robloxcodeslist2018toysr.blogspot.lt/
142.250.74.65 189 B URL robloxcodeslist2018toysr.blogspot.lt/
IP 142.250.74.65:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash fe70c46320821497f1fb301e5933f27b
38b7c9f34b34f79fdb0270255746d9b6c22d4abe
454b20ffcfc2ecae92f755a7e11110aa141dd4c88409776f8d2f26e07f0bf2f2
GET / HTTP/1.1
Host: robloxcodeslist2018toysr.blogspot.lt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Location: http://robloxcodeslist2018toysr.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 15 Apr 2023 12:01:37 GMT
Expires: Sat, 15 Apr 2023 12:01:37 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 189
Server: GSE
robloxcodeslist2018toysr.blogspot.com/
142.250.74.65 189 B URL robloxcodeslist2018toysr.blogspot.com/
IP 142.250.74.65:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 4a8fba353d92df849a5862e4854e0886
4d82131604598b039454c15220d49cefc0a48271
9fc67b20b3a4ad6571f77723d5de9a71bbe25313e09533bc70275f767b4f3095
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: robloxcodeslist2018toysr.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Location: https://robloxcodeslist2018toysr.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 15 Apr 2023 12:01:38 GMT
Expires: Sat, 15 Apr 2023 12:01:38 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 189
Server: GSE
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 46b79db05e8f73d98e627f5fca196625
52c8052b2de7eb56042a3a5dce90a9f4617d0aa0
42ebb62b20df4a8e740ebde9f3da7c9c5781aeb0955e88755b8037ed3379b911
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 46b79db05e8f73d98e627f5fca196625
52c8052b2de7eb56042a3a5dce90a9f4617d0aa0
42ebb62b20df4a8e740ebde9f3da7c9c5781aeb0955e88755b8037ed3379b911
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
robloxcodeslist2018toysr.blogspot.com/
142.250.74.65 67 kB URL robloxcodeslist2018toysr.blogspot.com/
IP 142.250.74.65:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (23873)
Hash cf64f4b1ce9d4fba6871cc13aad0966e
c62461663d17b69b33f5163fb48a59b6b30bfd0b
71c21f2f99f460bb3f5f166df17f630c34a596505afcb9eb4420b2266cbfb1e3
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: robloxcodeslist2018toysr.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 15 Apr 2023 12:01:39 GMT
date: Sat, 15 Apr 2023 12:01:39 GMT
cache-control: private, max-age=0
last-modified: Sat, 15 Apr 2023 11:50:12 GMT
etag: W/"3dc637bc4e692665fbe47a5375fdf64c0d837b5d850e57806ba625d2d1c29202"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 67180
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
robloxcodeslist2018toysr.blogspot.com/js/cookienotice.js
142.250.74.65 2.0 kB URL robloxcodeslist2018toysr.blogspot.com/js/cookienotice.js
IP 142.250.74.65:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Phishing
GET /js/cookienotice.js HTTP/1.1
Host: robloxcodeslist2018toysr.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: robloxcodeslist2018toysr.blogspot.com
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sat, 15 Apr 2023 12:01:39 GMT
expires: Sat, 22 Apr 2023 12:01:39 GMT
cache-control: public, max-age=604800
last-modified: Sat, 15 Apr 2023 10:49:57 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 2554dce603910d54df921c966dcf4534
5b4723c280c6fbf9eb99f5eb4d1b6ce0850b09f5
6af76a4fcf5ef2dcfc2f89e08b927d98ee89cf5afad11a5fe0dfe989e841a7ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 2554dce603910d54df921c966dcf4534
5b4723c280c6fbf9eb99f5eb4d1b6ce0850b09f5
6af76a4fcf5ef2dcfc2f89e08b927d98ee89cf5afad11a5fe0dfe989e841a7ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 6033939083a8d33a40f75374ef257b57
c624b9d622d6d63dbc9a7a3860a550bb3280886e
053f4269987de853c36e36e0f5dada4725c3ff616092a41c039eb21337c00f4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.net/gh/Arlina-Design/redvision@master/unlipage.js
151.101.1.229 1.2 kB URL cdn.jsdelivr.net/gh/Arlina-Design/redvision@master/unlipage.js
IP 151.101.1.229:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (4454)
Hash e969f60c74c14bdb9ed8ac5eaf277566
a0ca13ec5bf8a5fb4a5007a715d4b39c9a1e3940
ee27dfda9caf6fdbfe66d038c851a329a0760314ee16ed3dadd31c382571427d
GET /gh/Arlina-Design/redvision@master/unlipage.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"1167-W/SS8JozHMByS3cMJQo6M6lV3Fw"
content-encoding: br
accept-ranges: bytes
date: Sat, 15 Apr 2023 12:01:39 GMT
age: 24897
x-served-by: cache-fra-eddf8230047-FRA, cache-bma1634-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1224
X-Firefox-Spdy: h2
i.ytimg.com/vi/1VLutJHJ0ck/maxresdefault.jpg
142.250.74.54 56 kB URL i.ytimg.com/vi/1VLutJHJ0ck/maxresdefault.jpg
IP 142.250.74.54:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash f93d037938037ebb9e44aa24ae37cf75
6cfaffcc40a85958775fde69b8c430375535201b
a4f9de697b97e1cde0f4c0a2fc53c7dc2d48819d291e21ed12f9dbcd30bdcb04
GET /vi/1VLutJHJ0ck/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 56372
date: Sat, 15 Apr 2023 12:01:39 GMT
expires: Sat, 15 Apr 2023 14:01:39 GMT
cache-control: public, max-age=7200
etag: "1457214138"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/FNWuoTsNy34/maxresdefault.jpg
142.250.74.54 1.1 kB URL i.ytimg.com/vi/FNWuoTsNy34/maxresdefault.jpg
IP 142.250.74.54:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash e2ddfee11ae7edcae257da47f3a78a70
6e902fa6302eb30cd204579bca6a59b37233e262
20e9aab22032d85684d7d916a1013f7c577a132a5b10ea3fd3578e8d0b28a711
GET /vi/FNWuoTsNy34/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: image/jpeg
date: Sat, 15 Apr 2023 12:01:39 GMT
expires: Sat, 15 Apr 2023 12:02:09 GMT
cache-control: public, max-age=30
x-content-type-options: nosniff
server: sffe
content-length: 1097
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/PNqGItnjia4/hqdefault.jpg
142.250.74.54 18 kB URL i.ytimg.com/vi/PNqGItnjia4/hqdefault.jpg
IP 142.250.74.54:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash 2d8019719f0ea3b6faef1c389af9feff
062da3fe09cd79cf3375f8ce0864b55c57e2ffa6
0937341140d7806e5e6706698d825c16bb6152451764df1dd9b0b3cca5a010f2
GET /vi/PNqGItnjia4/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 18308
date: Sat, 15 Apr 2023 12:01:39 GMT
expires: Sat, 15 Apr 2023 14:01:39 GMT
cache-control: public, max-age=7200
etag: "1533261994"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.ytimg.com/vi/C0xzPC9SVUs/maxresdefault.jpg
