| api.imotech.video/ad/events.js?pixel_id=903883351103051008 |  169.136.117.29 | 200 OK | 22 kB |
URL GET HTTP/2api.imotech.video/ad/events.js?pixel_id=903883351103051008 IP169.136.117.29:443 ASN#10122 BIGO TECHNOLOGY PTE. LTD.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGlobalSign nv-sa Subject*.imotech.video Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File typeUnicode text, UTF-8 text, with very long lines (63765), with no line terminators Hash23dcfaf1121f59dae1a879f3caa81803 b07663ff8d798e149fd233449578e919ae436658 e0e073c811c4eb13048220e8c0cab51d0c447e16ef2d674da9e84bb6cd634726
GET /ad/events.js?pixel_id=903883351103051008 HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
date: Fri, 20 Oct 2023 20:00:14 GMT
content-type: application/javascript;charset=utf-8
content-length: 21627
access-control-allow-origin: *
bigotraceresponse: 00-3eb99b0332da7d04f8bf92f49b39d960-0-00
content-encoding: gzip
cache-control: private, max-age=900
X-Firefox-Spdy: h2
|
|
| cdn-adef.akamaized.net/landings/283148/1696402910/js/collector.js?1696402910 |  23.36.76.194 | 200 OK | 1.3 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283148/1696402910/js/collector.js?1696402910 IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typeASCII text, with CRLF line terminators Hash93e4a4c9c70b874b19f31dc31f0aaa16 80dd02667e6dbbcb27e9640432206428a08861c2 b9c056ce3df686a7b1462e24754bb83f4b522f167a79f38e6e2e467341c71ad0
GET /landings/283148/1696402910/js/collector.js?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: oCjHZxfUXgoUQ/JSGHa05ae2JHt4C6Zvnn8qWDnkRgHoNTMHOXP7rb6LWRwE0Im27GjX8ooi1ww=
x-amz-request-id: C23A1EGSGNH7DZ04
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "93e4a4c9c70b874b19f31dc31f0aaa16"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 20 Oct 2023 20:00:15 GMT
Content-Length: 1293
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/landings/283148/1696402910/js/main.js?1696402910 | 23.36.76.194 | 200 OK | 5.0 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283148/1696402910/js/main.js?1696402910 IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (3559), with CRLF line terminators Hashc420dc0249fc264d41b706092c5fc7f2 e18fbeab2fb32c77972aee77f337d83ee4f4986f 35e21fba5f6b28dca1c8105d3cfdb903933bdfd02d1bb3bf0d150180d3925ff4
GET /landings/283148/1696402910/js/main.js?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: vA8FFfJlvBSEwmvx9vhq7xDOO7wCmtGoePXt131HH6yPK2l/vzlgCR7pApYCKfZRF18GfHF5LhE=
x-amz-request-id: C232G27MKBK85T1K
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "c420dc0249fc264d41b706092c5fc7f2"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 20 Oct 2023 20:00:15 GMT
Content-Length: 5038
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/landings/283148/1696402910/css/style.css?1696402910 | 23.36.76.194 | 200 OK | 2.0 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283148/1696402910/css/style.css?1696402910 IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hashada51aa333cceacda11ab9605e004e0a f96761fbb59b413bcd16e088e88d0c28a11bd874 c33b7d13fecd62cc5c182d12e567d9703128b206b25f156a3883cc521e58676e
GET /landings/283148/1696402910/css/style.css?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: nxXvk+RCxLUgdC2xG0NGuK3Pov55POJ3CxFptDd+Y8scKLQGwMVCwRKGd6LmA8LIMGNttHryvdI=
x-amz-request-id: C238PEGMYC4HW6NX
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "ada51aa333cceacda11ab9605e004e0a"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 20 Oct 2023 20:00:15 GMT
Content-Length: 1980
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/landings/283148/1696402910/js/canvas-scratch.js?1696402910 | 23.36.76.194 | 200 OK | 1.7 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283148/1696402910/js/canvas-scratch.js?1696402910 IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
Hash3a7fb854caf6c278c14e86d216d1edec 3cecc1d6aa9509c7a9cfcaf2c79a42f7d3b7c9ca 0511a0eac20b207c0fb4cbab01ec325db9a56316e16f321624a7d76c24747c27
