Report - hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME_

Report Overview

Visited public
2023-10-21 02:00:36
Tags
URL
hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Finishing URL
hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
IP / ASN
52.19.101.114
#16509 AMAZON-02
Title
Cash App $1000 gift card

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-10-20 23:31:08	452 B	24 kB	104.17.24.14
cdn-adef.akamaized.net	125719	2014-03-18	2018-02-06 08:56:01	2023-10-20 00:52:53	3.3 kB	98 kB	23.36.76.96
api.imotech.video	140520	2019-11-08	2021-01-28 14:59:54	2023-10-20 22:00:14	4.7 kB	24 kB	169.136.117.29
cdn.stfilecamp.com	400667	2021-09-06	2021-09-06 17:32:03	2023-10-20 22:00:16	1.3 kB	42 kB	205.185.216.42
cdnjs.claudflare.io	unknown	2021-08-09	2021-08-12 10:01:46	2023-10-20 22:00:15	457 B	92 kB	206.189.196.86
tt.stfilecamp.com	unknown	2021-09-06	2022-03-08 16:47:05	2023-10-20 22:00:16	871 B	6.7 kB	205.185.216.10
route.frest.pro	unknown	2022-10-19	2023-01-02 14:11:29	2023-10-20 22:00:16	526 B	754 B	104.21.77.196
hllj.giftcardmagiczone.club	unknown	2023-07-28	2023-07-28 16:31:12	2023-10-18 14:00:11	728 B	7.3 kB	52.19.101.114
stormtrk.com	289095	2019-05-15	2019-05-17 20:09:53	2023-10-20 22:00:17	807 B	1.2 kB	104.26.4.120

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-10-20	medium	claudflare.io	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	From	Size	First Seen	Last Seen
	cdn.stfilecamp.com/multi_push.js	ScriptElement	1.1 kB	2023-03-07	2024-08-21
Pretty URL cdn.stfilecamp.com/multi_push.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2024-08-21 09:42 Times Seen51 Hash a50322f9d3f3fafe3fb02be02285e433 c0a894b3bfa545832c3ad1c2f145005d02e50ac4 cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99 Loading...

	tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js	ScriptElement	2.3 kB	2023-03-08	2024-09-20
Pretty URL tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:39 Last Seen2024-09-20 21:37 Times Seen21 Hash 96af925d55cad494665471c73ac01b04 5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b 1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2 Loading...

	cdn.stfilecamp.com/stormtrk.js	ScriptElement	6.8 kB	2023-03-12	2025-03-07
Pretty URL cdn.stfilecamp.com/stormtrk.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:32 Last Seen2025-03-07 06:00 Times Seen131 Hash 39e5f8ad757fe438c784e8d883e47ab0 6b2905489485100c83605f43186c5843031e1f3b e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a Loading...

	cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402762	ScriptElement	92 kB	2023-08-05	2023-10-29
Pretty URL cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402762 IP 206.189.196.86 ASN #14061 DIGITALOCEAN-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-05 18:00 Last Seen2023-10-29 19:16 Times Seen5 Hash 5f134267bb0bbb337c14d3e3c17598ed b00469b424732323ab9e2025452bd0ed3ce16039 c87337fa4f744e422666cec67da64263346e0d1cabf1148fd3562f67a754ec00 Loading...

	cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1696402762	ScriptElement	64 kB	2023-03-07	2025-05-09
Pretty URL cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1696402762 IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:08 Last Seen2025-05-09 14:35 Times Seen206 Hash 6ceffd5b35d350764ce6cb72313190f5 1a8bcae2241d253c1a41050b20c840d29878f3ae 6dbe9c2e13cf06c6633ea3fcf6d7bd30452561202a205c75a035cd1d8b93368f Loading...

	cdn-adef.akamaized.net/landings/279025/1696402762/js/collector.js?1696402762	ScriptElement	5.6 kB	2023-10-15	2024-08-21
Pretty URL cdn-adef.akamaized.net/landings/279025/1696402762/js/collector.js?1696402762 IP 23.36.76.96 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-15 10:00 Last Seen2024-08-21 04:39 Times Seen9 Hash 93e4a4c9c70b874b19f31dc31f0aaa16 80dd02667e6dbbcb27e9640432206428a08861c2 b9c056ce3df686a7b1462e24754bb83f4b522f167a79f38e6e2e467341c71ad0 Loading...

	hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__	ScriptElement	0 B	0001-01-01	2025-05-10
Pretty URL hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ IP 52.19.101.114 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-10 11:54 Times Seen4643468 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.stfilecamp.com/fp.min.js	ScriptElement	32 kB	2023-04-06	2025-05-09
Pretty URL cdn.stfilecamp.com/fp.min.js IP 205.185.216.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 21:01 Last Seen2025-05-09 18:17 Times Seen568 Hash 198f2f5b0a649f41fe890c59d37319aa f24629687612889bb59f610df3879afcd766fb80 d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912 Loading...

	cdn-adef.akamaized.net/landings/279025/1696402762/js/main.js?1696402762	ScriptElement	5.1 kB	2023-04-06	2023-10-30
Pretty URL cdn-adef.akamaized.net/landings/279025/1696402762/js/main.js?1696402762 IP 23.36.76.96 ASN #20940 Akamai International B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-06 21:01 Last Seen2023-10-30 05:48 Times Seen4 Hash eb86cde28d0545695ec8823f6617fd6c 37b6641f75ab1b1b1e2bd375b56c40ccbc90f9ec 125d8a743888e128f1cc2cfec48f256aed9c7bb9ea64edb15cbcc04eb245ee19 Loading...

	api.imotech.video/ad/events.js?pixel_id=903883351103051008	ScriptElement	64 kB	2023-10-15	2023-10-29
Pretty URL api.imotech.video/ad/events.js?pixel_id=903883351103051008 IP 169.136.117.29 ASN #10122 BIGO TECHNOLOGY PTE. LTD. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-15 10:00 Last Seen2023-10-29 19:16 Times Seen8 Hash 23dcfaf1121f59dae1a879f3caa81803 b07663ff8d798e149fd233449578e919ae436658 e0e073c811c4eb13048220e8c0cab51d0c447e16ef2d674da9e84bb6cd634726 Loading...

	tt.stfilecamp.com/jsfiles/site-protect2.0.js	ScriptElement	3.1 kB	2023-03-07	2025-03-07
Pretty URL tt.stfilecamp.com/jsfiles/site-protect2.0.js IP 205.185.216.10 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03 Last Seen2025-03-07 04:00 Times Seen89 Hash fc96ab06b0f9fcea6731405215ae5daf 8af9f27d895eb69754919a2fc0d74760fecd3860 9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e Loading...

HTTP Transactions (23)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1696402762

104.17.24.14

200 OK

23 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/gsap/3.9.1/gsap.min.js?1696402762
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (63851)
Size
23 kB (22890 bytes)
Hash
6ceffd5b35d350764ce6cb72313190f5
1a8bcae2241d253c1a41050b20c840d29878f3ae
6dbe9c2e13cf06c6633ea3fcf6d7bd30452561202a205c75a035cd1d8b93368f

HTTP Headers

GET /ajax/libs/gsap/3.9.1/gsap.min.js?1696402762 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 21 Oct 2023 02:00:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 22890
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64942a86-596a"
last-modified: Thu, 22 Jun 2023 11:03:34 GMT
cf-cdnjs-via: cfworker/r2
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4363340
expires: Thu, 10 Oct 2024 02:00:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZJIbDTM%2BCb7R8FYMd%2BqzdWy2M0XF%2BChFs5UEYX2fF6g3zrbYC8S7RpYIfMVS9B8bgD%2Frmk%2Bh5h%2BFPDvzjIahje3q22JHj0UROdq0RLKqvLim2l3UCmAGBOWwgSVYaqWVNjyI8dnV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8195e802eba7b517-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/landings/279025/1696402762/css/basics.css?1696402762

23.36.76.96

200 OK

2.6 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279025/1696402762/css/basics.css?1696402762
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (402), with CRLF line terminators
Size
2.6 kB (2627 bytes)
Hash
e80e1e900602e0225f203de9721bc835
c3cb235847a36f1e9c85a2eb6ace873eacb3be31
de948c4dfcfd4c7717f6c0e9574aa90e37ab21ae46de98789450215d82ef217a

HTTP Headers

GET /landings/279025/1696402762/css/basics.css?1696402762 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: QH9miwzHoWLyjk0jt2Ckub4jUWAxFuNLsIFxjVpgOISLW+X38Pbdr4a3aOw8H4LyDJFv1G9wQyY=
x-amz-request-id: MJ0TETVQ3B5K0FX6
Last-Modified: Wed, 04 Oct 2023 06:59:24 GMT
ETag: "e80e1e900602e0225f203de9721bc835"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/css
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 21 Oct 2023 02:00:19 GMT
Content-Length: 2627
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279025/1696402762/js/collector.js?1696402762