142.250.74.54 97 kB URL i.ytimg.com/vi/C0xzPC9SVUs/maxresdefault.jpg
IP 142.250.74.54:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash d85ec334b4fc431c8911898fa65e8b64
20e87ed8bd1cb600212e3fc428984006dda54a73
1b7ab9978cd1d9097f448e3b6e1a7d0d8a6f4072360c9154a25511ad56cd096f
GET /vi/C0xzPC9SVUs/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 97353
date: Sat, 15 Apr 2023 12:01:39 GMT
expires: Sat, 15 Apr 2023 14:01:39 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/1852870454-widgets.js
142.250.74.41 57 kB URL www.blogger.com/static/v1/widgets/1852870454-widgets.js
IP 142.250.74.41:0
File type ASCII text, with very long lines (2221)
Hash d19b4e5daf1cca65910963a91514ff6d
e4c300bb1b62d4ece1b938cb3ee0f6322ee0a8b9
3d2a90a36164abc85a92ede291287c7135725dae9c5c124b8f3f557f7c12c7d4
GET /static/v1/widgets/1852870454-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 14 Apr 2023 08:03:26 GMT
expires: Sat, 13 Apr 2024 08:03:26 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 14 Apr 2023 04:55:24 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 100693
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ih1.redbubble.net/image.985744710.2536/fposter,small,wall_texture,product,750x1000.jpg
68.232.35.237 121 kB URL ih1.redbubble.net/image.985744710.2536/fposter,small,wall_texture,product,750x1000.jpg
IP 68.232.35.237:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x1000, components 3\012- data
Size 121 kB (120594 bytes)
Hash 85c14b496aa2a3e23d5c23581eb21120
1eee22e7eb8db58bdb50559fd1bf3c6e3cc59ca4
2321d2dacea82609a9e0be4ce36697d75e432aed4697160db25a9fe06770efb9
GET /image.985744710.2536/fposter,small,wall_texture,product,750x1000.jpg HTTP/1.1
Host: ih1.redbubble.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: https://www.redbubble.com
access-control-expose-headers: Content-Length,Content-Range
age: 53830
cache-control: max-age=31556952, public
content-disposition: inline
content-transfer-encoding: binary
content-type: image/jpeg
date: Sat, 15 Apr 2023 12:01:39 GMT
etag: W/"2321d2dacea82609a9e0be4ce36697d7"
last-modified: Fri, 14 Apr 2023 21:04:29 GMT
referrer-policy: strict-origin-when-cross-origin
server: ECS (dcb/7FA4)
x-cache: HIT
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-request-id: 12c2f204-711d-4822-9782-4c7b8eea12ff
x-xss-protection: 1; mode=block
content-length: 120594
X-Firefox-Spdy: h2
images-na.ssl-images-amazon.com/images/I/517-GKMpSaL._AC_SX522_.jpg
143.204.54.16 28 kB URL images-na.ssl-images-amazon.com/images/I/517-GKMpSaL._AC_SX522_.jpg
IP 143.204.54.16:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 517x995, components 3\012- data
Hash 3abbf74ab8f0bb48aa78617dd691bf12
fea679fc031a820b85fd7dbeba548b42357b7dfc
3601d18b46494b5ac8485424480fc108c163ff393937ba3d4643011f5cb2c85e
GET /images/I/517-GKMpSaL._AC_SX522_.jpg HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 28438
server: Server
date: Fri, 14 Apr 2023 16:07:22 GMT
x-amz-ir-id: 1b340b03-5f79-4571-bf2b-cd700a233d56
expires: Thu, 09 Apr 2043 16:07:22 GMT
cache-control: max-age=630720000,public
surrogate-key: x-cache-791 /images/I/517-GKMpSaL
timing-allow-origin: https://www.amazon.in, https://www.amazon.com
edge-cache-tag: x-cache-791,/images/I/517-GKMpSaL
access-control-allow-origin: *
last-modified: Fri, 20 Sep 2019 17:01:53 GMT
x-nginx-cache-status: MISS
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HBj05eeJBjEm4GUWygE832SVPSKIJ3VkwbkThQTr-LGMsAZrDBXDIA==
age: 71657
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 2554dce603910d54df921c966dcf4534
5b4723c280c6fbf9eb99f5eb4d1b6ce0850b09f5
6af76a4fcf5ef2dcfc2f89e08b927d98ee89cf5afad11a5fe0dfe989e841a7ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.21.226 1.5 kB URL ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 104.18.21.226:0
Hash 32c1229b7b05aea1b58e4567acdcd72b
e1ee55d45e5a7d44fa49a42d62b2831202e0e113
c5b7bee62cd054257065af51ee1490d104fa123f26ed75f3833f83d5604cd399
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 12:01:39 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "008D6B4B3E9A6D28EEC2B2855DA1150A72FDA7F0"
Expires: Sat, 15 Apr 2023 23:00:00 GMT
Last-Modified: Sat, 15 Apr 2023 11:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2528
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b8408fffcde1bfe-OSL
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 6033939083a8d33a40f75374ef257b57
c624b9d622d6d63dbc9a7a3860a550bb3280886e
053f4269987de853c36e36e0f5dada4725c3ff616092a41c039eb21337c00f4b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images-na.ssl-images-amazon.com/images/S/pv-target-images/baefbeb42b6c76ebb2c7d4b86c5134942849012d87c0131c48487bec229f4f43._RI_V_TTW_.jpg
143.204.54.16 436 kB URL images-na.ssl-images-amazon.com/images/S/pv-target-images/baefbeb42b6c76ebb2c7d4b86c5134942849012d87c0131c48487bec229f4f43._RI_V_TTW_.jpg
IP 143.204.54.16:0
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 1600x1200, components 3\012- data
Size 436 kB (435956 bytes)
Hash 45dbd0681312f0af75803ad7912dafd5
0b3c8ca9a4f334fa5312c1feec714b63c1089371
5827a8ad9af8a362a6c2ac2d9a9f950ec56e5a708a1962dea454d8bc869417b4
GET /images/S/pv-target-images/baefbeb42b6c76ebb2c7d4b86c5134942849012d87c0131c48487bec229f4f43._RI_V_TTW_.jpg HTTP/1.1
Host: images-na.ssl-images-amazon.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 435956
server: Server
date: Sat, 08 Apr 2023 22:37:10 GMT
x-amz-ir-id: cb345018-2d0c-4f19-8401-1277ced53675
expires: Sat, 15 Apr 2023 15:04:32 GMT
cache-control: max-age=604800,public
surrogate-key: x-cache-521 /images/S/pv-target-images/baefbeb42b6c76ebb2c7d4b86c5134942849012d87c0131c48487bec229f4f43
edge-cache-tag: x-cache-521,/images/S/pv-target-images/baefbeb42b6c76ebb2c7d4b86c5134942849012d87c0131c48487bec229f4f43
access-control-allow-origin: *
last-modified: Sat, 08 Feb 2020 22:04:32 GMT
x-nginx-cache-status: HIT
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NZ50ToAlZTV37FibqFu0DrwTunzTyjOx48Ndpqcr9m6_0o5mWr5IXg==
age: 566669
X-Firefox-Spdy: h2
www.pissedconsumer.com/blog/wp-content/uploads/2018/11/why-i-was-banned-by-Roblox.png
5.79.91.241 13 kB URL www.pissedconsumer.com/blog/wp-content/uploads/2018/11/why-i-was-banned-by-Roblox.png
IP 5.79.91.241:0
ASN #60781 LeaseWeb Netherlands B.V.
