Report - robloxhackbydominusyoutube.blogspot.com.mt/

Report Overview

Submitted URL
robloxhackbydominusyoutube.blogspot.com.mt/
IP
172.217.21.161
ASN
#15169 GOOGLE
Submitted
2023-06-10 14:08:14
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
3.bp.blogspot.com	11048	2000-07-31	2012-05-21	2023-06-10	581 B	7.2 kB	142.250.74.161
i.ytimg.com	109	2007-12-11	2012-10-03	2023-06-10	958 B	66 kB	142.250.74.22
articles-images.sftcdn.net	560087	2008-09-15	2018-06-28	2023-05-30	530 B	87 kB	151.101.1.91
www.blogger.com	8975	1999-06-22	2012-05-22	2023-06-10	455 B	57 kB	216.58.207.233
nowqo.net	unknown	2022-04-15	2022-04-15	2023-04-16	841 B	0 B	0.0.0.0
robloxhackbydominusyoutube.blogspot.com	unknown	2000-07-31	2023-01-18	2023-05-19	969 B	20 kB	172.217.21.161
robloxhackbydominusyoutube.blogspot.com.mt	unknown	unknown	2023-01-18	2023-05-31	499 B	699 B	172.217.21.161
ocsp2.globalsign.com	1544	1999-04-19	2012-05-23	2023-06-10	357 B	1.9 kB	104.18.20.226
i.redd.it	5933	2010-05-31	2016-05-24	2023-06-08	448 B	40 kB	151.101.1.140
www.pissedconsumer.com	231422	2006-11-05	2015-01-14	2023-05-31	523 B	19 kB	5.79.91.241
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-06-10	2.7 kB	5.6 kB	142.250.74.131

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-06-10	medium	nowqo.net

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (20)

URL IP Response Size

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
d7982fa2873277d8b95c38946a035e1e
ae6d80e57b6c49948ac459ac7fc3873cf27a63d5
62ff4214c91318cd576f1bd4a2fb8dc7eb4a63d7a5c1aa7beb2a359e5c6610df

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

robloxhackbydominusyoutube.blogspot.com.mt/

172.217.21.161

190 B

URL
robloxhackbydominusyoutube.blogspot.com.mt/
IP
172.217.21.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
190 B (190 bytes)
Hash
04bd00e37020f59c3b79d50ffaaeb40e
c8a7031a975441809239b92b4231d57a53050fbc
cbdb58c76a60eaf43e253d22734cbe6880611cf9aefc049f42e1202ca1dcb826

HTTP Headers

GET / HTTP/1.1
Host: robloxhackbydominusyoutube.blogspot.com.mt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
location: https://robloxhackbydominusyoutube.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sat, 10 Jun 2023 14:07:57 GMT
expires: Sat, 10 Jun 2023 14:07:57 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 190
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
d7982fa2873277d8b95c38946a035e1e
ae6d80e57b6c49948ac459ac7fc3873cf27a63d5
62ff4214c91318cd576f1bd4a2fb8dc7eb4a63d7a5c1aa7beb2a359e5c6610df

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
d7982fa2873277d8b95c38946a035e1e
ae6d80e57b6c49948ac459ac7fc3873cf27a63d5
62ff4214c91318cd576f1bd4a2fb8dc7eb4a63d7a5c1aa7beb2a359e5c6610df

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

robloxhackbydominusyoutube.blogspot.com/

172.217.21.161

16 kB

URL
robloxhackbydominusyoutube.blogspot.com/
IP
172.217.21.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (14233)
Size
16 kB (16491 bytes)
Hash
f604861c35d477a4568d085267eb7813
cb930f89328053d8f0cb96b34def9f4d96a79c07
2e0cf3172f96f0b9433f2d3ab510c807446fc7d9a30fc43374d4ba20ec69035e

