Report - luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME_

Report Overview

Visited public
2023-10-22 00:00:52
Tags
URL
luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Finishing URL
luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
IP / ASN
52.19.101.114
#16509 AMAZON-02
Title
Cash App 1000$ Bonus

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
route.frest.pro	unknown	2022-10-19	2023-01-02 14:11:29	2023-10-20 22:00:16	514 B	742 B	104.21.77.196
stormtrk.com	289095	2019-05-15	2019-05-17 20:09:53	2023-10-20 22:00:17	789 B	1.2 kB	172.67.69.203
cdn-adef.akamaized.net	125719	2014-03-18	2018-02-06 08:56:01	2023-10-21 05:44:30	6.8 kB	311 kB	95.101.10.67
api.imotech.video	140520	2019-11-08	2021-01-28 14:59:54	2023-10-21 18:55:04	5.8 kB	26 kB	164.90.105.98
luxl.cashappcard.club	unknown	2023-09-27	2023-10-03 10:00:25	2023-10-20 14:00:10	720 B	3.9 kB	52.19.101.114
cdnjs.claudflare.io	unknown	2021-08-09	2021-08-12 10:01:46	2023-10-20 22:00:15	451 B	92 kB	206.189.196.86
tt.stfilecamp.com	unknown	2021-09-06	2022-03-08 16:47:05	2023-10-20 22:00:16	859 B	6.7 kB	205.185.216.42
cdn.stfilecamp.com	400667	2021-09-06	2021-09-06 17:32:03	2023-10-20 22:00:16	1.2 kB	42 kB	205.185.216.10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-10-22	medium	claudflare.io	Sinkholed

ThreatFox

No alerts detected

JavaScript (10)

	URL	From	Size	First Seen	Last Seen
	cdn-adef.akamaized.net/landings/283335/1696402954/js/collector.js?1696402955	ScriptElement	5.6 kB	2023-10-15	2024-08-21
Pretty URL cdn-adef.akamaized.net/landings/283335/1696402954/js/collector.js?1696402955 IP 95.101.10.67 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-15 10:00 Last Seen2024-08-21 04:39 Times Seen9 Hash 93e4a4c9c70b874b19f31dc31f0aaa16 80dd02667e6dbbcb27e9640432206428a08861c2 b9c056ce3df686a7b1462e24754bb83f4b522f167a79f38e6e2e467341c71ad0 Loading...

	cdn.stfilecamp.com/multi_push.js	ScriptElement	1.1 kB	2023-03-07	2024-08-21
Pretty URL cdn.stfilecamp.com/multi_push.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2024-08-21 09:42 Times Seen51 Hash a50322f9d3f3fafe3fb02be02285e433 c0a894b3bfa545832c3ad1c2f145005d02e50ac4 cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99 Loading...

	cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402955	ScriptElement	92 kB	2023-10-15	2023-10-31
Pretty URL cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402955 IP 206.189.196.86 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-15 10:00 Last Seen2023-10-31 09:00 Times Seen7 Hash b5c3d25047eb3415e401a40da41e5118 d0a4ccdf5cd564dd297e783911dd108e5f6a8ef3 8877058afffb4c9b8bffde8daf79fc766ad4234631f9446ebe1df65d877b34f9 Loading...

	cdn-adef.akamaized.net/landings/283335/1696402954/js/main.js?1696402955	ScriptElement	3.2 kB	2023-10-15	2025-03-07
Pretty URL cdn-adef.akamaized.net/landings/283335/1696402954/js/main.js?1696402955 IP 95.101.10.67 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-15 13:31 Last Seen2025-03-07 04:00 Times Seen20 Hash f92922776a82a9674c04b09b005bcd10 de543f3a95ae8bd1e978dedc8d90882e33245dfa b4314d21961d6b187b57d19e8d97b14d98d35416b0814f610395f5163f93b657 Loading...

	tt.stfilecamp.com/jsfiles/site-protect2.0.js	ScriptElement	3.1 kB	2023-03-07	2025-03-07
Pretty URL tt.stfilecamp.com/jsfiles/site-protect2.0.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-03-07 04:00 Times Seen89 Hash fc96ab06b0f9fcea6731405215ae5daf 8af9f27d895eb69754919a2fc0d74760fecd3860 9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e Loading...

	tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js	ScriptElement	2.3 kB	2023-03-08	2024-09-20
Pretty URL tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:39 Last Seen2024-09-20 21:37 Times Seen21 Hash 96af925d55cad494665471c73ac01b04 5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b 1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2 Loading...

	cdn.stfilecamp.com/stormtrk.js	ScriptElement	6.8 kB	2023-03-12	2025-03-07
Pretty URL cdn.stfilecamp.com/stormtrk.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:32 Last Seen2025-03-07 06:00 Times Seen131 Hash 39e5f8ad757fe438c784e8d883e47ab0 6b2905489485100c83605f43186c5843031e1f3b e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a Loading...

	cdn.stfilecamp.com/fp.min.js	ScriptElement	32 kB	2023-04-06	2025-05-09
Pretty URL cdn.stfilecamp.com/fp.min.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 21:01 Last Seen2025-05-09 18:17 Times Seen568 Hash 198f2f5b0a649f41fe890c59d37319aa f24629687612889bb59f610df3879afcd766fb80 d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912 Loading...

	luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__	ScriptElement	128 B	2023-10-15	2024-08-21
Pretty URL luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ IP 52.19.101.114 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-15 10:00 Last Seen2024-08-21 04:39 Times Seen6 Hash 649fd883513ab731dc5ac4453d84bae7 4763c1a9570c74830cc94adfae7077aab12bec86 8f82953bf90a1a2bcd6e591b2157707b83d35e47c943f3f47b46991981e38e8a Loading...

	api.imotech.video/ad/events.js?pixel_id=903883351103051008	ScriptElement	64 kB	2023-10-15	2023-10-29
Pretty URL api.imotech.video/ad/events.js?pixel_id=903883351103051008 IP 164.90.105.98 ASN #10122 BIGO TECHNOLOGY PTE. LTD. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-15 10:00 Last Seen2023-10-29 19:16 Times Seen8 Hash 23dcfaf1121f59dae1a879f3caa81803 b07663ff8d798e149fd233449578e919ae436658 e0e073c811c4eb13048220e8c0cab51d0c447e16ef2d674da9e84bb6cd634726 Loading...

HTTP Transactions (30)

URL IP Response Size

cdn-adef.akamaized.net/landings/283335/1696402954/js/collector.js?1696402955

95.101.10.67

200 OK

1.3 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/js/collector.js?1696402955
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.3 kB (1293 bytes)
Hash
93e4a4c9c70b874b19f31dc31f0aaa16
80dd02667e6dbbcb27e9640432206428a08861c2
b9c056ce3df686a7b1462e24754bb83f4b522f167a79f38e6e2e467341c71ad0

HTTP Headers

GET /landings/283335/1696402954/js/collector.js?1696402955 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: xXT1P09pTsgjwKvn/0birI4x8YlO9BqhXgPBhbQjvxR/2z3K0nR136Xt6ILjZqxldXFxM+uRtPo=
x-amz-request-id: 9S3KFQN91SSZG7GY
Last-Modified: Wed, 04 Oct 2023 07:02:38 GMT
ETag: "93e4a4c9c70b874b19f31dc31f0aaa16"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 22 Oct 2023 00:00:35 GMT
Content-Length: 1293
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

api.imotech.video/ad/events.js?pixel_id=903883351103051008

164.90.105.98

200 OK

22 kB

URL GET HTTP/2
api.imotech.video/ad/events.js?pixel_id=903883351103051008
IP
164.90.105.98:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
Unicode text, UTF-8 text, with very long lines (63765), with no line terminators
Size
22 kB (21627 bytes)
Hash
23dcfaf1121f59dae1a879f3caa81803
b07663ff8d798e149fd233449578e919ae436658
e0e073c811c4eb13048220e8c0cab51d0c447e16ef2d674da9e84bb6cd634726