File type PNG image data, 715 x 268, 8-bit colormap, non-interlaced\012- data
Hash dd5b43cc19bdd682669a18ba8d70470b
2a59cbffab1ab15c6cbccc06fd6ede932ac53748
e587b849d77c8a9b8563f7a8318651479ebb8aa25e5d2dfde317c626446d0db1
GET /blog/wp-content/uploads/2018/11/why-i-was-banned-by-Roblox.png HTTP/1.1
Host: www.pissedconsumer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 15 Apr 2023 12:01:39 GMT
content-type: image/png
content-length: 13060
last-modified: Tue, 14 Jun 2022 04:23:05 GMT
etag: "62a80d29-3304"
expires: Sat, 15 Apr 2023 12:31:39 GMT
access-control-allow-origin: *
cache-control: max-age=1800, public
accept-ranges: bytes
content-security-policy-report-only: default-src https: blob:; script-src https: blob: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; report-uri /csp-report
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash ef38c91decc87d52e74191fae8678822
d979abf0931454ed2807174d06c435c8532ea68b
4a1a81a187ddcda8ca7c50fed7f452930726771843181d0dbdf8f3016523e75c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash ef38c91decc87d52e74191fae8678822
d979abf0931454ed2807174d06c435c8532ea68b
4a1a81a187ddcda8ca7c50fed7f452930726771843181d0dbdf8f3016523e75c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nowqo.net/roblox/images/gamebaglogo.png
172.67.223.249200 OK 3.3 kB URL GET HTTP/3 nowqo.net/roblox/images/gamebaglogo.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f
GET /roblox/images/gamebaglogo.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 3340
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mLSmqWLwPZR3rioUARlRiiDY1KrFLczI0fcK31egCx11zO43YJsuFoqEpRBtp1EvX7fd4SkFpWBbDaLT4VwXGMJDucxzzJqb8wORbqNYaGqAB8j5Ya%2FVOigd6AA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b8409033810b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/header.png
172.67.223.249200 OK 131 kB URL GET HTTP/3 nowqo.net/roblox/images/header.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 131 kB (131285 bytes)
Hash 35e93538f31d67876a2cb38bf94279d8
49bf97732e9bffb5371ad60d024901b09d83651b
95c1de9315834de2ff3608a2dc048a6aedc273e665f9b54eb956523a81fc91df
GET /roblox/images/header.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 131285
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QkRhAPVJ9m8%2BLafkEEniuj7N%2BtyBlGlD%2B%2BoOKbQElFIj5vHLcHHfSDuwD1ZpJ6h5%2FGW2IIQztBYWdH%2BqLflvAi%2FKSns3UEvIeCWxE%2BH0bHm7zAtMfrgEjDl8FME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b8409034821b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/ft-1.png
172.67.223.249200 OK 3.3 kB URL GET HTTP/3 nowqo.net/roblox/images/ft-1.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f
GET /roblox/images/ft-1.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 3340
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hprxeVWSZEBlzEZqSPXHXJQRAK0VPCgClZa0wDKUDSyQT7JUXdzfudrweNkVzVWHNNYTB3jlJ9QGo8aycjyM6Rbydbv%2FH6Xv7XX%2Fpii99oESFFQvYabI%2FpoP6fM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840903482ab505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js
151.101.193.229200 OK 2.2 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js
IP 151.101.193.229:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint88:D1:D3:FA:BE:69:45:71:5A:74:78:14:1A:E8:F3:5A:88:69:9C:7F
ValidityFri, 23 Dec 2022 10:55:14 GMT - Wed, 24 Jan 2024 10:55:13 GMT
File type ASCII text, with very long lines (4802)
Hash b6d1bf479d1c52f17263b38c326bd373
f8a15a93aa697155760866fbadabf9ee8725e454
9d3fa20ac8b8c59f87a4b19a32dc294df6f7a7dfad5dc062d602d047b5fb7864
GET /npm/js-base64@3.7.2/base64.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.7.2
x-jsd-version-type: version
etag: W/"1405-lMmxLE0z8/TnsipvbhQg5ckAA8Q"
content-encoding: br
accept-ranges: bytes
date: Sat, 15 Apr 2023 12:01:40 GMT
age: 1483118
x-served-by: cache-fra-eddf8230050-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2182
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
104.17.24.14200 OK 1.5 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
IP 104.17.24.14:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (3201), with no line terminators
Hash 8e09ceb5490863a66cd2e83ca3d7e524
35e3d074516ec70c508d748f7ae01827bc0c28ba
cccbb374fd4cb6dcbac9df64456b49cb11530e7bafdac6c6c7e67ff2ed350db9
GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css; charset=utf-8
content-length: 1541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-c81"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7403505
expires: Thu, 04 Apr 2024 12:01:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Bxyie%2FlIrD69lX%2Fu3rwnV%2FE2y%2FxPn1u5uTyjzKzVt7IyoXJULkh7YhR3BK0isJULYiMPfRDv%2BeaylHek4XUvXMb51qvaT2ekOK7w6Oar%2BKMP9aurosQdvdI7u1ADxpD7DMNLSlM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7b8409039850b4ee-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nowqo.net/roblox/images/font-awesome.min.css
172.67.223.249200 OK 845 kB URL GET HTTP/3 nowqo.net/roblox/images/font-awesome.min.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (27546)
Size 845 kB (844567 bytes)
Hash 6bd6f0620f18f8d00c23143c46b042e9
70da63b8bfde772943fddcacd35d260d919869e5
6db913d4530b11132db27717c1ff859a78cfa19aec7bad33cdc32f73dca98c6f
GET /roblox/images/font-awesome.min.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 134203
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ZeAxE9bngWByYS1aQYoyBG9L6R8GF5PuV5LtUHM2vC87PHii%2FtXq0QibiE8hJgTO5kgB2kDGKCjIcqlMxyupcEM3z17ZUHcfLaqJlkrvjhPUNkyBhLjJFSISM8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409032febb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/panel-overlay.png
172.67.223.249200 OK 3.1 kB URL GET HTTP/3 nowqo.net/roblox/images/panel-overlay.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 960 x 661, 4-bit colormap, non-interlaced\012- data
Hash 2b026d93f79b384005e4252c80701791
87804a0d83d2e745b31526c8b60d026abecbe73a
b7a5d35c1c7be1953002244f054a14f38ed11912ad52d25a8e963774f7f52e0e
GET /roblox/images/panel-overlay.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 3116
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IggtKAJxqcijWlM1hQmSYqcJeM9d1A7UsIrxigMPm6Ax6IbP8ahIRMIAyStaxa7VD2EU0JWbDNu2%2BuCwAMVkxR3FuKjihc%2BBnkv7uH3wCeFTuVGJxu52yXhDVAI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840904aa1ab505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/animate.css
172.67.223.249200 OK 20 kB URL GET HTTP/3 nowqo.net/roblox/images/animate.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (53418)
Hash d4b0aee081decf264ee74983e602998a
12dea240533e2a8ef3ca8dc3ea8e30fd49a1fe87
7c95f85e5f4d24eb889ac4bc1450ca4d00b9ed47b994ce10003511d31e94e8b4
GET /roblox/images/animate.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=68796
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cW%2F66%2FUOSi2VkQSDwZZ9p0D0FCf9L%2BrSWta2bl%2FuCpfXyVeFM9wrsnPMvekUYAvE2UzVsplv7XSaWeQu5xhZmAkzbl2DYJVe4ss3QCZnxHqcfrUQuK4W4CfOxlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409033ff5b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/pr-r.png
172.67.223.249200 OK 27 kB URL GET HTTP/3 nowqo.net/roblox/images/pr-r.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 960 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Hash 1339ccba9a248e9c3689c2f921283d91
7d393c9a3efa49a81afc9406700e94ae23e4bb95
082da94e7b1e7b7cf6054ecb33edffc2b36578727ef34c8a1ef6bddfaa6cfbbf
GET /roblox/images/pr-r.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 27316
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xvmjsEVRom3LRQ9rkemabxChX8mwgcbcOYQVZPuZGJB%2F8Qo7pcwq%2B6c1vM9%2Bk129C0PprH5%2FTmyCVdJkHouIklQxvudMLMccyK73qfotugn7Oon0KqEMXklZEek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840904aa22b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/custom-css.css