23.36.76.96

200 OK

1.3 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279025/1696402762/js/collector.js?1696402762
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.3 kB (1293 bytes)
Hash
93e4a4c9c70b874b19f31dc31f0aaa16
80dd02667e6dbbcb27e9640432206428a08861c2
b9c056ce3df686a7b1462e24754bb83f4b522f167a79f38e6e2e467341c71ad0

HTTP Headers

GET /landings/279025/1696402762/js/collector.js?1696402762 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: KtJzrwU/4N3WGNlkgSbOI78PM0hoYTV5BoOPblONGR3JL3L9BZWEICVDPWXq8AssW7MuslVZSLs=
x-amz-request-id: D4GZE74ZHGX26WSF
Last-Modified: Wed, 04 Oct 2023 06:59:24 GMT
ETag: "93e4a4c9c70b874b19f31dc31f0aaa16"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 21 Oct 2023 02:00:19 GMT
Content-Length: 1293
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279025/1696402762/js/main.js?1696402762

23.36.76.96

200 OK

1.7 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279025/1696402762/js/main.js?1696402762
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
ASCII text
Size
1.7 kB (1741 bytes)
Hash
eb86cde28d0545695ec8823f6617fd6c
37b6641f75ab1b1b1e2bd375b56c40ccbc90f9ec
125d8a743888e128f1cc2cfec48f256aed9c7bb9ea64edb15cbcc04eb245ee19

HTTP Headers

GET /landings/279025/1696402762/js/main.js?1696402762 HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: ON+7mKd1QNqwnInFxKxdk1r29tDf0dRaUC+neS/ooOmUfhMghzgCDSxp6XVjpbg/Hqfjvh8e2aQ=
x-amz-request-id: 713MQYE74DCBXWJ5
Last-Modified: Wed, 04 Oct 2023 06:59:24 GMT
ETag: "eb86cde28d0545695ec8823f6617fd6c"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: text/javascript
Server: AmazonS3
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Sat, 21 Oct 2023 02:00:19 GMT
Content-Length: 1741
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

api.imotech.video/ad/events.js?pixel_id=903883351103051008

169.136.117.29

200 OK

22 kB

URL GET HTTP/2
api.imotech.video/ad/events.js?pixel_id=903883351103051008
IP
169.136.117.29:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
Unicode text, UTF-8 text, with very long lines (63765), with no line terminators
Size
22 kB (21627 bytes)
Hash
23dcfaf1121f59dae1a879f3caa81803
b07663ff8d798e149fd233449578e919ae436658
e0e073c811c4eb13048220e8c0cab51d0c447e16ef2d674da9e84bb6cd634726

HTTP Headers

GET /ad/events.js?pixel_id=903883351103051008 HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Sat, 21 Oct 2023 02:00:20 GMT
content-type: application/javascript;charset=utf-8
content-length: 21627
access-control-allow-origin: *
bigotraceresponse: 00-6adccc2ece956a2a2409414db20ccb52-0-00
content-encoding: gzip
cache-control: private, max-age=900
X-Firefox-Spdy: h2

cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402762

206.189.196.86

200 OK

92 kB

URL GET HTTP/1.1
cdnjs.claudflare.io/ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402762
IP
206.189.196.86:443
ASN
#14061 DIGITALOCEAN-ASN

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectcdnjs.claudflare.io
Fingerprint18:7C:79:BA:FF:48:8B:AA:43:33:E2:1F:F8:A6:0C:12:EA:07:A9:13
ValidityWed, 04 Oct 2023 20:01:27 GMT - Tue, 02 Jan 2024 20:01:26 GMT

File type
ASCII text, with very long lines (65447)
Size
92 kB (92013 bytes)
Hash
5f134267bb0bbb337c14d3e3c17598ed
b00469b424732323ab9e2025452bd0ed3ce16039
c87337fa4f744e422666cec67da64263346e0d1cabf1148fd3562f67a754ec00

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ajax/libs/jquery/3.6.0/d/jquery.min.js?1696402762 HTTP/1.1
Host: cdnjs.claudflare.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.22.0 (Ubuntu)
Date: Sat, 21 Oct 2023 02:00:20 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 92013
Connection: keep-alive
Cache-Control: public, max-age=43200
Expires: Sat, 21 Oct 2023 14:00:20 GMT

cdn-adef.akamaized.net/landings/279025/1696402762/images/visa-logo.png

23.36.76.96

200 OK

8.5 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279025/1696402762/images/visa-logo.png
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 300 x 68, 4-bit colormap, non-interlaced\012- data
Size
8.5 kB (8491 bytes)
Hash
a0157852d2a3d6e9aefbd7c23419e566
27d57dbdf88d42be5defcea6a1675d4932d13664
3b6b61919a663134edcdfe300b4de7e821ffa07cc72c15611988fb86fbba935c