HTTP Headers

GET /ad/events.js?pixel_id=903883351103051008 HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 00:00:35 GMT
content-type: application/javascript;charset=utf-8
content-length: 21627
access-control-allow-origin: *
bigotraceresponse: 00-366258a8955d557127bf1b4656108e9e-0-00
content-encoding: gzip
cache-control: private, max-age=900
X-Firefox-Spdy: h2

luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__

52.19.101.114

200 OK

3.3 kB

URL User Request GET HTTP/2
luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
IP
52.19.101.114:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjectluxl.cashappcard.club
FingerprintEF:11:EF:D3:28:65:BF:3D:23:A3:93:22:27:83:B0:61:33:C5:79:D8
ValidityWed, 27 Sep 2023 21:15:22 GMT - Tue, 26 Dec 2023 21:15:21 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (971), with CRLF, LF line terminators
Size
3.3 kB (3319 bytes)
Hash
9989839303d3fdcdac22c14909aac206
5a7ac9606710ef1e5dc6256ba9be80f4fec48519
e687a13e48c05108476146dc39f80ae69ea44fa6338dacd7de98f97db89085b4

HTTP Headers

GET /c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ HTTP/1.1
Host: luxl.cashappcard.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 22 Oct 2023 00:00:34 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=65346622000e2253; Path=/; Expires=Thu, 21 Dec 2023 00:00:34 GMT; Secure; SameSite=None
unique_id2=65346622000e2aa3; Path=/; Expires=Sat, 20 Jan 2024 00:00:34 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Sun, 22 Oct 2023 00:00:34 GMT; Secure; SameSite=None
65346622000e2aa3_sl=[283335]; Path=/; Expires=Sun, 05 Nov 2023 00:00:34 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955

95.101.10.67

200 OK

5.0 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
5.0 kB (5014 bytes)
Hash
0021c58a5727a0e0228c215c922420bb
606161f4290b01cafca9984a1c3cf31c6a71107e
d1a09c2a14d2287059f6e25e70250ce5800159df5e9c45d5396d581fb688aea3

HTTP Headers

GET /landings/283335/1696402954/css/style.css?1696402955 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: pX15CLoqFDy9crDtO6x59CpD7nfndT+xaGmVtxcmTunBWb5wdEezmrNkerzmjQ2Au/i06T0LiGk=
x-amz-request-id: NDY3Y96WETD2WB4P
Last-Modified: Wed, 04 Oct 2023 07:02:37 GMT
ETag: "0021c58a5727a0e0228c215c922420bb"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 22 Oct 2023 00:00:35 GMT
Content-Length: 5014
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402955

206.189.196.86

200 OK

92 kB

URL GET HTTP/1.1
cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402955
IP
206.189.196.86:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectcdnjs.claudflare.io
Fingerprint18:7C:79:BA:FF:48:8B:AA:43:33:E2:1F:F8:A6:0C:12:EA:07:A9:13
ValidityWed, 04 Oct 2023 20:01:27 GMT - Tue, 02 Jan 2024 20:01:26 GMT

File type
ASCII text, with very long lines (65447)
Size
92 kB (92013 bytes)
Hash
b5c3d25047eb3415e401a40da41e5118
d0a4ccdf5cd564dd297e783911dd108e5f6a8ef3
8877058afffb4c9b8bffde8daf79fc766ad4234631f9446ebe1df65d877b34f9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402955 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Sun, 22 Oct 2023 00:00:36 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 92013
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Sun, 22 Oct 2023 12:00:36 GMT

cdn-adef.akamaized.net/landings/283335/1696402954/images/walmart_1.png

95.101.10.67

200 OK

156 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/walmart_1.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 744 x 450, 8-bit/color RGBA, non-interlaced\012- data
Size
156 kB (156052 bytes)
Hash
b455862233020904c288e800b66d94ae
e748b869561314242c6eb681c2e5235e52d8479a
021aed6b5c3faec547872ebcfdf5698a33ccedf6d5d73aa63f60e27af6e4a579

HTTP Headers

GET /landings/283335/1696402954/images/walmart_1.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: nu5AKjqm1KgcgekvH4JEVq4A1cJxTCN/ezdv6UxBY6u9I8D7OCrrvMQVRYqsWbncV8SGVd6TjZc=
x-amz-request-id: 30MJ3FH47EK6X519
Last-Modified: Wed, 04 Oct 2023 07:02:37 GMT
ETag: "b455862233020904c288e800b66d94ae"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 156052
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/prizewheel-amazon_2.png

