Do Not Redeem #3

Category
Forensics
Points
-1
Solves
-1
Tags

Too bad, Kitler did get scammed. Kitler met a lot of people recently, and is having a hard time trying to figure out who exactly the scammer could’ve been. Can you figure out the scammer’s username (on the platform they met), and the link through which the scammer sent Kitler the scam app. Answer according to the below flag format:

Flag format: KashiCTF{username_link}, e.g. KashiCTF{savsch_https://www.youtu.be/dQw4w9WgXcQ}

Download kitler’s-phone.tar.gz : Use the same file as in the challenge description of forensics/Do Not Redeem #1

$ file --mime-type -b *
text/plain
application/gzip
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
image/png
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
application/json
text/plain
image/png
text/plain
image/gif
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
text/plain
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
application/json
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/png
text/plain
image/webp
text/plain
image/webp
text/plain
image/png
text/plain
image/webp
text/plain
application/gzip
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/jpeg
text/plain
image/webp
text/plain
application/gzip
text/plain
image/png
text/plain
image/jpeg
text/plain
image/png
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/png
text/plain
application/gzip
text/plain
image/png
text/plain
image/webp
text/plain
image/png
text/plain
application/gzip
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
image/png
text/plain
image/webp
text/plain
application/gzip
text/plain
application/gzip
text/plain
image/webp
text/plain
image/gif
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
image/png
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/png
text/plain
image/png
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/json
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/json
text/plain
image/png
text/plain
application/gzip
text/plain
application/gzip
text/plain
image/webp
text/plain
image/webp
text/plain
image/webp
text/plain
application/gzip
text/plain
image/webp
text/plain

Gunzip and there will be a json with message and a link.

Do Not Redeem #3 Flag: KashiCTF{savsch_https://we.tl/t-Ku8Le7js}