HTTP Headers

GET /landings/279025/1696402762/images/visa-logo.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: YncrUAI9tq/34iwi1gZILcPwC5z/0OiPzEAg4h05bGW4wAW7ioc/9hlcne+pR7nvXuUd3PKWEt0=
x-amz-request-id: 0EC5CYJTGPDSPSVC
Last-Modified: Wed, 04 Oct 2023 06:59:24 GMT
ETag: "a0157852d2a3d6e9aefbd7c23419e566"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 8491
Date: Sat, 21 Oct 2023 02:00:20 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279025/1696402762/images/visa-logo-sq.png

23.36.76.96

200 OK

16 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279025/1696402762/images/visa-logo-sq.png
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 174 x 172, 8-bit/color RGBA, non-interlaced\012- data
Size
16 kB (16103 bytes)
Hash
ddb1a54620ba3a4424cb262e457ddbd9
0b0278f1dab8754cba8f1ab74e333f7a69e6f999
1fcf40f6f008f09af6b9d5e62a611d9b7c9920b37c5cbfb99621ffcc97243c95

HTTP Headers

GET /landings/279025/1696402762/images/visa-logo-sq.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: YBT18/TQE5Udx7DC95Ud4LLPT61FIYZtj8C3DrXpRJ2z81jUnEZcpbHzGenZThbUr0OF4XVkb2U=
x-amz-request-id: 0ECE1NRAHX44BN1X
Last-Modified: Wed, 04 Oct 2023 06:59:24 GMT
ETag: "ddb1a54620ba3a4424cb262e457ddbd9"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 16103
Date: Sat, 21 Oct 2023 02:00:20 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn-adef.akamaized.net/landings/279025/1696402762/images/prize.png

23.36.76.96

200 OK

60 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/landings/279025/1696402762/images/prize.png
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 400 x 226, 8-bit/color RGBA, non-interlaced\012- data
Size
60 kB (60378 bytes)
Hash
4e17b2ba445338c8c2b9c4b956ad3445
6449c19e419ac509bc5f09e610f5607dc46a4a64
f009ea810eed4c5bd532ca671374fb25c887932383213f5737fe71ed7f1bd915

HTTP Headers

GET /landings/279025/1696402762/images/prize.png HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: mNWfLhA/1GC/bLWTcI6jToy72dxEcI2P4PaioAUxKmTSuQeOtTc/TmDTkFqn2u6utNH+8dMVmwg=
x-amz-request-id: NRJRFDXJ8H8AMK1P
Last-Modified: Wed, 04 Oct 2023 06:59:24 GMT
ETag: "4e17b2ba445338c8c2b9c4b956ad3445"
x-amz-server-side-encryption: AES256
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 60378
Date: Sat, 21 Oct 2023 02:00:20 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D&pixel_id=log_pixel_id

169.136.117.29

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D&pixel_id=log_pixel_id
IP
169.136.117.29:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
9a8d87be888035b9cf59025362e92296
0edcb14e43a52f490cf20a9637db32bd003483eb
9aa53bcf6c83b726bf9fba62ad7529dd29713a44f5e03b67c3931074e80f163d

HTTP Headers

POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_iframe_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sat, 21 Oct 2023 02:00:20 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-af1ccd2b4023beb7d83f104edb4a4890-0-00
X-Firefox-Spdy: h2

cdn.stfilecamp.com/multi_push.js

205.185.216.42

200 OK

1.1 kB

URL GET HTTP/1.1
cdn.stfilecamp.com/multi_push.js
IP
205.185.216.42:443
ASN
#20446 STACKPATH-CDN

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT

File type
ASCII text
Size
1.1 kB (1072 bytes)
Hash
a50322f9d3f3fafe3fb02be02285e433
c0a894b3bfa545832c3ad1c2f145005d02e50ac4
cb763e10664b93ac12aaead7af7b0838195e45eb89f678ebb3f5776b147f5d99