GET /landings/283148/1696402910/js/canvas-scratch.js?1696402910 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: A1N+Cqun38gU91x1n0Mjg2bBuWUWPaA1cshx3hezAVJfeLWZnR0C8OrkXKBxyeYtdvgf+NR+A70=
x-amz-request-id: C23308Z5VBFWKRKE
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "3a7fb854caf6c278c14e86d216d1edec"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 20 Oct 2023 20:00:15 GMT
Content-Length: 1662
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402910 |  206.189.196.86 | 200 OK | 92 kB |
URL GET HTTP/1.1cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402910 IP206.189.196.86:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectcdnjs.claudflare.io Fingerprint18:7C:79:BA:FF:48:8B:AA:43:33:E2:1F:F8:A6:0C:12:EA:07:A9:13 ValidityWed, 04 Oct 2023 20:01:27 GMT - Tue, 02 Jan 2024 20:01:26 GMT
File typeASCII text, with very long lines (65447) Hashb5c3d25047eb3415e401a40da41e5118 d0a4ccdf5cd564dd297e783911dd108e5f6a8ef3 8877058afffb4c9b8bffde8daf79fc766ad4234631f9446ebe1df65d877b34f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402910 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Fri, 20 Oct 2023 20:00:15 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 92013
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Sat, 21 Oct 2023 08:00:15 GMT
|
|
| api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2128%7D&pixel_id=log_pixel_id | 169.136.117.29 | 200 OK | 104 B |
URL POST HTTP/2api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2128%7D&pixel_id=log_pixel_id IP169.136.117.29:443 ASN#10122 BIGO TECHNOLOGY PTE. LTD.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGlobalSign nv-sa Subject*.imotech.video Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File typeASCII text, with no line terminators Hashb61d91b37c0a902206f47169043ae9aa b46b6b0363f38217ce20740dd2138b386bb88dbb 94782f07b7c8988b7dddaac04cf923029852d628da64b4cd9234f3df0ea7dcb8
POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2128%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 20 Oct 2023 20:00:16 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-9a6cfbacf9f399704da83db33fa6be22-0-00
X-Firefox-Spdy: h2
|
|
| tt.stfilecamp.com/jsfiles/site-protect2.0.js | 205.185.216.42 | 200 OK | 3.1 kB |
URL GET HTTP/1.1tt.stfilecamp.com/jsfiles/site-protect2.0.js IP205.185.216.42:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
Hashfc96ab06b0f9fcea6731405215ae5daf 8af9f27d895eb69754919a2fc0d74760fecd3860 9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e
GET /jsfiles/site-protect2.0.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: Keep-Alive
Cache-Control: max-age=2175
Content-Length: 3137
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "fc96ab06b0f9fcea6731405215ae5daf"
x-amz-request-id: tx00000d6540eb2f7d54513-006532d6bf-7a12c411-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697832016.dop223.sk1.t,1697832016.cds247.sk1.shn,1697832016.dop223.sk1.t,1697832016.cds231.sk1.c
|
|
| api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2328%7D&pixel_id=log_pixel_id | 169.136.117.29 | 200 OK | 104 B |
URL POST HTTP/2api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2328%7D&pixel_id=log_pixel_id IP169.136.117.29:443 ASN#10122 BIGO TECHNOLOGY PTE. LTD.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGlobalSign nv-sa Subject*.imotech.video Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File typeASCII text, with no line terminators Hashcdaa558925097b3c2b6aef6b48a38aa1 8cca2260095bd3a875974279de2a24b03480b42b 51fedaecf73a3b1ffc15ab7baa3a9290de8d0b6db1cf940ee0457391e310c354
POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2328%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 20 Oct 2023 20:00:16 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-5dc0ed9f3c6e69dbb8c8d72bc449664c-0-00
X-Firefox-Spdy: h2
|
|
