d2a3d6e9aefbd7c23419e566"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8491
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| route.frest.pro/is_redirect | 172.67.211.109 | 200 OK | 17 B |
URL POST HTTP/2route.frest.pro/is_redirect IP 172.67.211.109:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerGoogle Trust Services LLC Subjectfrest.pro FingerprintA1:6D:80:97:81:5F:7D:81:A1:3A:F7:AD:B0:7C:80:EF:AF:09:8F:04 ValiditySun, 08 Oct 2023 16:23:46 GMT - Sat, 06 Jan 2024 16:23:45 GMT
File typeJSON data\012- , ASCII text Hash6dec798efb56f56f33660938f6249ff6 e889219883cef38754dc1e5df7ca5277b3b314c8 b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4
POST /is_redirect HTTP/1.1
Host: route.frest.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Oct 2023 02:00:21 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iXgbR2%2BtA7MSj%2BFufxyihr1E83H2113nWnZaOPvgHvBi2rBPHM%2F5s2nLJL5MF9rh1UHQ4ElpikQGk1SoDIOmg8RY8VOG29GoycSDeliKqIkgiFRMJXAmMsVlKIXam3NpNWI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a662c94eafb4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo-sq.png | 23.36.76.96 | 200 OK | 16 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283107/1695124007/images/visa-logo-sq.png IP 23.36.76.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 174 x 172, 8-bit/color RGBA, non-interlaced\012- data Hashddb1a54620ba3a4424cb262e457ddbd9 0b0278f1dab8754cba8f1ab74e333f7a69e6f999 1fcf40f6f008f09af6b9d5e62a611d9b7c9920b37c5cbfb99621ffcc97243c95
GET /landings/283107/1695124007/images/visa-logo-sq.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: ABH0uJlIVcs8HWdMHaxLvfU5FdhZpIo+FeyHU4jgYCp5G2AIO5evhMnHw8BIRPokv7FlH+6owO8=
x-amz-request-id: 1T99M8ZTXJEC5GEV
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "ddb1a54620ba3a4424cb262e457ddbd9"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 16103
Date: Mon, 23 Oct 2023 02:00:20 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/images/favicon.ico | 23.36.76.96 | 200 OK | 4.1 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/images/favicon.ico IP 23.36.76.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI=
x-amz-request-id: 78F19547EBC3B810
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
X-Akamai-EW-Subworker: 8096267
Date: Mon, 23 Oct 2023 02:00:21 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/landings/283107/1695124007/images/prize.png | 23.36.76.96 | 200 OK | 121 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283107/1695124007/images/prize.png IP 23.36.76.96:443
ASN#20940 Akamai International B.V.
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 599 x 364, 8-bit/color RGBA, non-interlaced\012- data Size121 kB (121134 bytes) Hash9baf931fb00cffaf06a4f35d2278c84f 9080ebaa1e91376a8612cadd92ea4853a363b1da 57a7519e652fc50a895fd9e0b98c449188af8d27d7fde2a5294d7e1c80aec4ac
GET /landings/283107/1695124007/images/prize.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: 7PqyUh+Xw1Tw7O+uwy7FuaY6bARb7zOK2SEz6KP9QToqiOb/fE8p51sWJD0SIYyYCimolBy3y1o=
x-amz-request-id: 1T9F5952V3298CXE
Last-Modified: Tue, 19 Sep 2023 11:46:49 GMT
ETag: "9baf931fb00cffaf06a4f35d2278c84f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 121134
Date: Mon, 23 Oct 2023 02:00:21 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn.stfilecamp.com/stormtrk.js | 205.185.216.42 | 200 OK | 6.8 kB |
URL GET HTTP/1.1cdn.stfilecamp.com/stormtrk.js IP 205.185.216.42:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32 ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hash39e5f8ad757fe438c784e8d883e47ab0 6b2905489485100c83605f43186c5843031e1f3b e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a
GET /stormtrk.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:21 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 6807
Content-Type: text/javascript
Last-Modified: Sat, 24 Dec 2022 08:48:24 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx00000d58f8a112f28491b-006535d3b5-3c6f48c0-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop001.sk1.t,1698026420.cds245.sk1.shn,1698026420.dop001.sk1.t,1698026421.cds014.sk1.pr
|
|
| cdn.stfilecamp.com/fp.min.js | 205.185.216.42 | 200 OK | 32 kB |
URL GET HTTP/1.1cdn.stfilecamp.com/fp.min.js IP 205.185.216.42:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32 ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
File typeUnicode text, UTF-8 text, with very long lines (31370) Hash198f2f5b0a649f41fe890c59d37319aa f24629687612889bb59f610df3879afcd766fb80 d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912
GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 23 Oct 2023 02:00:22 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 31705
Content-Type: text/javascript
Last-Modified: Mon, 13 Jun 2022 11:23:14 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx00000df07035b8ec281da-006535d3b6-3c6f48ac-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1698026420.dop001.sk1.t,1698026420.cds245.sk1.shn,1698026421.dop001.sk1.t,1698026422.cds237.sk1.pr
|
|
| stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2Ffa18787e86e4ff8f%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__-__GROUP_NAME__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__ | 104.26.5.120 | 200 OK | 485 B |
URL GET HTTP/2stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2Ffa18787e86e4ff8f%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__-__GROUP_NAME__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__ IP 104.26.5.120:443
Requested byhttps://hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint12:CF:2B:DC:A1:B5:77:12:91:68:E8:DD:F0:22:9A:1B:06:84:6A:74 ValidityFri, 09 Dec 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (506), with no line terminators Hash29da369f13f896af408697fa5405c9a4 877b7b757e9706a84a943100c70cbf6d4ef23e72 c9c5747b9a129d01598b9fd82e3e429fcf0dbcce6d5ee78d161faf46d71f8622
GET /api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2Ffa18787e86e4ff8f%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__-__GROUP_NAME__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__ HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 23 Oct 2023 02:00:21 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LjB8Jjy2q9HYvnJ2ZAtrMaEfhIx5nDJ0wzd3HKtUm96DRbRQGibXZmI1rt9tfL4tFFXAr3mHw%2BIeNj6mUd6sa8UVVkdz9I2T8Qk8fe9hX%2BqbEbMrQOao70HdpV3%2Fow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81a662cdfc2a0b59-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ | 52.19.101.114 | 200 OK | 26 kB |
URL User Request GET HTTP/2hllj.giftcardmagiczone.club/c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ IP 52.19.101.114:443
CertificateIssuerLet's Encrypt Subjecthllj.giftcardmagiczone.club Fingerprint21:24:0D:C0:5C:29:D9:F8:70:2A:08:26:D4:A9:3A:B6:F8:85:17:00 ValidityWed, 11 Oct 2023 02:15:18 GMT - Tue, 09 Jan 2024 02:15:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c/fa18787e86e4ff8f?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__-__GROUP_NAME__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__ HTTP/1.1
Host: hllj.giftcardmagiczone.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Mon, 23 Oct 2023 02:00:19 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6535d3b3000a203e; Path=/; Expires=Fri, 22 Dec 2023 02:00:19 GMT; Secure; SameSite=None
unique_id2=6535d3b3000a2766; Path=/; Expires=Sun, 21 Jan 2024 02:00:19 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Mon, 23 Oct 2023 02:00:19 GMT; Secure; SameSite=None
6535d3b3000a2766_sl=[283107]; Path=/; Expires=Mon, 06 Nov 2023 02:00:19 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
|
|