HTTP Headers

GET /multi_push.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 21 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=3393
Content-Length: 1072
Content-Type: text/javascript
Last-Modified: Thu, 07 Jul 2022 14:21:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "a50322f9d3f3fafe3fb02be02285e433"
x-amz-request-id: tx00000850bcac9fe305067-0065332fe5-3c6f4933-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster: 
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697853620.dop219.sk1.t,1697853620.cds209.sk1.shn,1697853620.dop219.sk1.t,1697853620.cds203.sk1.c

api.imotech.video/ad/pixelfile.html

169.136.117.29

200 OK

901 B

URL GET HTTP/2
api.imotech.video/ad/pixelfile.html
IP
169.136.117.29:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
gzip compressed data, from Unix\012- data
Size
901 B (901 bytes)
Hash
c984bbdd53ea369427ff8641ddf5e4e8
b33ac9a18d75819aa04aee73fe8c85ea7bdb9c2f
2a031d01d8eb1f76ea08c05467fafb2f3e86e15fe1dce1baf16901c6d44aba2a

HTTP Headers

GET /ad/pixelfile.html HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sat, 21 Oct 2023 02:00:20 GMT
content-type: text/html;charset=utf-8
bigotraceresponse: 00-9e18bde15a85ad5797da469cae486082-0-00
content-encoding: gzip
X-Firefox-Spdy: h2

tt.stfilecamp.com/jsfiles/site-protect2.0.js

205.185.216.10

200 OK

3.1 kB

URL GET HTTP/1.1
tt.stfilecamp.com/jsfiles/site-protect2.0.js
IP
205.185.216.10:443
ASN
#20446 STACKPATH-CDN

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT

File type
ASCII text
Size
3.1 kB (3137 bytes)
Hash
fc96ab06b0f9fcea6731405215ae5daf
8af9f27d895eb69754919a2fc0d74760fecd3860
9243e166cbcd628fd992eba59544ebf99328fd4db7c0c08c2fb28a7af14d759e

HTTP Headers

GET /jsfiles/site-protect2.0.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 21 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=450
Content-Length: 3137
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "fc96ab06b0f9fcea6731405215ae5daf"
x-amz-request-id: tx000005ed8de1ae4596cb0-0065332466-7a12c4e8-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-envoy-upstream-healthchecked-cluster: 
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697853620.dop021.sk1.t,1697853620.cds260.sk1.shn,1697853620.dop021.sk1.t,1697853620.cds231.sk1.c

tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js

205.185.216.10

200 OK

2.3 kB

URL GET HTTP/1.1
tt.stfilecamp.com/jsfiles/second_back_multi_bigo.js
IP
205.185.216.10:443
ASN
#20446 STACKPATH-CDN

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
Fingerprint6B:B2:F3:D7:42:0D:85:30:43:C7:AA:0A:52:05:37:3D:73:88:9B:9C
ValidityFri, 29 Sep 2023 07:01:52 GMT - Thu, 28 Dec 2023 07:01:51 GMT

File type
HTML document, ASCII text
Size
2.3 kB (2307 bytes)
Hash
96af925d55cad494665471c73ac01b04
5d2b1c06d2edb1a1ba9a5335c5dbb73c508b879b
1109fbd42583528695ba5995a756fd0fd09a992a85f50e54862e4b13c1cf75c2

HTTP Headers

GET /jsfiles/second_back_multi_bigo.js HTTP/1.1
Host: tt.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 21 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=855
Content-Length: 2307
Content-Type: text/javascript
Last-Modified: Mon, 27 Feb 2023 13:49:23 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "96af925d55cad494665471c73ac01b04"
x-amz-request-id: tx00000de29fc88b4608ef9-00653325fb-7a12c4b1-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697853620.dop010.sk1.t,1697853620.cds023.sk1.shn,1697853620.dop010.sk1.t,1697853620.cds239.sk1.c

api.imotech.video/bigoad/trackingview?it=1697853621375&title=Cash%20App%20%241000%20gift%20card&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=hllj.giftcardmagiczone.club&cookie_id=BA1.1.5412458222.1697853621&session_id=BA1.1.6040918548.1697853621&pixel_id=903883351103051008&timestamp_ms=1697853621376&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D

169.136.117.29

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?it=1697853621375&title=Cash%20App%20%241000%20gift%20card&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=hllj.giftcardmagiczone.club&cookie_id=BA1.1.5412458222.1697853621&session_id=BA1.1.6040918548.1697853621&pixel_id=903883351103051008&timestamp_ms=1697853621376&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D
IP
169.136.117.29:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
6b2fc6699c70cfc8e5a281aab0b79b37
8a6a2dc63a964eafd562989888a98f69770e7340
f30b95fb630e27ffe99e77a0eef77bb7cb63d0d1832eca12ac84cf2e94a43911