| api.imotech.video/bigoad/trackingview?it=1697832016805&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.5184083335.1697832017&session_id=BA1.1.9296811556.1697832017&pixel_id=903883351103051008×tamp_ms=1697832016806&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2127%7D | 169.136.117.29 | 200 OK | 104 B |
URL POST HTTP/2api.imotech.video/bigoad/trackingview?it=1697832016805&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.5184083335.1697832017&session_id=BA1.1.9296811556.1697832017&pixel_id=903883351103051008×tamp_ms=1697832016806&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2127%7D IP169.136.117.29:443 ASN#10122 BIGO TECHNOLOGY PTE. LTD.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGlobalSign nv-sa Subject*.imotech.video Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File typeASCII text, with no line terminators Hash4cdc3f45d9df5df86bd9020de47ad94b 8764ab47c2465845d2ede299cbe5a88a04830546 07b24b250d4df5da9baae9c90250ceb43de5e4c430ac3b8e15b4cc953ba8b286
POST /bigoad/trackingview?it=1697832016805&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.5184083335.1697832017&session_id=BA1.1.9296811556.1697832017&pixel_id=903883351103051008×tamp_ms=1697832016806&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2127%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 20 Oct 2023 20:00:16 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-7852aa8cbcc908fa1e34e44fefaa3c7e-0-00
X-Firefox-Spdy: h2
|
|
| api.imotech.video/ad/pixelfile.html | 169.136.117.29 | 200 OK | 901 B |
URL GET HTTP/2api.imotech.video/ad/pixelfile.html IP169.136.117.29:443 ASN#10122 BIGO TECHNOLOGY PTE. LTD.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGlobalSign nv-sa Subject*.imotech.video Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File typegzip compressed data, from Unix\012- data Hashddf7d6ad0438c99339e3b00d9779737d 6d75075bdbcf44fc2d06787d0f822c7f5aee0bf5 18d6580c77f525959c88b5835fcee6c297da161a1af45db71b6a4af08ab76dc5
GET /ad/pixelfile.html HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 20 Oct 2023 20:00:16 GMT
content-type: text/html;charset=utf-8
bigotraceresponse: 00-1503ef02807d3ce34a4afd9a0131aebd-0-00
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| route.frest.pro/is_redirect |  104.21.77.196 | 200 OK | 17 B |
URL POST HTTP/2route.frest.pro/is_redirect IP104.21.77.196:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGoogle Trust Services LLC Subjectfrest.pro FingerprintA1:6D:80:97:81:5F:7D:81:A1:3A:F7:AD:B0:7C:80:EF:AF:09:8F:04 ValiditySun, 08 Oct 2023 16:23:46 GMT - Sat, 06 Jan 2024 16:23:45 GMT
File typeJSON data\012- , ASCII text Hash6dec798efb56f56f33660938f6249ff6 e889219883cef38754dc1e5df7ca5277b3b314c8 b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4
POST /is_redirect HTTP/1.1
Host: route.frest.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Oct 2023 20:00:16 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vCVZI6NR%2BE3OXRQvSKw8ZTypoUWOzCj%2BUXN22oqc%2BsbGiSq9H3yLlsdnsqca0FPTjfNXGOQwtQmjOxq4o1CcMCTYQBJoOEtY3hegCyQaj3sdd9pThBGdBERZ33i3fjp3Va8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8193d894dbea1c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn-adef.akamaized.net/landings/283148/1696402910/images/logo.png | 23.36.76.194 | 200 OK | 8.5 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283148/1696402910/images/logo.png IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 300 x 68, 4-bit colormap, non-interlaced\012- data Hasha0157852d2a3d6e9aefbd7c23419e566 27d57dbdf88d42be5defcea6a1675d4932d13664 3b6b61919a663134edcdfe300b4de7e821ffa07cc72c15611988fb86fbba935c
GET /landings/283148/1696402910/images/logo.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: IcD6j5luRyi11avH0SAWP/ThgyIlBkoEK1Ckc7X89Y1CXCIT3LV+Hhh0V3pVVSyAgGtMt+/o+LU=
x-amz-request-id: 0TJBWCV3HJFAHD9C
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "a0157852d2a3d6e9aefbd7c23419e566"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8491
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js | 205.185.216.42 | 200 OK | 2.3 kB |