95.101.10.67

200 OK

96 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/prizewheel-amazon_2.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 502 x 502, 8-bit/color RGBA, non-interlaced\012- data
Size
96 kB (95867 bytes)
Hash
674e0ef18dbf33779bba7aa543de839b
971823041878e49e1dfbd7b7f0d6efc3d19f823b
bdb748422cf053c44feed72ca58e045a5792c9f2da215abf71cd4380271d4dca

HTTP Headers

GET /landings/283335/1696402954/images/prizewheel-amazon_2.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: mBCzZxs1S4J97em9T/fTYCD2Ve2dLiBT+j4XLVYMvzpqgjYfHpTtBc5tRiKOegh9wG3oukD6gP8=
x-amz-request-id: 9K56312CZAGSZC6N
Last-Modified: Wed, 04 Oct 2023 07:02:37 GMT
ETag: "674e0ef18dbf33779bba7aa543de839b"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 95867
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/11.png

95.101.10.67

200 OK

20 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/11.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 531 x 531, 8-bit/color RGBA, non-interlaced\012- data
Size
20 kB (19608 bytes)
Hash
1c7e1037a62b15dc080894acb7955aa7
4400836d965f60e0dc7f093ce50b2c869f0f5ab7
c379ce20c3e8081a24ee7f71d94ad73d88d2d2db94c99b1d33effd4d6849f31a

HTTP Headers

GET /landings/283335/1696402954/images/11.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: G6h8JiBxcV5wb+DPWouDnCf9kT+swmWc5BycaKt0+CoHIcABZ5A912vQ55exhi9mh+MUGr07QhU=
x-amz-request-id: 9RQ3PBA08EKY5WNN
Last-Modified: Wed, 04 Oct 2023 07:02:37 GMT
ETag: "1c7e1037a62b15dc080894acb7955aa7"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 19608
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/3.jpg

95.101.10.67

200 OK

1.1 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/3.jpg
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1063 bytes)
Hash
72ab252d8ff828965ad984b8ab16991f
e45ea3665e80feb2e6309b04e1ec2e8d41bb279b
c5d70c3abf95aecc84bcc1b1f9fc25848e690852071169bf57522fd671550291

HTTP Headers

GET /landings/283335/1696402954/images/3.jpg HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: HQnbUOmopsnfX6S3tvhaWDZCVIkJRGD0dDd55FVIgfjN/eY73IbSxz/Uabhb1VxfpZYA0AqQZ60=
x-amz-request-id: 9K5A0NNFD6F67JDE
Last-Modified: Wed, 04 Oct 2023 07:02:36 GMT
ETag: "72ab252d8ff828965ad984b8ab16991f"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 1063
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/1.jpg

95.101.10.67

200 OK

3.9 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/1.jpg
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x52, components 3\012- data
Size
3.9 kB (3900 bytes)
Hash
72c067fe856886245e7c47c7ff84e041
5210cb05f897db334c61f8971ccec9a7396ea8a7
9a106ad9f340c7bafdd365ea1ad24b9336c304b1e72653eb58e84b5604471030

HTTP Headers

GET /landings/283335/1696402954/images/1.jpg HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: tsJbTQhv5YovVvDg2UBVI3vrNJrc5CnSk+ql6LU/mXRydts57pofCRGxWnOk8n0drg/3dxJNNZc=
x-amz-request-id: 611GB4F97M7Y1V34
Last-Modified: Wed, 04 Oct 2023 07:02:36 GMT
ETag: "72c067fe856886245e7c47c7ff84e041"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 3900
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/5.jpg

95.101.10.67

200 OK

3.3 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/5.jpg
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x50, components 3\012- data
Size
3.3 kB (3268 bytes)
Hash
92c40a962aa579868b64b8b7f1b6575c
f676f1ce463a7b0b7b2c05587a9b52285e55e679
64e47fb0b1dc439d03463c15a7977d88988a4d3f7d563e3d772cc9ca8d41e414

HTTP Headers

GET /landings/283335/1696402954/images/5.jpg HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: Ae3wC/INVkUW/rDQqmEUE1ka8p+t7C8tCxFlV/zG6j3VkBW6j40svfDFSXZrqtY/ILax3to5dr8=
x-amz-request-id: 30MTHW09YYJ3WNM6
Last-Modified: Wed, 04 Oct 2023 07:02:37 GMT
ETag: "92c40a962aa579868b64b8b7f1b6575c"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 3268
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2197%7D&pixel_id=log_pixel_id