HTTP Headers

POST /bigoad/trackingview?it=1697853621375&title=Cash%20App%20%241000%20gift%20card&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=hllj.giftcardmagiczone.club&cookie_id=BA1.1.5412458222.1697853621&session_id=BA1.1.6040918548.1697853621&pixel_id=903883351103051008&timestamp_ms=1697853621376&extra=%7B%22action%22%3A%22init%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sat, 21 Oct 2023 02:00:20 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-b255e8464c1ba01bae373507bf8dee76-0-00
X-Firefox-Spdy: h2

api.imotech.video/bigoad/trackingview?it=1697853621375&title=Cash%20App%20%241000%20gift%20card&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=hllj.giftcardmagiczone.club&cookie_id=BA1.1.5412458222.1697853621&session_id=BA1.1.6040918548.1697853621&pixel_id=903883351103051008&timestamp_ms=1697853621376&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D

169.136.117.29

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?it=1697853621375&title=Cash%20App%20%241000%20gift%20card&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=hllj.giftcardmagiczone.club&cookie_id=BA1.1.5412458222.1697853621&session_id=BA1.1.6040918548.1697853621&pixel_id=903883351103051008&timestamp_ms=1697853621376&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D
IP
169.136.117.29:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
fb055fae4ced90faf561d1e7de3d5dc9
9d49484bed958583c803d31c62319fc088b4332b
98d587084dedba56a9e2d534f9a4bd36bb1758f25a643f7a3fbd91612a3422a6

HTTP Headers

POST /bigoad/trackingview?it=1697853621375&title=Cash%20App%20%241000%20gift%20card&referer=&resolution=1024*1280&lang=en-US&url=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__&host=hllj.giftcardmagiczone.club&cookie_id=BA1.1.5412458222.1697853621&session_id=BA1.1.6040918548.1697853621&pixel_id=903883351103051008&timestamp_ms=1697853621376&extra=%7B%22action%22%3A%22page_view%22%2C%22configId%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A1888%7D HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: openresty
date: Sat, 21 Oct 2023 02:00:20 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-ef1bf5820f5c5a17d0e132f830723083-0-00
X-Firefox-Spdy: h2

cdn.stfilecamp.com/stormtrk.js

205.185.216.42

200 OK

6.8 kB

URL GET HTTP/1.1
cdn.stfilecamp.com/stormtrk.js
IP
205.185.216.42:443
ASN
#20446 STACKPATH-CDN

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT

File type
ASCII text
Size
6.8 kB (6807 bytes)
Hash
39e5f8ad757fe438c784e8d883e47ab0
6b2905489485100c83605f43186c5843031e1f3b
e421906cc3be04e5f6795074c0a91e5a194f218b3f8c57adfed0f4d315dd445a

HTTP Headers

GET /stormtrk.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 21 Oct 2023 02:00:20 GMT
Connection: Keep-Alive
Cache-Control: max-age=3466
Content-Length: 6807
Content-Type: text/javascript
Last-Modified: Sat, 24 Dec 2022 08:48:24 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "39e5f8ad757fe438c784e8d883e47ab0"
x-amz-request-id: tx00000264ce6626c1faa8e-006533302d-3c6f4933-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697853620.dop219.sk1.t,1697853620.cds209.sk1.shn,1697853620.dop219.sk1.t,1697853620.cds014.sk1.c

route.frest.pro/is_redirect

104.21.77.196

200 OK

17 B

URL POST HTTP/2
route.frest.pro/is_redirect
IP
104.21.77.196:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGoogle Trust Services LLC
Subjectfrest.pro
FingerprintA1:6D:80:97:81:5F:7D:81:A1:3A:F7:AD:B0:7C:80:EF:AF:09:8F:04
ValiditySun, 08 Oct 2023 16:23:46 GMT - Sat, 06 Jan 2024 16:23:45 GMT

File type
JSON data\012- , ASCII text
Size
17 B (17 bytes)
Hash
6dec798efb56f56f33660938f6249ff6
e889219883cef38754dc1e5df7ca5277b3b314c8
b493cdb3b30ea63f6a924f814dfccfcfe305dac02106f9994ce2bcb2e8ed28c4

HTTP Headers

POST /is_redirect HTTP/1.1
Host: route.frest.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 10
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 21 Oct 2023 02:00:20 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IrDMVMhmcnH53fuEQMe5tVSeWo7BaeUQiF7xNXK%2FdGJcsN%2Bq2FfoQsTrFVmsSb1kiM33DzZY01XzrAxdv2SgUFQhkK6%2FrQ%2BD5r%2F2JyiE6ayk5sCYJcUd6g5ml%2B%2B0kkQsQaI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8195e808fd89b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn-adef.akamaized.net/images/favicon.ico