HTTP Headers

GET / HTTP/1.1
Host: robloxhackbydominusyoutube.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 10 Jun 2023 14:07:58 GMT
date: Sat, 10 Jun 2023 14:07:58 GMT
cache-control: private, max-age=0
last-modified: Wed, 07 Jun 2023 11:28:40 GMT
etag: W/"6489ae43c4f4de7ed9c481e38fb41615bf59298b839f749bfe9498d6bcada42c"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 16491
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

robloxhackbydominusyoutube.blogspot.com/js/cookienotice.js

172.217.21.161

2.0 kB

URL
robloxhackbydominusyoutube.blogspot.com/js/cookienotice.js
IP
172.217.21.161:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
2.0 kB (2026 bytes)
Hash
a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568

HTTP Headers

GET /js/cookienotice.js HTTP/1.1
Host: robloxhackbydominusyoutube.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sat, 10 Jun 2023 14:07:59 GMT
expires: Sat, 17 Jun 2023 14:07:59 GMT
cache-control: public, max-age=604800
last-modified: Sat, 10 Jun 2023 11:51:05 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

3.bp.blogspot.com/-dH83a-EWxQI/WUwQjo12WjI/AAAAAAAAFPM/GUuzo9rqoeYJnryg9Slr3L37faXCVlD0wCK4BGAYYCw/s1600/logo_650c697d3a6002c8f63991bb43c0d6b4.png

142.250.74.161

6.7 kB

URL
3.bp.blogspot.com/-dH83a-EWxQI/WUwQjo12WjI/AAAAAAAAFPM/GUuzo9rqoeYJnryg9Slr3L37faXCVlD0wCK4BGAYYCw/s1600/logo_650c697d3a6002c8f63991bb43c0d6b4.png
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
PNG image data, 200 x 41, 8-bit/color RGBA, non-interlaced\012- data
Size
6.7 kB (6658 bytes)
Hash
8b2271ebafdb2a99c69f429d440c555b
38ab355f4cad880637c156f6afe451a9df8cba60
180547af487d795d7fd737f992fb288eb9ec53b79404955a49dd36569e96a230

HTTP Headers

GET /-dH83a-EWxQI/WUwQjo12WjI/AAAAAAAAFPM/GUuzo9rqoeYJnryg9Slr3L37faXCVlD0wCK4BGAYYCw/s1600/logo_650c697d3a6002c8f63991bb43c0d6b4.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="logo_650c697d3a6002c8f63991bb43c0d6b4.png"
x-content-type-options: nosniff
server: fife
content-length: 6658
x-xss-protection: 0
date: Sat, 10 Jun 2023 11:01:02 GMT
expires: Sun, 11 Jun 2023 11:01:02 GMT
cache-control: public, max-age=86400, no-transform
age: 11217
etag: "v14f4"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
867098685e7b7157296e6a0fe1d20787
0ad13b8afa73089409a14c985cf3e1013772b606
12855eb40a9834ca052037ef1c1fd57f23a8e293fd14c8bcdcfea216d1536bbe

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

i.ytimg.com/vi/ynkUY5TJeJs/maxresdefault.jpg

142.250.74.22

1.1 kB

URL
i.ytimg.com/vi/ynkUY5TJeJs/maxresdefault.jpg
IP
142.250.74.22:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Size
1.1 kB (1097 bytes)
Hash
e2ddfee11ae7edcae257da47f3a78a70
6e902fa6302eb30cd204579bca6a59b37233e262
20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711

HTTP Headers

GET /vi/ynkUY5TJeJs/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
vary: Origin
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: image/jpeg
date: Sat, 10 Jun 2023 14:07:59 GMT
expires: Sat, 10 Jun 2023 14:08:29 GMT
cache-control: public, max-age=30
x-content-type-options: nosniff
server: sffe
content-length: 1097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
976ddc35a5e0905c0323fc1e2de7e1c6
fba04768049a0ab61950c5d63e91d22f08827595
241628b3912a151783f629d6c1b013db421bd00bd3efb99b0e28bf6548be3cc2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

i.ytimg.com/vi/te8IxpfCm7U/maxresdefault.jpg

142.250.74.22

64 kB

URL
i.ytimg.com/vi/te8IxpfCm7U/maxresdefault.jpg
IP
142.250.74.22:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size
64 kB (64094 bytes)
Hash
c4a662125cf7abe89c0a4672cb0faa6e
708f0e739beb36ff5bda4e5c8792506d2f89be77
c5c405764bc4d2eb886a992298147ff1ac4072a5442cb13428180cbbebd7d608