URL GET HTTP/1.1tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js IP205.185.216.42:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
File typeHTML document, ASCII text Hash96af925d55cad494665471c73ac01b04 5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b 1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2
GET /jsfiles/second_back_multi_bigo.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 2307
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "96af925d55cad494665471c73ac01b04"
x-amz-request-id: tx000002b50b5a9524aad93-006532dc50-7a135a4e-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697832016.dop228.sk1.t,1697832016.cds249.sk1.shn,1697832016.dop228.sk1.t,1697832016.cds239.sk1.pr
|
|
| tt.stfilecamp.com/static/group.png | 205.185.216.42 | 200 OK | 480 kB |
URL GET HTTP/1.1tt.stfilecamp.com/static/group.png IP205.185.216.42:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT
File typePNG image data, 998 x 900, 8-bit/color RGBA, non-interlaced\012- data Size480 kB (480395 bytes) Hash75ce79eb698adf7e83f690015001cd47 fd5a7554d7d29f2c2c7a2903f1e8fe4ae0539287 4b10ee63368f4b594655c205b9b8fc1c424adf3731cf65d297771235d0f50b18
GET /static/group.png HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 480395
Content-Type: image/png
Last-Modified: Mon, 11 Sep 2023 13:10:42 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "75ce79eb698adf7e83f690015001cd47"
x-amz-request-id: tx00000472f1df3aff3927f-006532dc50-7a12c4b1-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697832016.dop022.sk1.t,1697832016.cds220.sk1.shn,1697832016.dop022.sk1.t,1697832016.cds255.sk1.pr
|
|
| cdn-adef.akamaized.net/landings/283148/1696402910/images/cardsAfter.png | 23.36.76.194 | 200 OK | 64 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283148/1696402910/images/cardsAfter.png IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 997 x 902, 8-bit/color RGBA, non-interlaced\012- data Hash74d879117359c9c53532166769b154bc 237e6d57552b51d9476ca60f81d2f6c54e40bbf5 beec6ee62646521bf3edc212c162607c469346d31a3dfb9707593b4d3a636315
GET /landings/283148/1696402910/images/cardsAfter.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: pl8oajp7Uu8iqCy4cj8c86MXjlhP0v1xpe8pAb9i2JSUlJ/2HTDQFtHc+8wfL+2PYD8ySewzMNY=
x-amz-request-id: 0TJ178V7NAQ1YB0F
Last-Modified: Wed, 04 Oct 2023 07:01:52 GMT
ETag: "74d879117359c9c53532166769b154bc"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 64163
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/images/favicon.ico | 23.36.76.194 | 200 OK | 4.1 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/images/favicon.ico IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI=
x-amz-request-id: 78F19547EBC3B810
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn-adef.akamaized.net/landings/283148/1696402910/images/modalImg.png | 23.36.76.194 | 200 OK | 156 kB |
URL GET HTTP/1.1cdn-adef.akamaized.net/landings/283148/1696402910/images/modalImg.png IP23.36.76.194:443 ASN#20940 Akamai International B.V.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerDigiCert Inc Subjecta248.e.akamai.net FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9 ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT
File typePNG image data, 744 x 450, 8-bit/color RGBA, non-interlaced\012- data Size156 kB (156052 bytes) Hashb455862233020904c288e800b66d94ae e748b869561314242c6eb681c2e5235e52d8479a 021aed6b5c3faec547872ebcfdf5698a33ccedf6d5d73aa63f60e27af6e4a579
GET /landings/283148/1696402910/images/modalImg.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: lUykow8whc6MyPaLSuO6pCqcOVi8daLh43eB+iothR/bpN7dYEnet8blciDJccxqHCHDzu+js2g=
x-amz-request-id: 0TJE0S521GT2Y8JX
Last-Modified: Wed, 04 Oct 2023 07:01:53 GMT
ETag: "b455862233020904c288e800b66d94ae"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 156052
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
|
|
| cdn.stfilecamp.com/multi_push.js | 205.185.216.42 | 200 OK | 1.1 kB |