23.36.76.96

200 OK

4.1 kB

URL GET HTTP/1.1
cdn-adef.akamaized.net/images/favicon.ico
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerDigiCert Inc
Subjecta248.e.akamai.net
FingerprintA3:C7:B4:95:4E:16:BD:C5:8A:EE:85:53:5D:C1:C2:CD:43:E9:EC:B9
ValidityTue, 16 May 2023 00:00:00 GMT - Wed, 15 May 2024 23:59:59 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size
4.1 kB (4103 bytes)
Hash
4cdf3256cd7b8ec3917adb79d6bf457e
bc615337e9223183a126c8fb649774866fb53e69
fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0

HTTP Headers

GET /images/favicon.ico HTTP/1.1
Host: cdn-adef.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: mzbDFFn0Yhqdz4XL9s4sX6yByljdNVrKhKiK+UtK4DVRgNzfBI6OtL7EakQiGwqEsC19uC++cQI=
x-amz-request-id: 78F19547EBC3B810
Last-Modified: Wed, 07 Nov 2018 08:41:38 GMT
ETag: "4cdf3256cd7b8ec3917adb79d6bf457e"
Accept-Ranges: bytes
Content-Type: image/x-icon
Content-Length: 4103
Server: AmazonS3
X-Akamai-EW-Subworker: 8096267
Date: Sat, 21 Oct 2023 02:00:21 GMT
Connection: keep-alive
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"

cdn.stfilecamp.com/fp.min.js

205.185.216.42

200 OK

32 kB

URL GET HTTP/1.1
cdn.stfilecamp.com/fp.min.js
IP
205.185.216.42:443
ASN
#20446 STACKPATH-CDN

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerLet's Encrypt
Subjectstfilecamp.com
FingerprintC8:F2:82:03:44:08:54:DB:7D:D9:9F:D1:7D:8A:97:B3:4D:91:57:32
ValidityTue, 26 Sep 2023 11:10:19 GMT - Mon, 25 Dec 2023 11:10:18 GMT

File type
Unicode text, UTF-8 text, with very long lines (31370)
Size
32 kB (31705 bytes)
Hash
198f2f5b0a649f41fe890c59d37319aa
f24629687612889bb59f610df3879afcd766fb80
d2bc2cb800679f495a7731c105b2e2047965800515f98008867ab33edc940912

HTTP Headers

GET /fp.min.js HTTP/1.1
Host: cdn.stfilecamp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 21 Oct 2023 02:00:22 GMT
Connection: Keep-Alive
Cache-Control: max-age=3600
Content-Length: 31705
Content-Type: text/javascript
Last-Modified: Mon, 13 Jun 2022 11:23:14 GMT
Accept-Ranges: bytes
x-rgw-object-type: Normal
etag: "198f2f5b0a649f41fe890c59d37319aa"
x-amz-request-id: tx00000d2b456b83084a1cd-00653330b6-3c6f493d-sfo3a
strict-transport-security: max-age=15552000; includeSubDomains; preload
Vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin
X-HW: 1697853620.dop219.sk1.t,1697853620.cds209.sk1.shn,1697853621.dop219.sk1.t,1697853622.cds237.sk1.pr

hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__

52.19.101.114

200 OK

6.8 kB

URL User Request GET HTTP/2
hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
IP
52.19.101.114:443
ASN
#16509 AMAZON-02

Certificate
IssuerLet's Encrypt
Subjecthllj.giftcardmagiczone.club
Fingerprint21:24:0D:C0:5C:29:D9:F8:70:2A:08:26:D4:A9:3A:B6:F8:85:17:00
ValidityWed, 11 Oct 2023 02:15:18 GMT - Tue, 09 Jan 2024 02:15:17 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7034), with no line terminators
Size
6.8 kB (6803 bytes)
Hash
f1764a92f38b5aa329afbc461cf66029
543c56cd5fbe753c1aafa0d1985d49c7cbbda01e
32ce0cae6a188520160daa029131c62ee5bfd508883cb7aa404c5ee6f4e18e57

HTTP Headers

GET /c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__ HTTP/1.1
Host: hllj.giftcardmagiczone.club
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 21 Oct 2023 02:00:19 GMT
content-type: text/html; charset=utf-8
set-cookie: unique_id=653330b3000c366c; Path=/; Expires=Wed, 20 Dec 2023 02:00:19 GMT; Secure; SameSite=None
unique_id2=653330b3000c3f43; Path=/; Expires=Fri, 19 Jan 2024 02:00:19 GMT; Secure; SameSite=None
impression=; Path=/; Expires=Sat, 21 Oct 2023 02:00:19 GMT; Secure; SameSite=None
653330b3000c3f43_sl=[279025]; Path=/; Expires=Sat, 04 Nov 2023 02:00:19 GMT; Secure; SameSite=None
content-encoding: gzip
X-Firefox-Spdy: h2

api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A2017%7D&pixel_id=log_pixel_id

169.136.117.29

200 OK

104 B

URL POST HTTP/2
api.imotech.video/bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A2017%7D&pixel_id=log_pixel_id
IP
169.136.117.29:443
ASN
#10122 BIGO TECHNOLOGY PTE. LTD.