172.67.223.249200 OK 2.4 kB URL GET HTTP/3 nowqo.net/roblox/images/custom-css.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (1606), with no line terminators
Hash 5b2c0746b18ec31479e3ee66b5d747e8
c63cc4d9910c34cd5006c7889015a04fe64fdd22
a0d4f10d4bcbbcf6af5709d0dfcddd743aa15f2509f1f95648ea2f1a437132d2
GET /roblox/images/custom-css.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1790
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xHvMLlQkkFvQIXXdBNFKR6AD5grZPqmS18ycorkSabOW5P2m6yPPMFj5vZsyoRto77N2XBNPAPLX4Y4e9GQ56niZ1awQS8e7qOIEW9qk8BS0Phi5sINDF6pAQaI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409033806b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/button-dot.png
172.67.223.249200 OK 672 B URL GET HTTP/3 nowqo.net/roblox/images/button-dot.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 15 x 15, 8-bit colormap, non-interlaced\012- data
Hash 478aefab2e280b16b0372e607414d3c2
710f5aaa706ec23cbf45006d7c1d25be76b4fa64
a651e77df132fc0c4dbccb7c56f84923c28dcb159f4b7a112bde8bbc548632bc
GET /roblox/images/button-dot.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 672
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 134203
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FhoMAinhU0CKG410qnrxXgka5s5CHA7%2BIVCLYgPSZrT1Zs9w5nL%2Fxv9DACKygvLgv7aQZIBGTIeiHJ9%2F2oEGijOCyP6nOikD1%2FLqU0K7J3gW7ooSvNOnE3ouV3g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840904aa20b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/et-line.woff
172.67.223.249200 OK 55 kB URL GET HTTP/3 nowqo.net/roblox/images/et-line.woff
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type Web Open Font Format, CFF, length 55220, version 1.0\012- data
Hash b01ff252761958325faab1535c90c87f
d33413e7bc42acc8837cc9030ca45d29c1ccf0c6
19d2f43d546ada73dd083f7778aa4a5cac1a8e7a3af56efccae580fce07a5e1c
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/et-line.woff HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: font/woff
content-length: 55220
cache-control: public, max-age=31536000
expires: Sun, 16 Apr 2023 07:06:54 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 480279
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b048Yo%2BH%2BxVIx4t0%2FuCwGS1xvO9u45DeNhVT1P7QZiBJr1%2Fl%2F4QsdlIfMkKPXWPF%2BrzeyLNgN6OkP%2B5BunaqPOak21pX5VHashdKEuEeyn2e9I1p2F11qdPxuPg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840904ea94b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
104.18.11.207200 OK 67 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP 104.18.11.207:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 08/15/2022 13:52:58
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9b0e9cc931c66bf3d677884409621f3d
cdn-cache: HIT
cf-cache-status: HIT
age: 676209
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7b8409054aa90b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nowqo.net/roblox/images/fancyselect.js
172.67.223.249200 OK 1.9 kB URL GET HTTP/3 nowqo.net/roblox/images/fancyselect.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (1254)
Hash 42fb7c2a4d1e656a2a5e291cdb1d4f18
b1f57204ad920cfeb75b26eb5c6e491556c0898a
3def81c31e82380bb309f0814706402b72556edf03d8242f93dd331f1879de79
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/fancyselect.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6778
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c6%2BLsta1RJyoDVF%2B7apJ0NVnq1aC9BgMTn6IzpzxFLD4smoHvXqJaIFwe4%2FHIEdvl%2FHi%2BHErlflBvURQplykh%2FeDX6m4KkXf5JRtYi%2FNz08EkSqYpyascP78%2BvA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409034837b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 798d4dfa1bf269cf25be30e15c0faf27
add23a798eb57d7f581a42d0f9084a3acaa076c3
7b38c793ca44a66a992fb67afcd9dca6a1e53824b5c65cf946f1037118f361ee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nowqo.net/roblox/images/sticky.js
172.67.223.249200 OK 10 kB URL GET HTTP/3 nowqo.net/roblox/images/sticky.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (16920)
Hash 9e15670f71873ff078fc491d01d4261f
15d32d5882a7333093e45ee696497e5efd0e89e8
d766861b5ccb6f414c1c17f22808126212e4ba7cf9e1729e052032a591e954ee
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/sticky.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=20845
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FmsSexD%2BDZsMRk3g20xfYe0TEdnFGZynPQF7hJx2DBlUUjQ9JWqf5Dk%2FpaMMjVMVQUc4eFVARsE20eUuQPq4ylajyUn40XArhpgCOR7TVFwiUNcq1ftSvqrcXWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409035850b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/jquery-3.2.1.js
172.67.223.249200 OK 60 kB URL GET HTTP/3 nowqo.net/roblox/images/jquery-3.2.1.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (1237)
Hash 52e52baf0558d02a89cfc0f76c672a59
5f424bd5b0d5ec1bb5b2801fd04addf682f4de4e
2fe7b198c1def25e5d859fe1b817dce87421ca817c030bc3216eab8f13527c65
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/jquery-3.2.1.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=268039
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CsOYcFVIV4jTsrmZdd496FykICtUCZGHb7PLPTnvn6yZSnR%2BXhpC4Gd1W1oIzi%2B8NoH5d2GRS4jgars3a7aQwV2uX7PxONah0BVRDa0CmNLzpKEwR%2F1Fz%2FXYY8c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409034827b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/validator.min.js
172.67.223.249200 OK 2.7 kB URL GET HTTP/3 nowqo.net/roblox/images/validator.min.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (5862)
Hash 0477bbc894801a44a2e575e70992e5b1
2880260d54ae97a79fd7d6bb058166e9be751b80
afe8e839aa0336c6d3ae2b13a457ce50010c29168d29580971507ff190605a3b
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/validator.min.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GOo1FvYH19%2BtMGkRmc0fmi8zEU%2B9W%2B6QNbm9oIRUOuhb4HENIlD8W%2BhWDUxw2pXVg3ojZ%2FNzD1rZUPVqSJ03IksKoa0jswq%2FV5BDJV8lg%2BasBjwuOnN%2Fj4NqXt8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409035844b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
fonts.gstatic.com/s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
216.58.207.227200 OK 18 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP 216.58.207.227:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, type 1 string, Open SansRegular1.10;1ASC;OpenSans-RegularOpen Sans RegularVersion 1.10OpenSans-Regularhttp://ww\012- data
Hash 8c20320e2a77d984348f9e9aa7296b9d
0939a63b6a9982ab64f044dfc3a21dac2bca0499
0be48b762bdf588db02112492dfadcb3a098fad3ac5aa2ccc80568b799462c52
GET /s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Apr 2023 17:17:02 GMT
expires: Fri, 12 Apr 2024 17:17:02 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Jun 2017 16:46:31 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 153878
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v14/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
216.58.207.227200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v14/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP 216.58.207.227:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, type 1 string, Open SansBold1.10;1ASC;OpenSans-BoldOpen Sans BoldVersion 1.10OpenSans-Boldhttp://www.apache.org\012- data
Hash 5498784000b038638befe230ea392271
efef80115bdabd927501563197827a7ae837a19f
5848ca5f4af491c37907f2e4cb0e240166572edc90615a96d4702f2dce34800b
GET /s/opensans/v14/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Apr 2023 06:40:10 GMT
expires: Fri, 12 Apr 2024 06:40:10 GMT
cache-control: public, max-age=31536000
age: 192090