164.90.105.98

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2197%7D&pixel_id=log_pixel_id
IP
164.90.105.98:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
a42bee88e09059fe681f418ebd0d66c6
30d2ace89a3b7d548c6507876e4e546895cc12a5
4f9a2c364b5c74c356d52e84029d5328ccbfc79a65d0dfaeb60a6fe762699cc6

HTTP Headers

POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2197%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 00:00:36 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-b962847856fc0a86e261e668d5e94f45-0-00
X-Firefox-Spdy: h2

api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2366%7D&pixel_id=log_pixel_id

164.90.105.98

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2366%7D&pixel_id=log_pixel_id
IP
164.90.105.98:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
b00f33d7635de38e2adb6ffe6bcfce6a
e7e05a8a51c2465aa44eb3013331e0517bc0d056
8aef39f5a2e4545ce4d71ab21a0a6e94110b12434629e220aaa3c4482e844f84

HTTP Headers

POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2366%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 00:00:36 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-5f92d46b71ff10b3d74f329b07241fb6-0-00
X-Firefox-Spdy: h2

api.imotech.video/bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932837362&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2196%7D

164.90.105.98

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932837362&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2196%7D
IP
164.90.105.98:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
87672a0d31ef68edb9f57850a222fde0
6c174118482927b317601bac126b52627904b901
fa0555e607e2337e30366115afc1de09bb16e6f8f29812520e352691b9e538c1

HTTP Headers

POST /bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932837362&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2196%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 00:00:36 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-b556fb2eb776ad8ce7e0da0167171b0b-0-00
X-Firefox-Spdy: h2

api.imotech.video/bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932837363&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2196%7D

164.90.105.98

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932837363&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2196%7D
IP
164.90.105.98:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
8baa0b59515087f4663f0cbbd1c2a2ef
fede72f723d0702f0fb6dc08a6cdf2a3cceca918
cb141fcde32f3c8d34a2c41f2edf0b944754c332164a3d9efde8b9a75f9d3203

HTTP Headers

POST /bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932837363&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22lgt%22%3A2196%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 00:00:36 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-86237cce60bcc1b3fa5872b79b29e890-0-00
X-Firefox-Spdy: h2

tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js

205.185.216.42

200 OK

2.3 kB

URL GET HTTP/1.1
tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js
IP
205.185.216.42:443
ASN
#20446 STACKPATH-CDN

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT

File type
HTML document, ASCII text
Size
2.3 kB (2307 bytes)
Hash
96af925d55cad494665471c73ac01b04
5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b
1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2

HTTP Headers

GET /jsfiles/second_back_multi_bigo.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: Keep-Alive
Cache-Control: max-age=3434
Content-Length: 2307
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "96af925d55cad494665471c73ac01b04"
x-amz-request-id: tx00000ed5a1dba39468b5c-006534657e-7a12c4e8-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster: 
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697932836.dop223.sk1.t,1697932836.cds259.sk1.shn,1697932836.dop223.sk1.t,1697932836.cds239.sk1.c

cdn.stfilecamp.com/multi_push.js

205.185.216.10

200 OK

1.1 kB

URL GET HTTP/1.1
cdn.stfilecamp.com/multi_push.js
IP
205.185.216.10:443
ASN
#20446 STACKPATH-CDN

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT

File type
ASCII text
Size
1.1 kB (1072 bytes)
Hash
a50322f9d3f3fafe3fb02be02285e433
c0a894b3bfa545832c3ad1c2f145005d02e50ac4
cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99

HTTP Headers

GET /multi_push.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: Keep-Alive
Cache-Control: max-age=1034
Content-Length: 1072
Content-Type: text/javascript
Last-Modified: Thu, 07 Jul 2022 14:21:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "a50322f9d3f3fafe3fb02be02285e433"
x-amz-request-id: tx00000747ae1900cf3a358-0065345c1e-3c6f48c0-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697932836.dop229.sk1.t,1697932836.cds222.sk1.shn,1697932836.dop229.sk1.t,1697932836.cds203.sk1.c

tt.stfilecamp.com/jsfiles/site-protect2.0.js

205.185.216.42

200 OK

3.1 kB

URL GET HTTP/1.1
tt.stfilecamp.com/jsfiles/site-protect2.0.js
IP
205.185.216.42:443
ASN
#20446 STACKPATH-CDN