HTTP Headers

GET /vi/te8IxpfCm7U/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 64094
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Jun 2023 14:07:59 GMT
expires: Sat, 10 Jun 2023 16:07:59 GMT
cache-control: public, max-age=7200
etag: "1560022853"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

articles-images.sftcdn.net/wp-content/uploads/sites/3/2019/11/Where-to-find-Roblox-song-ids.jpg

151.101.1.91

86 kB

URL
articles-images.sftcdn.net/wp-content/uploads/sites/3/2019/11/Where-to-find-Roblox-song-ids.jpg
IP
151.101.1.91:0
ASN
#54113 FASTLY

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:11:28 19:29:12], baseline, precision 8, 1280x720, components 3\012- data
Size
86 kB (86014 bytes)
Hash
f3a188412a3e647e9ac867cc72927d92
7ef4d3baecf59830c8b89b4c6d9ee68ca6f1ccb7
4cfa5887104f346fd4d12b30335337b073f2f48d1f8882f07ef3eef670ab09a5

HTTP Headers

GET /wp-content/uploads/sites/3/2019/11/Where-to-find-Roblox-song-ids.jpg HTTP/1.1
Host: articles-images.sftcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 28 Nov 2019 18:30:59 GMT
etag: "f3a188412a3e647e9ac867cc72927d92"
cache-control: max-age=31536000
expires: Fri, 27 Nov 2020 18:30:58 GMT
server: AmazonS3
via: 1.1 472198048b2177f6905d44f001875bcc.cloudfront.net (CloudFront), 1.1 varnish
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: 34HRWNCzGxg0vczyxfUgm0RW_5jCRO07eITjqc7ua8yEFTBsl4u8LQ==
accept-ranges: bytes
date: Sat, 10 Jun 2023 14:07:59 GMT
age: 3916848
x-served-by: cache-bma1681-BMA
x-cache: Hit from cloudfront, HIT
x-cache-hits: 1
x-timer: S1686406079.150264,VS0,VE4
content-length: 86014
X-Firefox-Spdy: h2

www.blogger.com/static/v1/widgets/3381873457-widgets.js

216.58.207.233

56 kB

URL
www.blogger.com/static/v1/widgets/3381873457-widgets.js
IP
216.58.207.233:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2215)
Size
56 kB (56538 bytes)
Hash
6adf42b296c324d24b2e05b94a60bde1
81d101b2f93c901f658536dbcac6302a10b504fd
f25e9ec60e38e8e42e761a6016399cb867563e17daf982b5886234fec9471785

HTTP Headers

GET /static/v1/widgets/3381873457-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56538
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 02:32:06 GMT
expires: Wed, 05 Jun 2024 02:32:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Jun 2023 23:50:54 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 387353
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
867098685e7b7157296e6a0fe1d20787
0ad13b8afa73089409a14c985cf3e1013772b606
12855eb40a9834ca052037ef1c1fd57f23a8e293fd14c8bcdcfea216d1536bbe

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
976ddc35a5e0905c0323fc1e2de7e1c6
fba04768049a0ab61950c5d63e91d22f08827595
241628b3912a151783f629d6c1b013db421bd00bd3efb99b0e28bf6548be3cc2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp2.globalsign.com/gsorganizationvalsha2g2

104.18.20.226

1.5 kB

URL
ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1459 bytes)
Hash
f920f9eb144b16e16963a2a783f3df61
1859c8fb1d7c60086e2fd37b2576cb1e2f1b07b6
ab8d66901c770d8f9850dc380b4c92772fbdf1b002928892ab13229a9413e9c1