last-modified: Wed, 14 Jun 2017 16:46:24 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 798d4dfa1bf269cf25be30e15c0faf27
add23a798eb57d7f581a42d0f9084a3acaa076c3
7b38c793ca44a66a992fb67afcd9dca6a1e53824b5c65cf946f1037118f361ee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 15 Apr 2023 12:01:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
nowqo.net/roblox/images/style.css
172.67.223.249200 OK 11 kB URL GET HTTP/3 nowqo.net/roblox/images/style.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (40387), with no line terminators
Hash 734ae9777d204bd3a2bd3ce7a1f1d9c7
abb60c58868856b39cdd89f2db9993fb16b39dcb
cc2c1354297bd959eafaeeb5f24db7c2c6e8352e1ab730fef8e1f765d9d9c14a
GET /roblox/images/style.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=50839
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kiTP6nectvQRnknhm1UrVc2oQibV1uWlN4zRcjagUNbMCyBwg5q1%2BQWtUCZsMFgMajysPiPXumet8S91j1PAHZD5ylyCTLnhpkbRH8OhrKwQs8WFYqbPqsLfiZo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409033803b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
172.67.223.249200 OK 4.4 kB URL User Request GET HTTP/2 nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
IP 172.67.223.249:443
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash 5e78d29dfac1677650342eaf79a0dd1c
f774050a6251ba8d5f30411b0893af29d29c325b
ba07beebe56faff3a63a1638a9cf767136a46acc6eda9535172ea6673c6089ba
Analyzer Verdict Alert fortinet Phishing
GET /roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://robloxcodeslist2018toysr.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/html
last-modified: Fri, 07 Apr 2023 06:41:19 GMT
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bJ26YYbt9NdxNxt6gwXIvmLwELTwQd4aftXHjXGfbdfFnEcsgHpC2ZW3jzN%2BIMnA3rKejAXheCTf5KSWa8hSV%2Bzyuugi4PDpkkx%2BQBC96l0qdS9%2BY%2FB2lYdowK8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409020c0bb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
nowqo.net/roblox/close.png
172.67.223.249404 Not Found 4.7 kB URL GET HTTP/3 nowqo.net/roblox/close.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 64823f56edfb62b6239f7035dc542299
442d00cd96c2cd245da71ce7e018e0a3f3035f69
16f3f38fcb8810b81424a31ae652cd5d6f5512434858f7ba669e2eb908e6eed7
GET /roblox/close.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Cookie: username1Cookie=Marilena; username2Cookie=Lia Piazza; username3Cookie=Priscilla; comment1Cookie=i wonder why this wasn’t on the news. this is stunning tool! . c= thank you so much ! This software is awesome; comment2Cookie=this generator is incredible thank you so much.; comment3Cookie=thank you admin! works for me!! thanks a lot. :D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/html
cache-control: private, max-age=31536000, must-revalidate
pragma: no-cache
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01O%2BbGnd5p%2FVht9vVFwnBA5u19PGLK%2F0YZ%2FU3%2BXITQuBpevjKWwc48FafsFlygGiqgQgtIkQCaBX4rRMSJ%2BvVpSKk9id6kZcAcXvVhFdQLc4d%2BM9afxs2jc8Jfw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b8409059b8bb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
fonts.gstatic.com/s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
216.58.207.227200 OK 18 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP 216.58.207.227:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, type 1 string, Open SansRegular1.10;1ASC;OpenSans-RegularOpen Sans RegularVersion 1.10OpenSans-Regularhttp://ww\012- data
Hash 8c20320e2a77d984348f9e9aa7296b9d
0939a63b6a9982ab64f044dfc3a21dac2bca0499
0be48b762bdf588db02112492dfadcb3a098fad3ac5aa2ccc80568b799462c52
GET /s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Apr 2023 17:17:02 GMT
expires: Fri, 12 Apr 2024 17:17:02 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Jun 2017 16:46:31 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 153879
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v14/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
216.58.207.227200 OK 18 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v14/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf
IP 216.58.207.227:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, type 1 string, Open Sans LightRegular1.10;1ASC;OpenSans-LightVersion 1.10OpenSans-Lighthttp://www.apache.org/li\012- data
Hash a69c5fa643b7208c4922909701e399ac
0560e8f641340a70d9c36b3d4106e42ac395f829
0a8b75177ccda56113a7a1bb9214c38276257846f9323226f74831f74ffc721f
GET /s/opensans/v14/DXI1ORHCpsQm3Vp6mXoaTYnF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18391
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 12 Apr 2023 19:44:14 GMT
expires: Thu, 11 Apr 2024 19:44:14 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 14 Jun 2017 16:45:42 GMT
content-type: font/ttf
vary: Accept-Encoding
age: 231447
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v14/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
216.58.207.227200 OK 19 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v14/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
IP 216.58.207.227:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE8:8D:29:52:9C:44:66:28:BB:43:25:CE:11:45:BB:A1:5A:4E:44:11
ValidityTue, 28 Mar 2023 16:54:02 GMT - Tue, 20 Jun 2023 16:54:01 GMT
File type TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, type 1 string, Open SansBold1.10;1ASC;OpenSans-BoldOpen Sans BoldVersion 1.10OpenSans-Boldhttp://www.apache.org\012- data
Hash 5498784000b038638befe230ea392271
efef80115bdabd927501563197827a7ae837a19f
5848ca5f4af491c37907f2e4cb0e240166572edc90615a96d4702f2dce34800b
GET /s/opensans/v14/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18604
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Apr 2023 06:40:10 GMT
expires: Fri, 12 Apr 2024 06:40:10 GMT
cache-control: public, max-age=31536000
age: 192091
last-modified: Wed, 14 Jun 2017 16:46:24 GMT
content-type: font/ttf
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s4.histats.com/stats/0.php?4275781&@f16&@g1&@h1&@i1&@j1681560181566&@k0&@l1&@mRoblox%20Robux%20Generator%202023&@n0roblox-abs.js=ekarianti|template=Juragan.xml|ekarianti=robloxcodeslist2018toysr.blogspot.com|robloxcodeslist2018toysr.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxcodeslist2018toysr.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-48199223&@b3:1681560182&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnowqo.net%2Froblox%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ&@w
149.56.240.27200 OK 52 B URL GET HTTP/1.1 s4.histats.com/stats/0.php?4275781&@f16&@g1&@h1&@i1&@j1681560181566&@k0&@l1&@mRoblox%20Robux%20Generator%202023&@n0roblox-abs.js=ekarianti|template=Juragan.xml|ekarianti=robloxcodeslist2018toysr.blogspot.com|robloxcodeslist2018toysr.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxcodeslist2018toysr.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-48199223&@b3:1681560182&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnowqo.net%2Froblox%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ&@w
IP 149.56.240.27:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerLet's Encrypt
Subjecthistats.com
FingerprintF3:F6:9F:E3:A0:B3:22:C0:B2:93:4E:22:72:B6:D1:DA:40:BA:AE:9B
ValidityWed, 15 Mar 2023 12:20:28 GMT - Tue, 13 Jun 2023 12:20:27 GMT
File type ASCII text, with no line terminators
Hash e7e31877caebbcbba56dc9377f4f45b2
78dd4fa9cf558a881626970ba435eec62d5802fc
8daf29317d4f4895f08cfafb875f0e268aff5044b336a3cee1389de4ff3b2fb0