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT

File type
ASCII text
Size
3.1 kB (3137 bytes)
Hash
fc96ab06b0f9fcea6731405215ae5daf
8af9f27d895eb69754919a2fc0d74760fecd3860
9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e

HTTP Headers

GET /jsfiles/site-protect2.0.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: Keep-Alive
Cache-Control: max-age=1034
Content-Length: 3137
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "fc96ab06b0f9fcea6731405215ae5daf"
x-amz-request-id: tx00000f06af9513c844d27-0065345c1e-7a12decc-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697932836.dop016.sk1.t,1697932836.cds240.sk1.shn,1697932836.dop016.sk1.t,1697932836.cds231.sk1.c

route.frest.pro/is_redirect

104.21.77.196

200 OK

17 B

URL POST HTTP/2
route.frest.pro/is_redirect
IP
104.21.77.196:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGoogle Trust Services LLC
Subjectfrest.pro
FingerprintA1:6D:80:97:81:5F:7D:81:A1:3A:F7:AD:B0:7C:80:EF:AF:09:8F:04
ValiditySun, 08 Oct 2023 16:23:46 GMT - Sat, 06 Jan 2024 16:23:45 GMT

File type
JSON data\012- , ASCII text
Size
17 B (17 bytes)
Hash
6dec798efb56f56f33660938f6249ff6
e889219883cef38754dc1e5df7ca5277b3b314c8
b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4

HTTP Headers

POST /is_redirect HTTP/1.1
Host: route.frest.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 22 Oct 2023 00:00:36 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z665n4cTxQ1iT55X2Gsckw0Vrb9yWA5tIQmFdUa7eiYOpbnebeqimvyoQDsJOB14%2FVuBoqma3lSkjHADUqQsLJaENxNXwiWtBFXHDtRLBMVbdbWqvVP4UBMKiBpfzlla1pQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 819d76050b1a0b02-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/landings/283335/1696402954/images/spin-button.png

95.101.10.67

200 OK

5.6 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/spin-button.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 276 x 301, 8-bit colormap, non-interlaced\012- data
Size
5.6 kB (5586 bytes)
Hash
66271b99acf174bf87d903ffac88c5f5
69e67eb0440ff320c8603071207b43a95e90c2bb
a2f084594e048fe1bf77c215f4c9447bb355584eb749dc8a5841a0c250ca9172

HTTP Headers

GET /landings/283335/1696402954/images/spin-button.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: MREiO2gUt5dqr8NoS+N3N9ImkhIFCIEg0wpFC5kCONHTQbRQASLvfzJ8mz8NClKXAqAg0nvC++4=
x-amz-request-id: JDB5R02JA244TXV0
Last-Modified: Wed, 04 Oct 2023 07:02:37 GMT
ETag: "66271b99acf174bf87d903ffac88c5f5"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 5586
Date: Sun, 22 Oct 2023 00:00:36 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/like.png

95.101.10.67

200 OK

220 B

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/like.png
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 13 x 12, 8-bit colormap, non-interlaced\012- data
Size
220 B (220 bytes)
Hash
e4c6e8dcd575bd5f346565ce8dbacfe7
29e5d4862f0470607f803d462bddf5f14cf57969
9e79a749ac5f41341fdff11f64845580207490915f72b09ec320e0db0fea224a

HTTP Headers

GET /landings/283335/1696402954/images/like.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: HzoXxGgPRiYV/HY3nJBfWkwaFJDYZAQaBRy00K4O95nKtnlZwYFLIa2xAusnZdJrhQ/0LKp0/40=
x-amz-request-id: JDB0ERP2QWC1MC5J
Last-Modified: Wed, 04 Oct 2023 07:02:37 GMT
ETag: "e4c6e8dcd575bd5f346565ce8dbacfe7"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 220
Date: Sun, 22 Oct 2023 00:00:37 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/4.jpg

95.101.10.67

200 OK

1.0 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/4.jpg
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.0 kB (1042 bytes)
Hash
e489d022a40ba80f51fb5acc1addea46
41c334f49c248783037ceaf6fc335acff62f760c
c39b4bfbcc6aa147547ca922c4f80350b48dbfa59cbd5176f44373e3b20f3567