HTTP Headers

POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 10 Jun 2023 14:07:59 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Wed, 14 Jun 2023 11:11:21 GMT
ETag: "1859c8fb1d7c60086e2fd37b2576cb1e2f1b07b6"
Last-Modified: Sat, 10 Jun 2023 11:11:22 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2971
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d522f0bdb940b59-OSL

i.redd.it/ijmx7xory9u51.jpg

151.101.1.140

39 kB

URL
i.redd.it/ijmx7xory9u51.jpg
IP
151.101.1.140:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 775x647, components 3\012- data
Size
39 kB (38768 bytes)
Hash
a68cd8d19b8df281aee815e384c5646e
547e6135ccb873f2b5581cca8c7f208e70d9f802
13e2627896bd06119ae3c1e35331795f1cba883ebd85659e88a3fff83d21f70b

HTTP Headers

GET /ijmx7xory9u51.jpg HTTP/1.1
Host: i.redd.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Tue, 20 Oct 2020 16:17:00 GMT
etag: "a68cd8d19b8df281aee815e384c5646e"
expires: Thu, 31 Dec 2037 23:59:59 GMT
content-type: image/jpeg
x-canonical-filename-image-generation: 1
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Jun 2023 14:07:59 GMT
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true,  "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 1.0, "failure_fraction": 1.0}
content-length: 38768
X-Firefox-Spdy: h2

www.pissedconsumer.com/blog/wp-content/uploads/2018/11/recover-hacked-roblox-account.png

5.79.91.241

18 kB

URL
www.pissedconsumer.com/blog/wp-content/uploads/2018/11/recover-hacked-roblox-account.png
IP
5.79.91.241:0
ASN
#60781 LeaseWeb Netherlands B.V.

File type
PNG image data, 715 x 629, 8-bit colormap, non-interlaced\012- data
Size
18 kB (18421 bytes)
Hash
92676364d92022280d27f6f685b2a73b
d8bd2b990e76156b671480e4cec546b475685ac8
8961acfb76e070d6e62d1de04ac231022d9b922d76b4485f7f50a48bde2707ca

HTTP Headers

GET /blog/wp-content/uploads/2018/11/recover-hacked-roblox-account.png HTTP/1.1
Host: www.pissedconsumer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Sat, 10 Jun 2023 14:07:59 GMT
content-type: image/png
content-length: 18421
last-modified: Tue, 14 Jun 2022 04:21:54 GMT
etag: "62a80ce2-47f5"
expires: Sat, 10 Jun 2023 14:37:59 GMT
access-control-allow-origin: *
cache-control: max-age=1800, public
accept-ranges: bytes
content-security-policy-report-only: default-src https: blob:; script-src https: blob: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; report-uri /csp-report
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
8748a0f3e1abe3ad036cf9ee28b3d124
44e7298258e112896ee66a631873bdfe6dda3132
b24f245b43de6a0328dfef752fdcf83766d66c475d08b463c062e6202c2121da

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Jun 2023 14:07:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmFzeWFrdXJuaWFnbWFpbGNvbSIsInRlbXBsYXRlIiwiRmFzdGluay54bWwiLCJyYXN5YWt1cm5pYWdtYWlsY29tIiwicm9ibG94aGFja2J5ZG9taW51c3lvdXR1YmUuYmxvZ3Nwb3QuY29tIiwicm9ibG94aGFja2J5ZG9taW51c3lvdXR1YmUuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1jcm4uanMiXQ

0.0.0.0

0 B

URL User Request GET
nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmFzeWFrdXJuaWFnbWFpbGNvbSIsInRlbXBsYXRlIiwiRmFzdGluay54bWwiLCJyYXN5YWt1cm5pYWdtYWlsY29tIiwicm9ibG94aGFja2J5ZG9taW51c3lvdXR1YmUuYmxvZ3Nwb3QuY29tIiwicm9ibG94aGFja2J5ZG9taW51c3lvdXR1YmUuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1jcm4uanMiXQ
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /roblox/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmFzeWFrdXJuaWFnbWFpbGNvbSIsInRlbXBsYXRlIiwiRmFzdGluay54bWwiLCJyYXN5YWt1cm5pYWdtYWlsY29tIiwicm9ibG94aGFja2J5ZG9taW51c3lvdXR1YmUuYmxvZ3Nwb3QuY29tIiwicm9ibG94aGFja2J5ZG9taW51c3lvdXR1YmUuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1jcm4uanMiXQ HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://robloxhackbydominusyoutube.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (20)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type