GET /stats/0.php?4275781&@f16&@g1&@h1&@i1&@j1681560181566&@k0&@l1&@mRoblox%20Robux%20Generator%202023&@n0roblox-abs.js=ekarianti|template=Juragan.xml|ekarianti=robloxcodeslist2018toysr.blogspot.com|robloxcodeslist2018toysr.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxcodeslist2018toysr.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-48199223&@b3:1681560182&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fnowqo.net%2Froblox%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 15 Apr 2023 12:01:41 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
nowqo.net/roblox/images/bq.png
172.67.223.249200 OK 449 B URL GET HTTP/3 nowqo.net/roblox/images/bq.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash 2404b88a07bdb7aef652eec0f6fce287
200d6ed719a85e07e7671db820f14a1c57d2c978
45f75a63fadde9018fa5698884c7fb0b2788e8f72ee1f405698b872d59674262
GET /roblox/images/bq.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Cookie: username1Cookie=Marilena; username2Cookie=Lia Piazza; username3Cookie=Priscilla; comment1Cookie=i wonder why this wasn’t on the news. this is stunning tool! . c= thank you so much ! This software is awesome; comment2Cookie=this generator is incredible thank you so much.; comment3Cookie=thank you admin! works for me!! thanks a lot. :D; HstCfa4275781=1681560181566; HstCla4275781=1681560181566; HstCmu4275781=1681560181566; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxcodeslist2018toysr.blogspot.com%2F; timePosted11Cookie=152841; timePosted22Cookie=36782; timePosted33Cookie=29207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:43 GMT
content-type: image/png
content-length: 449
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:34:26 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704608
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=za1GYGuMzxX5AdXfkM0HwcN0B%2BWu7TUdjmBZ6AVYPvSFkTKv4dP5AGZpgjS7jGWsoz010IpddGrWswP8x%2FnXAJw1Ib3Ntg54lC29SYta03WzWdMvJAIceOsnsSA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b8409154b73b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/uk.png
172.67.223.249200 OK 663 B URL GET HTTP/3 nowqo.net/roblox/images/uk.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash 27708378fcc025e375fd3c303fc1cbd6
80f2cae567c864f698e995b85c315c081a923a6d
3f38a42fd54e4c7cb1154026f734bc444f9cc942b8b91f099cc65dccf6c7f431
GET /roblox/images/uk.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Cookie: username1Cookie=Marilena; username2Cookie=Lia Piazza; username3Cookie=Priscilla; comment1Cookie=i wonder why this wasn’t on the news. this is stunning tool! . c= thank you so much ! This software is awesome; comment2Cookie=this generator is incredible thank you so much.; comment3Cookie=thank you admin! works for me!! thanks a lot. :D; HstCfa4275781=1681560181566; HstCla4275781=1681560181566; HstCmu4275781=1681560181566; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxcodeslist2018toysr.blogspot.com%2F; timePosted11Cookie=155841; timePosted22Cookie=39782; timePosted33Cookie=32207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:45 GMT
content-type: image/png
content-length: 663
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:45 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704660
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s9RuULCUkdEo25I5YhVy5ouYspat%2FgjmcNYaq6tHB7vjrjs%2F7YaeIn4KqKTelQWIlmTlylwUrQyqPIQl58aoOnXrpylzGIbqEgQ6C%2FG2bivoCs1pgyDutmWUlAE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840924eb53b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/au.png
172.67.223.249200 OK 673 B URL GET HTTP/3 nowqo.net/roblox/images/au.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash 2fba49c88880e9ffcff947015cb7ab9c
20361b7e4d3cf488c5e6330b6abdb1efcaa9e866
a7f9683bc4240ef940ee3d4aaf127515add30d25b0b2179a6cdec23944635603
GET /roblox/images/au.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Cookie: username1Cookie=Marilena; username2Cookie=Lia Piazza; username3Cookie=Priscilla; comment1Cookie=i wonder why this wasn’t on the news. this is stunning tool! . c= thank you so much ! This software is awesome; comment2Cookie=this generator is incredible thank you so much.; comment3Cookie=thank you admin! works for me!! thanks a lot. :D; HstCfa4275781=1681560181566; HstCla4275781=1681560181566; HstCmu4275781=1681560181566; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxcodeslist2018toysr.blogspot.com%2F; timePosted11Cookie=157841; timePosted22Cookie=41782; timePosted33Cookie=34207
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:48 GMT
content-type: image/png
content-length: 673
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:42 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704663
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=awFOdV2gsyoV4tpBCxe4xUft2IO9JGTW5lJnTR%2B51PyP4O83NmHCrk3HRedNm%2B6503XZkHdAg5oISDkg0J%2FHoAURS3hA%2BkewMnAD7Vd%2FD8L9oaAzoIvfmIYIOZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b8409347a55b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/main-bg.jpg
172.67.223.249200 OK 838 kB URL GET HTTP/3 nowqo.net/roblox/images/main-bg.jpg
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type JPEG image data, baseline, precision 8, 2560x1440, components 3\012- data
Size 838 kB (838330 bytes)
Hash ba5d619ee57cf5acc6ebee951a24e01a
a0627942a4e280318a098576257027078cbc40fc
ff5ca3b41fff989a535f80c1119cca50d67fa99c759545a3fc484cc8124cf836
GET /roblox/images/main-bg.jpg HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/jpeg
content-length: 838330
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EbIPHP6X5JRJrwlfGRrLQ4ddGv3ZqrFVpb2DBi%2F000i21pSAHdSZdCZ4fOGTzabJFKLPs9vF%2F4nMeyyI2hZwh6kSVKcWqazk2HNjeG7eeit2PhvK7HvosoW0l8E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b84090479f1b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/bootstrap.min.css
172.67.223.249200 OK 121 kB URL GET HTTP/3 nowqo.net/roblox/images/bootstrap.min.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (65371)
Size 121 kB (121232 bytes)
Hash 8b87a8e987b9a45b9e0da2e5f39983cb
bdbf574851f685ad05a4a822833cb9a5ea0fdd6b
fca4c4db5947606896e8672940b609fae48de99c683c0a7128a94c24a6888fb3
GET /roblox/images/bootstrap.min.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZGrHzKVvVq1YmnFS8gLj7tf157mEEAXWv%2B8ek0vW4AbTVu%2B35sNsZwEdnF1VZhIcLunFJLIwFwDtjSu%2BizAjylMXrxqFffMeOg%2FdCRQT8Zr9joFnaO9zVb1ss1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409032feeb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/fancyselect.css
172.67.223.249200 OK 3.6 kB URL GET HTTP/3 nowqo.net/roblox/images/fancyselect.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (3597), with no line terminators
Hash b86846846243a51557217cb783b39128
0199ad38dc1de1aeac470288bd1b8ecff464fd5d
a7b61a6c6412f3bacecc0bb6da9d0f6ff60ebb115c66458bd4031518d2cf01e3
GET /roblox/images/fancyselect.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4253
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0cRRM3LceiLhMqPBCUAlRdaL8j6A8GgKpGg%2B2e6SMpJThK1SIpzpTZJV2Kx%2BF8DXlo9cJNjLweIJVnbn7ZnehhZpPsLzcWL0QeJZG0ZVw7aK1mECdI8Pr1fHHkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409033ffeb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/magnific-popup.css
172.67.223.249200 OK 6.1 kB URL GET HTTP/3 nowqo.net/roblox/images/magnific-popup.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (6066), with no line terminators
Hash 5c7b8257bc3d11ed0b9d8c57d9d967d6
77a322afa98376719dd8fdd3942be08bb129d1bf
2c71340892aeebaae880becc0b89bd2ef6938150078692622c04d3f2bc7c0a32
GET /roblox/images/magnific-popup.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7946