URL GET HTTP/1.1cdn.stfilecamp.com/multi_push.js IP205.185.216.42:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32 ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hasha50322f9d3f3fafe3fb02be02285e433 c0a894b3bfa545832c3ad1c2f145005d02e50ac4 cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99
GET /multi_push.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 1072
Content-Type: text/javascript
Last-Modified: Thu, 07 Jul 2022 14:21:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "a50322f9d3f3fafe3fb02be02285e433"
x-amz-request-id: tx00000eaed1e7cbf284898-006532dc50-3c6f48ac-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697832016.dop017.sk1.t,1697832016.cds249.sk1.shn,1697832016.dop017.sk1.t,1697832016.cds203.sk1.pr
|
|
| cdn.stfilecamp.com/stormtrk.js | 205.185.216.42 | 200 OK | 6.8 kB |
URL GET HTTP/1.1cdn.stfilecamp.com/stormtrk.js IP205.185.216.42:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32 ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
Hash39e5f8ad757fe438c784e8d883e47ab0 6b2905489485100c83605f43186c5843031e1f3b e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a
GET /stormtrk.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Oct 2023 20:00:16 GMT
Connection: Keep-Alive
Cache-Control: max-age=2792
Content-Length: 6807
Content-Type: text/javascript
Last-Modified: Sat, 24 Dec 2022 08:48:24 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx00000e0cd65f4168f0d41-006532d927-3c6f493d-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster:
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697832016.dop017.sk1.t,1697832016.cds249.sk1.shn,1697832016.dop017.sk1.t,1697832016.cds014.sk1.c
|
|
| api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_page_loaded%22%2C%22pixel_num%22%3A%22single%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A3007%7D&pixel_id=log_pixel_id | 169.136.117.29 | 200 OK | 104 B |
URL POST HTTP/2api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_page_loaded%22%2C%22pixel_num%22%3A%22single%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A3007%7D&pixel_id=log_pixel_id IP169.136.117.29:443 ASN#10122 BIGO TECHNOLOGY PTE. LTD.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGlobalSign nv-sa Subject*.imotech.video Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File typeASCII text, with no line terminators Hash68081e0dfe466ea2232c7ac27308e643 026a2bc886a6857a01c5aeb8fdc27bfb7a9bf98a b42263cb22543f8318c3e61cf29cbbc87a5111041f6744039fcce409c063d6ba
POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_page_loaded%22%2C%22pixel_num%22%3A%22single%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A3007%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: openresty
date: Fri, 20 Oct 2023 20:00:16 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-55f2eea4ea022cb9255154bcb7ce2671-0-00
X-Firefox-Spdy: h2
|
|
| cdn.stfilecamp.com/fp.min.js | 205.185.216.42 | 200 OK | 32 kB |
URL GET HTTP/1.1cdn.stfilecamp.com/fp.min.js IP205.185.216.42:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerLet's Encrypt Subjectstfilecamp.com FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32 ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT
File typeUnicode text, UTF-8 text, with very long lines (31370) Hash198f2f5b0a649f41fe890c59d37319aa f24629687612889bb59f610df3879afcd766fb80 d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912
GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 20 Oct 2023 20:00:17 GMT
Connection: Keep-Alive
Cache-Control: max-age=1715
Content-Length: 31705
Content-Type: text/javascript
Last-Modified: Mon, 13 Jun 2022 11:23:14 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx00000529c038236e6268e-006532d4f4-3c6f493d-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697832016.dop017.sk1.t,1697832016.cds249.sk1.shn,1697832017.dop017.sk1.t,1697832017.cds237.sk1.c
|
|
| stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__ | 104.26.4.120 | 200 OK | 451 B |