HTTP Headers

GET /landings/283335/1696402954/images/4.jpg HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: vjh4xrujEe23QA67HaidAwpFAfAq7AyWDBM5q1RwF/H0qg4uglUCtvRMdisQSqJ/tun8I7W0JEc=
x-amz-request-id: AE02FVRZ1S1AS70B
Last-Modified: Wed, 04 Oct 2023 07:02:36 GMT
ETag: "e489d022a40ba80f51fb5acc1addea46"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 1042
Date: Sun, 22 Oct 2023 00:00:37 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/283335/1696402954/images/2.jpg

95.101.10.67

200 OK

3.7 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/images/2.jpg
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x50, components 3\012- data
Size
3.7 kB (3694 bytes)
Hash
02eebe83bc6786ef27b852477d4c4998
205314ba911137b6f6be4eefd946a2c62229e591
a0038f9d5f6fe1ce8fe1bf1cc7256f05e16c11d27041739c55918b823744753c

HTTP Headers

GET /landings/283335/1696402954/images/2.jpg HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn-adef.akamaized.net/landings/283335/1696402954/css/style.css?1696402955
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: v7IOdxLkGONmmrnawh/4b7WFz2baWG1MX4g5Inwes0sfdN6Iu4728RiZp1KOFwiS13B+MKBG068=
x-amz-request-id: JDBFSTR0CARWZYMD
Last-Modified: Wed, 04 Oct 2023 07:02:36 GMT
ETag: "02eebe83bc6786ef27b852477d4c4998"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 3694
Date: Sun, 22 Oct 2023 00:00:37 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/images/favicon.ico

95.101.10.67

200 OK

4.1 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/images/favicon.ico
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4103 bytes)
Hash
4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0

HTTP Headers

GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: IjvSRVcJlrA8KRtuHCIvySb7T9M4setamspkp4J4t5oLIH6qyzaHxu8PdVPZHXMCPnB1SRcSZOs=
x-amz-request-id: 9B7689322D7626CA
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
X-Akamai-EW-Subworker: 8096267
Date: Sun, 22 Oct 2023 00:00:37 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn.stfilecamp.com/stormtrk.js

205.185.216.10

200 OK

6.8 kB

URL GET HTTP/1.1
cdn.stfilecamp.com/stormtrk.js
IP
205.185.216.10:443
ASN
#20446 STACKPATH-CDN

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT

File type
ASCII text
Size
6.8 kB (6807 bytes)
Hash
39e5f8ad757fe438c784e8d883e47ab0
6b2905489485100c83605f43186c5843031e1f3b
e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a

HTTP Headers

GET /stormtrk.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 00:00:37 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 6807
Content-Type: text/javascript
Last-Modified: Sat, 24 Dec 2022 08:48:24 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx00000479952112751bbf3-0065346625-3c6f48c0-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster: 
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697932836.dop229.sk1.t,1697932836.cds222.sk1.shn,1697932836.dop229.sk1.t,1697932837.cds014.sk1.pr

cdn.stfilecamp.com/fp.min.js

205.185.216.10

200 OK

32 kB

URL GET HTTP/1.1
cdn.stfilecamp.com/fp.min.js
IP
205.185.216.10:443
ASN
#20446 STACKPATH-CDN

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT

File type
Unicode text, UTF-8 text, with very long lines (31370)
Size
32 kB (31705 bytes)
Hash
198f2f5b0a649f41fe890c59d37319aa
f24629687612889bb59f610df3879afcd766fb80
d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912

HTTP Headers

GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 00:00:38 GMT
Connection: Keep-Alive
Cache-Control: max-age=369
Content-Length: 31705
Content-Type: text/javascript
Last-Modified: Mon, 13 Jun 2022 11:23:14 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx000007d0c73f884f377d7-0065345987-3c6f487a-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697932836.dop229.sk1.t,1697932836.cds222.sk1.shn,1697932838.dop229.sk1.t,1697932838.cds237.sk1.c

api.imotech.video/bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932850678&extra=%7B%22action%22%3A%22leave%22%2C%22configId%22%3A%22903883351103051008%22%2C%22type%22%3A1%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22tdt%22%3A3208%2C%22lgt%22%3A15511%7D