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dGXJUzY5YcTBneGSWIDoCktKI0YAUtD89eISGDxNZ6gCHhOqrMfMN7c1I45S5yJJXhJULrgXvmBg0qqLinLb7YIJ%2BT5OXL7qXYWTI%2FHFDPtTXQ3gbVDxNnpjEYg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409033ffcb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/jquery.magnific-popup.min.js
172.67.223.249200 OK 21 kB URL GET HTTP/3 nowqo.net/roblox/images/jquery.magnific-popup.min.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (21014)
Hash be3333626c57af03599abcb59b325e09
3824067348f6485d6b07d3a43660804e3731b21a
ecbef0f33e8ccedd2c605816e052cfff778abcc0e30a80b874c097a5fddd24fc
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/jquery.magnific-popup.min.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3rrInpJI3BLq9LMos8kzUvM7GZJPeFc1n7W9jo36sNYTzhd3g0tlkKIux5kSF6qG3m%2FzmRyg0aC%2BQSXIK5TTKu6ZyjKlIEGYMHrN1sc41tetuuuW6IYj364adqw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409035855b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/pr-l.png
172.67.223.249200 OK 16 kB URL GET HTTP/3 nowqo.net/roblox/images/pr-l.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 960 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Hash 6073469203244cc95b8fbe0996b8c405
60c3fe75fa9d7e3ae7f42f9a247d103b9841982a
7509fb455029a48272466bce43b17cf8247f769f9a4b9c51a03eba55924e11f3
GET /roblox/images/pr-l.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 16083
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4u2qZ%2F0qaSdtYmY7%2FfQ5ndnP2UPJfbWNiR9awlY%2BDTTQCg7ZwsS1gzGR4ZqoM4nath8rD9gV81il0BMHklMQzB9T8fRw60Eyt%2Fj1DBBbEHGz6ByhMJuUCcu4fEo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840904aa1cb505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/bebasneue_regular-webfont.html
172.67.223.249200 OK 16 kB URL GET HTTP/3 nowqo.net/roblox/bebasneue_regular-webfont.html
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 15948, version 15811.-24832\012- data
Hash e40e33db088776dcc998d8e79263d860
ae07a83cee583252d5a2bc27b3e5efed83f8dfe9
80fe1f0f417a2e7373882d874e71bc40385c74e453bfb9e2cb8b14e2b70d4842
Analyzer Verdict Alert fortinet Phishing
GET /roblox/bebasneue_regular-webfont.html HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Cookie: username1Cookie=Marilena; username2Cookie=Lia Piazza; username3Cookie=Priscilla; comment1Cookie=i wonder why this wasnât on the news. this is stunning tool! . c= thank you so much ! This software is awesome; comment2Cookie=this generator is incredible thank you so much.; comment3Cookie=thank you admin! works for me!! thanks a lot. :D
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/html
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 480279
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YoNI%2BhRAa51mhlc0UjZoPzrA8hLVeqtgYTF73u5r21MXqP8iz50mTgMBNsP7qLf4tyPrKdQaTOLLo02H9qRBGvpBSLKCGqWa9mioIvy4rhrM9UGnwUAhWebMDKc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b840905aba8b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
s10.histats.com/js15_as.js
46.105.201.240200 OK 11 kB URL GET HTTP/2 s10.histats.com/js15_as.js
IP 46.105.201.240:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerLet's Encrypt
Subjecthistats.com
FingerprintF3:F6:9F:E3:A0:B3:22:C0:B2:93:4E:22:72:B6:D1:DA:40:BA:AE:9B
ValidityWed, 15 Mar 2023 12:20:28 GMT - Tue, 13 Jun 2023 12:20:27 GMT
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash e959fbdd13def4b9a9d0a5fc9a7de4d4
1e39712307e3673b40c0bdb8c7d3e86a3e8b60a0
2defe59e357a7d0683c8283ac42841db404a0884cae2eaecebf4b676e559dede
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://nowqo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 15 Apr 2023 11:57:23 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 107317522
content-type: text/javascript
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
nowqo.net/roblox/images/sweetalert2.min.css
172.67.223.249200 OK 14 kB URL GET HTTP/3 nowqo.net/roblox/images/sweetalert2.min.css
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (13988), with no line terminators
Hash 2854c355b9997439e011705e39b4b3ed
06f14e99f5bee6853283e1d42227f3289781379e
a64645980f5ee5a0aaa66cec5a98103420643da6681221c9cd10fc318adcdb6d
GET /roblox/images/sweetalert2.min.css HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XpxYRV0nu9qcd3F3vKQ4pFLV%2FVNrgl0mf1e2PesmMJQr%2F0p6%2F63bD6iXRtyPxdyJ1S7vjab9zyFgyMZjF6U3ycGCq2Zui2qR%2Bj6kFLAt7NSpXJ9UAdBZS7h3sD0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409033ffbb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/sweetalert2.min.js
172.67.223.249200 OK 20 kB URL GET HTTP/3 nowqo.net/roblox/images/sweetalert2.min.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (20305), with no line terminators
Hash 0ad69b0e70b7da1bb8f8a96e9e6b5d9a
7d21a0c1f43d3edb47dd9e69b05243f3fcb53152
4051f26691def4eafcae32928be110c13d1819e544a12b0a9b95378bfaf9859b
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/sweetalert2.min.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 134203
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qD%2Bd5gdEcN%2FAJooWQ%2FexXk8rc0uHwhnm4ed0SRM1rjvBfuGuJyftmImDZa8lcr2kec8PUk2o1wAm2D%2BPWubq%2BN0mtELrDsgswx%2BMzMG7%2BK0bBk%2Fmd55Gu4eLktM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409035845b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/btn-img.png
172.67.223.249200 OK 2.0 kB URL GET HTTP/3 nowqo.net/roblox/images/btn-img.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 150 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash b750214f9a0276662f12acbbff0d37ce
65e094e10e2b933ab866a66b5f9b25321b99a0d1
db31dae896b9158c4d1c3f32525e6f63281fe9c671a5dc93236cac960013351b
GET /roblox/images/btn-img.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 1977
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 115397
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KsBXi6pYaRC54gaF7NuqF30R57wVPyWl4Qluo6ZZqfeD8rKtERXcV8oQHuuc6lQbCE9CJroZqkkjEhq7dpQ7ZxTXAV7gdETuofG1zHEN8S7ZQQw9WNfQnAqDRwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840904aa23b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/main.js
172.67.223.249200 OK 34 kB URL GET HTTP/3 nowqo.net/roblox/images/main.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (24637)
Hash b4a27b956eccd646f3bc2b2b2b6503c5
6df97b44c507a440a3c1dd6873b44fbc95e92fb1
948fe10b1ea0b581c4871ae90f94882ed8945bd19c9ce0352b20ac0467dc145a
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/main.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=38451
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:19 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gqJeMIbx0VeyRY5jqTTie1VJlDCEhBR8Ehh649G5pDmpgcDmY9o8f5Y%2BsUUrRDdiUHonCImYOEDxCanwQ13ofbmYHFkP6XrKi0K2SSnWP4Qz8jtKcuRkW9zghZo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409037875b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/gamebag-favico.png
172.67.223.249200 OK 3.3 kB URL GET HTTP/3 nowqo.net/roblox/images/gamebag-favico.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f
GET /roblox/images/gamebag-favico.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Cookie: username1Cookie=Marilena; username2Cookie=Lia Piazza; username3Cookie=Priscilla; comment1Cookie=i wonder why this wasnât on the news. this is stunning tool! . c= thank you so much ! This software is awesome; comment2Cookie=this generator is incredible thank you so much.; comment3Cookie=thank you admin! works for me!! thanks a lot. :D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 3340
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:25 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 499880