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerGlobalSign nv-sa
Subject*.imotech.video
Fingerprint08:2D:1A:49:D3:E7:0E:CD:C5:00:C3:FA:2D:4F:D0:DB:9B:E6:6B:EE
ValidityWed, 12 Jul 2023 02:46:27 GMT - Mon, 12 Aug 2024 02:46:26 GMT

File type
ASCII text, with no line terminators
Size
104 B (104 bytes)
Hash
2f1c1e5d204c6039693f39e7fce17468
360d56de2bf34b737e4df5c92582cede8c237737
4733168dc799def21a457b34bf21d95ad09b4524a0d856ae5119d1d1a6d95335

HTTP Headers

POST /bigoad/trackingview?extra=%7B%22action%22%3A%22log_no_bbg%22%2C%22pixel_id%22%3A%22903883351103051008%22%2C%22wst%22%3A323%2C%22drt%22%3A1858%2C%22lgt%22%3A2017%7D&pixel_id=log_pixel_id HTTP/1.1
Host: api.imotech.video
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 200 OK
server: openresty
date: Sat, 21 Oct 2023 02:00:20 GMT
content-type: application/json
content-length: 104
bigotraceresponse: 00-3b472fd28e517d69a1e5d757d6d20333-0-00
X-Firefox-Spdy: h2

stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__

104.26.4.120

200 OK

492 B

URL GET HTTP/2
stormtrk.com/api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__
IP
104.26.4.120:443
ASN
#13335 CLOUDFLARENET

Requested by
https://hllj.giftcardmagiczone.club/c/18f94c5e59b1d51a?cid=__SID__&sub1=__CAMPAIGN_NAME__&sub2=__SID__&sub3=__GROUP_NAME__&sub4=__AD_ID__&sub5=__APPID__&sub6=__GAID__&sub7=__AD_EXT__&source_id=__PUBLISHER_ID__&aff_sub=__CAMPAIGN_NAME__&s1=__CAMPAIGN_NAME__&sid=__CAMPAIGN_NAME__
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint12:CF:2B:DC:A1:B5:77:12:91:68:E8:DD:F0:22:9A:1B:06:84:6A:74
ValidityFri, 09 Dec 2022 00:00:00 GMT - Sat, 09 Dec 2023 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (513), with no line terminators
Size
492 B (492 bytes)
Hash
5595f8bbecb1575ab8338d01eac752f1
eac51404dcca8b6e7ed06ffcad3bd295f3832765
584cf3dd6b68e0a0da67643aed43a8146380d6cdbc49a8d98f3b08e38f3f45f2

HTTP Headers

GET /api/1.0/ping/pong?location=https%3A%2F%2Fhllj.giftcardmagiczone.club%2Fc%2F18f94c5e59b1d51a%3Fcid%3D__SID__%26sub1%3D__CAMPAIGN_NAME__%26sub2%3D__SID__%26sub3%3D__GROUP_NAME__%26sub4%3D__AD_ID__%26sub5%3D__APPID__%26sub6%3D__GAID__%26sub7%3D__AD_EXT__%26source_id%3D__PUBLISHER_ID__%26aff_sub%3D__CAMPAIGN_NAME__%26s1%3D__CAMPAIGN_NAME__%26sid%3D__CAMPAIGN_NAME__ HTTP/1.1
Host: stormtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hllj.giftcardmagiczone.club
DNT: 1
Connection: keep-alive
Referer: https://hllj.giftcardmagiczone.club/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 21 Oct 2023 02:00:21 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type, Access-Control-Allow-Headers, X-Requested-With
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t7Z0hl4nV%2FeN67Dx1IzSmtrwJmTMqSGUep7%2FPMVW7TavpMntY0Ziy%2B%2Fp0NdaY9KuoaMkVRyhKQ%2Box5hjQv5JG%2Byiz41otW3lQKrc%2BlyDy%2ByDQe9EGu0KfULt83UuWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8195e80b3d1256bd-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by