164.90.105.98

104 B

URL
api.imotech.video/bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932850678&extra=%7B%22action%22%3A%22leave%22%2C%22configId%22%3A%22903883351103051008%22%2C%22type%22%3A1%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22tdt%22%3A3208%2C%22lgt%22%3A15511%7D
IP
164.90.105.98:0
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
687fb8c8dfc3852d0024a3846ba18cca
bf3b4a69dc06553526823f42b4528b7d465d9aea
796e70e994c74732cc0525afb001086c73696a651bcda9081d566eded1dd138b

HTTP Headers

POST /bigoad/trackingview?it=1697932837361&title=Cash%20App%201000%24%20Bonus&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.7916452329.1697932837&session_id=BA1.1.4172833786.1697932837&pixel_id=903883351103051008&timestamp_ms=1697932850678&extra=%7B%22action%22%3A%22leave%22%2C%22configId%22%3A%22903883351103051008%22%2C%22type%22%3A1%2C%22wst%22%3A462%2C%22drt%22%3A2184%2C%22tdt%22%3A3208%2C%22lgt%22%3A15511%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 00:00:50 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-88d38320f89dd707e7edeef715d2f4ea-0-00
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/landings/283335/1696402954/js/main.js?1696402955

95.101.10.67

200 OK

3.2 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/283335/1696402954/js/main.js?1696402955
IP
95.101.10.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (3431), with no line terminators
Size
3.2 kB (3219 bytes)
Hash
cad093d1c4758ccf23cbd9dea0c5c536
70fea15326316858f0ca0d36cc7f1b4f7d0647b8
624fbb4b556b314c3c15593e1e80d911361a8f49db82e8a7f3b9fd7c19ff2a4c

HTTP Headers

GET /landings/283335/1696402954/js/main.js?1696402955 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: CSojz9CF7QFiyEPlLkRUjZ9i9Dp4UcyvGfwQsSjfp4ijBtkySRlgrQhQ8eBM4QbIiWrJ67R0Fyw=
x-amz-request-id: NDY4VK5D7A4EGGJP
Last-Modified: Wed, 04 Oct 2023 07:02:38 GMT
ETag: "f92922776a82a9674c04b09b005bcd10"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sun, 22 Oct 2023 00:00:35 GMT
Content-Length: 790
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__

172.67.69.203

200 OK

486 B

URL GET HTTP/2
stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__
IP
172.67.69.203:443
ASN
#13335 CLOUDFLARENET

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint12:CF:2B:DC:A1:B5:77:12:91:68:E8:DD:F0:22:9A:1B:06:84:6A:74
ValidityFri, 09 Dec 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (507), with no line terminators
Size
486 B (486 bytes)
Hash
35f66cf4e448803ac4cda26f839cb294
cf1fc8d48d84e6abfbaa94151015c66ce0581c1b
0d74ab9c4a1baff54f69015fb65b57c8b8ffeef0b519a2c881a183ac07a138fd

HTTP Headers

GET /api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2F2ecf914ce8d75b25%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__ HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 22 Oct 2023 00:00:38 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hnF1texv3CCfVshAKXDyr6f6drykxLzm%2BExPdzrXg80JCxQiPk2XoUMyDr8IV1kNZbuQmgOPLZTwpgGJ%2FO0jbmzHZznlMhhsTHpTScZtmwYZ4xthaOOpHXZgyJnKgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 819d760baa4c5684-OSL
content-encoding: br
X-Firefox-Spdy: h2

api.imotech.video/ad/pixelfile.html

164.90.105.98

200 OK

1.9 kB

URL GET HTTP/2
api.imotech.video/ad/pixelfile.html
IP
164.90.105.98:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://luxl.cashappcard.club/c/2ecf914ce8d75b25?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1954), with no line terminators
Size
1.9 kB (1888 bytes)
Hash
a68c3fd612781cf83ba376590dcc0d98
8b105bb0d774d95049b96a8dba785276789cde39
d3d89a8fe5379c59c594b886d54504462d96fba4e8e86ec32107b26124b0681f

HTTP Headers

GET /ad/pixelfile.html HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Sun, 22 Oct 2023 00:00:36 GMT
content-type: text/html;charset=utf-8
bigotraceresponse: 00-05301ee4162b1a8e9c9ab818b8bf1b24-0-00
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by