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=II12fZKl%2F2vv%2BrjIVny4iLOI8XG1SzQnlldSlcvwFzPgwlic2P85Xrrfm5950LCw92pHHcUtFheBGYs9XDy%2F0%2F8bbmdhk5FAT9oWUgsmnTbscIYO71Dwwux7nV4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b8409062c4cb505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/form-scripts.js
172.67.223.249200 OK 1.0 kB URL GET HTTP/3 nowqo.net/roblox/images/form-scripts.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (1061), with no line terminators
Hash 6199605916a54c185314b9c5d3b5e809
5fbe1148fc133ac41089c2fa9e50c32e91ba6541
6c7d18b6f23e412b7e2217aae669caf57c56c3de9e6c0f7099151c752512b139
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/form-scripts.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1469
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2EE3Fbga8ClTo%2BkBnbKv%2Fh7dS2u4Ka3VJZDW7CEkopOI1aCY8pBQx0%2BKvkz6fWvm2aV6SVGh%2ByCDCW6YWEGU8fLkpsad4i8UPek36vA92%2BhUTVTgeY2Humnar5w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b840903584bb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
172.67.223.249200 OK 701 B URL GET HTTP/3 nowqo.net/roblox/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (701), with no line terminators
Hash 4dd713bb9231c5094e1c8bc8cb94271c
1e261f6ac19b4c601946704ed1ec811f278a0cda
2d49915f54be165095aa54b17aefae8370c8751ad2421caa309e70302f5f8a04
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700 HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=773
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 07:38:09 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iQINPNVJ3f6gyGHX%2BQVNRkAcKquzaDMkRxO3dBaiP0krWHUtJtSRKfm1iBTs90G75oV3LZR%2FrnA2RyWTJLZGWUb6RvrZy%2BIYx7UEScjY%2BlafQTXIXkyzEdeOKnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409032fe5b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/com.js
172.67.223.249200 OK 15 kB URL GET HTTP/3 nowqo.net/roblox/images/com.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/com.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=17963
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qSLkB%2Bdjc4jykU4nJ0P3Nyc7lo3OQYiqWvChgcAqE3YlQx5qUWpewaNvPBiCuoe9JvmMVn53yjzb15p58fC0zustwHxUbI4C7kLRVj9ShIjct6zdzbOyfXwaAbA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409035847b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/us.png
172.67.223.249200 OK 609 B URL GET HTTP/3 nowqo.net/roblox/images/us.png
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced\012- data
Hash 968591e0050981be9fa94bd2597afb48
dd9e149e2b5ad59dd8b4b262f5fdeb5cc10ecf43
36cce5cae3d2e0045b2b2b6cbffdad7a0aba3e99919cc219bbf0578efdc45585
GET /roblox/images/us.png HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Cookie: username1Cookie=Marilena; username2Cookie=Lia Piazza; username3Cookie=Priscilla; comment1Cookie=i wonder why this wasnât on the news. this is stunning tool! . c= thank you so much ! This software is awesome; comment2Cookie=this generator is incredible thank you so much.; comment3Cookie=thank you admin! works for me!! thanks a lot. :D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: image/png
content-length: 609
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:24 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
cf-cache-status: HIT
age: 704675
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T3zkGJb%2FCXQxPCjAs7E%2FmfVDBLuZ6ILnCsxkW2YkYiTOwDhq7i2X2Yvx%2BzLM%2Fl5HuX%2F24v4tTFsmawoE2kiMV1wAjtJw%2FMQ2KOc%2FEg8ZYJGNu0daU%2FQIwg7cOVM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7b840905ab93b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/jquery.countto.js
172.67.223.249200 OK 2.4 kB URL GET HTTP/3 nowqo.net/roblox/images/jquery.countto.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (2444), with no line terminators
Hash a6f0589b555439689640128b06aa0939
f80bffb556fc22186d16ce3d39d87e5a1108ba58
33720d2262ad062abab7369d39eb004338e25d64ee85ca4e0ddf0e63b3456943
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/jquery.countto.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3761
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 134203
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hk0PVoGg4zDgTY7C8wEVx04QwWfbGYOM80W47gyUP3wTULv3y0NlZv0igF9Dq30S6fUNa492OzG9k2zEIc2embUrLRe6RezE2GIQFjCmzfGv9Fzfc2AOwn2Lt0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b8409034836b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/jquery-ui.min.js
172.67.223.249200 OK 200 kB URL GET HTTP/3 nowqo.net/roblox/images/jquery-ui.min.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with very long lines (563)
Size 200 kB (200104 bytes)
Hash 234f1553c7d27cce512062c59800a9a8
b48e01c35c1e6ad622386b9a3161bd1bf02723c8
d87043ac816dbfadae73fcc32f84eadb9a665cf97ae938bea9702a27d3e9a54a
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/jquery-ui.min.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=71SmuGT2dBTqmCsmJhThv4CCju1%2BLxgTJxnGu6bgUwGJz7T5BpJ4GO%2B79W61UK7CPjZPMRPh7jNLuofRns0uwLWNotFJv0x8PoZ9a1qcZotRyKs5YmKBSpGzeeA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b840903482eb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/images/scripts.js
172.67.223.249200 OK 196 B URL GET HTTP/3 nowqo.net/roblox/images/scripts.js
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type ASCII text, with no line terminators
Hash 30110b3852b1800156f09776b7f8abc3
b3016d5bcc5d32713d4841b7430e8a36a08f4d82
c7b5716b450a19a471d68d99302a1aefc97409ad09b5248b7493052fb515f9ef
Analyzer Verdict Alert fortinet Phishing
GET /roblox/images/scripts.js HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=225
cache-control: public, max-age=31536000
expires: Fri, 14 Apr 2023 06:32:18 GMT
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 704675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7jyVP10rA5J9g1OWbcKc%2BzJBg59pJfJAJ0UcAW7eHIM9RfUlAOemeoxsBrXPnga0bKC1RiB54LJQp2G1rfJTg1ZIcaJ0Kk6AxxuvQL%2FM4EJnvvwrVS%2FUoYPz%2FNM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b840903787cb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
nowqo.net/roblox/bebasneue_bold-webfont.html
172.67.223.249200 OK 15 kB URL GET HTTP/3 nowqo.net/roblox/bebasneue_bold-webfont.html
IP 172.67.223.249:443
Requested by https://nowqo.net/roblox/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiZWthcmlhbnRpIiwidGVtcGxhdGUiLCJKdXJhZ2FuLnhtbCIsImVrYXJpYW50aSIsInJvYmxveGNvZGVzbGlzdDIwMTh0b3lzci5ibG9nc3BvdC5jb20iLCJyb2Jsb3hjb2Rlc2xpc3QyMDE4dG95c3IuYmxvZ3Nwb3QuY29tIiwiZGlyZWN0IiwicmVmIiwiZGlyZWN0IiwidGFncyIsInJvYmxveC1hYnMuanMiXQ
Certificate IssuerGoogle Trust Services LLC
Subject*.nowqo.net
Fingerprint4D:F9:79:11:BB:71:F0:57:06:92:43:6D:46:F2:D5:42:7E:73:1B:4E
ValidityTue, 04 Apr 2023 14:41:31 GMT - Mon, 03 Jul 2023 14:41:30 GMT
File type Web Open Font Format (Version 2), TrueType, length 15216, version 256.256\012- data
Hash 343da8bfb3e5f68623f89728e3ac70d5
1e7b5280d24e99691a8023445a80f1a57deb5437
b4cca3534c900c315be9a8d4ca33bb9de6ae987c7e0f22988f9d43913a942fb5
Analyzer Verdict Alert fortinet Phishing
GET /roblox/bebasneue_bold-webfont.html HTTP/1.1
Host: nowqo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Alt-Used: nowqo.net
Connection: keep-alive
Referer: https://nowqo.net/roblox/images/style.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 15 Apr 2023 12:01:40 GMT
content-type: text/html
last-modified: Tue, 08 Oct 2019 06:00:24 GMT
vary: Accept-Encoding
cache-control: max-age=31536000
cf-cache-status: HIT
age: 480279
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rhNrFexzbDe5qKEdExvyMGN%2BxEPTq34gRdYftVhxNKdD2tOY77H0gRs4LgJKnYiJ6mwA34HvbXiWa25lB%2FavKY2%2Ftgd2kxillw1FUF%2Bo7YNL5ykfQOl059yE2dA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7b840904ea8eb505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400