URL GET HTTP/2stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__ IP104.26.4.120:443
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint12:CF:2B:DC:A1:B5:77:12:91:68:E8:DD:F0:22:9A:1B:06:84:6A:74 ValidityFri, 09 Dec 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT
File typeJSON data\012- , ASCII text, with very long lines (485) Hashadbb131e7da38681aab3085c7b516e7a 6cb43f47e73b122abb315ee29ae8f7161a7b3f49 d84082a019595cb6af752ad2acd3503bdd4e625c425b2ccfac5c0fd86a0e9bf4
GET /api/1.0/ping/pong?location=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__ HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 20 Oct 2023 20:00:17 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p2hDxX%2FxLcBvKw0JSsHEdTciuztLYjSnVju2IRE1ZT62PrE551g6hRmvCLVA9Eruq4fP1KePQIbXiSIRMiyPj9hEgbwtJlyWiL4i%2BsLxsu9yvxS1DJEWeckvSvykpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8193d89a8f6656aa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| api.imotech.video/bigoad/trackingview?it=1697832016805&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.5184083335.1697832017&session_id=BA1.1.9296811556.1697832017&pixel_id=903883351103051008×tamp_ms=1697832016806&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2127%7D | 169.136.117.29 | 200 OK | 104 B |
URL POST HTTP/2api.imotech.video/bigoad/trackingview?it=1697832016805&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.5184083335.1697832017&session_id=BA1.1.9296811556.1697832017&pixel_id=903883351103051008×tamp_ms=1697832016806&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2127%7D IP169.136.117.29:443 ASN#10122 BIGO TECHNOLOGY PTE. LTD.
Requested byhttps://luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ CertificateIssuerGlobalSign nv-sa Subject*.imotech.video Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT
File typeASCII text, with no line terminators Hash753ad7ba27ed6e81ce157a20dbdd4113 610be41f2eb926f67deb8919db81329e199dbb7a 2f4dc939fa1111781a6e5ff28236ee003e43e3e9de10eaf7535daccaa56165d6
POST /bigoad/trackingview?it=1697832016805&title=Get%20your%20CASH%20-%20Cash%20App%20BONUS&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fluxl.cashappcard.club%2Fc%2Faed76ea9a72a3fa0%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=luxl.cashappcard.club&cookie_id=BA1.1.5184083335.1697832017&session_id=BA1.1.9296811556.1697832017&pixel_id=903883351103051008×tamp_ms=1697832016806&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A408%2C%22drt%22%3A2115%2C%22lgt%22%3A2127%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://luxl.cashappcard.club
DNT: 1
Connection: keep-alive
Referer: https://luxl.cashappcard.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: openresty
date: Fri, 20 Oct 2023 20:00:16 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-ae5ba6899dbbbd0230e2f6fe656621a3-0-00
X-Firefox-Spdy: h2
|
|
| luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ |  52.19.101.114 | 200 OK | 22 kB |
URL User Request GET HTTP/2luxl.cashappcard.club/c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ IP52.19.101.114:443
CertificateIssuerLet's Encrypt Subjectluxl.cashappcard.club FingerprintEF:11:EF:D3:28:65:BF:3D:23:A3:93:22:27:83:B0:61:33:C5:79:D8 ValidityWed, 27 Sep 2023 21:15:22 GMT - Tue, 26 Dec 2023 21:15:21 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Square, Inc. |
GET /c/aed76ea9a72a3fa0?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ HTTP/1.1
Host: luxl.cashappcard.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 20 Oct 2023 20:00:14 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=6532dc4e00063626; Path=/; Expires=Tue, 19 Dec 2023 20:00:14 GMT; Secure; SameSite=None
unique_id2=6532dc4e00063e04; Path=/; Expires=Thu, 18 Jan 2024 20:00:14 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Fri, 20 Oct 2023 20:00:14 GMT; Secure; SameSite=None
6532dc4e00063e04_sl=[283148]; Path=/; Expires=Fri, 03 Nov 2023 20:00:14 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2
|
|