Report - 2019hackingrobloxrobuxpromo.blogspot.ug/

Report Overview

Submitted URL
2019hackingrobloxrobuxpromo.blogspot.ug/
IP
142.250.74.161
ASN
#15169 GOOGLE
Submitted
2022-09-26 05:56:21
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
32

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
2019hackingrobloxrobuxpromo.blogspot.ug	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	359 B	636 B	142.250.74.161
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658 B	1.3 kB	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	44.237.239.70
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	408 B	58 kB	142.250.74.10
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	29 kB	34.120.237.76
s4.histats.com	12782	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	182 B	198.27.80.143
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.27
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.76.226
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.35
play.robuxtip.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	37 kB	378 kB	172.67.220.56
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	1.9 kB	104.18.20.226
s10.histats.com	15211	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	351 B	4.7 kB	46.105.201.240
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
2019hackingrobloxrobuxpromo.blogspot.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	818 B	40 kB	142.250.74.161
mtevor.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	383 B	518 B	172.96.187.226
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.3 kB	7.0 kB	142.250.74.3
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	409 B	2.7 kB	104.17.25.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-26	medium	2019hackingrobloxrobuxpromo.blogspot.ug/	Phishing
2022-09-26	medium	2019hackingrobloxrobuxpromo.blogspot.com/	Phishing
2022-09-26	medium	2019hackingrobloxrobuxpromo.blogspot.com/	Phishing
2022-09-26	medium	play.robuxtip.org/images/main.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/validator.min.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/sticky.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/scripts.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery.magnific-popup.min.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery.countto.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/com.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/fancyselect.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/sweetalert2.min.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery-3.2.1.js	Phishing
2022-09-26	medium	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd	Phishing
2022-09-26	medium	play.robuxtip.org/images/form-scripts.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery-ui.min.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (19)

	URL	Size	First Seen	Last Seen
	play.robuxtip.org/images/jquery-3.2.1.js	139 kB	2023-03-07	2023-10-31
Pretty URL play.robuxtip.org/images/jquery-3.2.1.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-10-31 00:50:02 Times Seen397 Hash 0b39dc8f94398407369f2c6f32042bac 8c4abc797c784a78061373a0aa078be14c7931b1 41f59ec5d59f17850334323c174baef773d00ed5bb48e3739d77bb41b3c59c00 Loading...

	play.robuxtip.org/images/jquery-ui.min.js	200 kB	2023-03-07	2024-03-22
Pretty URL play.robuxtip.org/images/jquery-ui.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:47 Last Seen2024-03-22 19:16:45 Times Seen485 Hash 234f1553c7d27cce512062c59800a9a8 b48e01c35c1e6ad622386b9a3161bd1bf02723c8 d87043ac816dbfadae73fcc32f84eadb9a665cf97ae938bea9702a27d3e9a54a Loading...

	play.robuxtip.org/images/jquery.magnific-popup.min.js	21 kB	2023-03-07	2024-04-17
Pretty URL play.robuxtip.org/images/jquery.magnific-popup.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-17 19:29:15 Times Seen2397 Hash be3333626c57af03599abcb59b325e09 3824067348f6485d6b07d3a43660804e3731b21a ecbef0f33e8ccedd2c605816e052cfff778abcc0e30a80b874c097a5fddd24fc Loading...

	play.robuxtip.org/images/main.js	34 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/main.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen393 Hash b4a27b956eccd646f3bc2b2b2b6503c5 6df97b44c507a440a3c1dd6873b44fbc95e92fb1 948fe10b1ea0b581c4871ae90f94882ed8945bd19c9ce0352b20ac0467dc145a Loading...

	play.robuxtip.org/images/fancyselect.js	4.6 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/fancyselect.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:07 Times Seen194 Hash fc20f6fcbceda58609e8ec93ed8972a6 346672aba10658ebe11580ff7fec4b70663c2e0f b92360cf3455f4f375b7c8cc3b601061686d92b9ffd4624004f420c9d09996d8 Loading...

	2019hackingrobloxrobuxpromo.blogspot.com/	305 B	2023-03-08	2023-03-08
Pretty URL 2019hackingrobloxrobuxpromo.blogspot.com/ IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:14:45 Last Seen2023-03-08 01:31:00 Times Seen1 Hash c3dceaf0ea2fa68651d994e832d55d8d 50907f063cfbd3b9d75d434f7f8b55d3a9ec6eb7 3016851c3814243d51293472797b6b9be79d2c98bc034587d12872b3042606c5 Loading...

	2019hackingrobloxrobuxpromo.blogspot.com/js/cookienotice.js	6.5 kB	2023-03-07	2024-04-19
Pretty URL 2019hackingrobloxrobuxpromo.blogspot.com/js/cookienotice.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:24 Last Seen2024-04-19 11:06:16 Times Seen112989 Hash a705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568 Loading...

	play.robuxtip.org/images/sweetalert2.min.js	20 kB	2023-03-07	2024-02-10
Pretty URL play.robuxtip.org/images/sweetalert2.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-02-10 04:05:40 Times Seen448 Hash 0ad69b0e70b7da1bb8f8a96e9e6b5d9a 7d21a0c1f43d3edb47dd9e69b05243f3fcb53152 4051f26691def4eafcae32928be110c13d1819e544a12b0a9b95378bfaf9859b Loading...

	play.robuxtip.org/images/validator.min.js	6.1 kB	2023-03-07	2024-04-12
Pretty URL play.robuxtip.org/images/validator.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-12 19:45:27 Times Seen915 Hash 81df0465f243a2e7b7b06b8ad6015173 996eb26bb4bdb44ed5257d048cedaf3ed0a6f90c c31a654938abf168fca328d9663ea83999b87ff36d18b016ea8aace1a9cb2cb1 Loading...

	cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js	5.1 kB	2023-03-07	2024-02-26
Pretty URL cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-26 23:33:16 Times Seen286 Hash 5ca725d76acf5fc62e1e419e50031fd7 94c9b12c4d33f3f4e7b22a6f6e1420e5c90003c4 e3c6d1c8195fe393af47c014346ebdcd629556a6365ea1f5a671cd507f914ce1 Loading...

	s10.histats.com/js15_as.js	11 kB	2023-03-07	2024-03-25
Pretty URL s10.histats.com/js15_as.js IP 46.105.201.240 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-03-25 09:24:29 Times Seen1978 Hash e959fbdd13def4b9a9d0a5fc9a7de4d4 1e39712307e3673b40c0bdb8c7d3e86a3e8b60a0 2defe59e357a7d0683c8283ac42841db404a0884cae2eaecebf4b676e559dede Loading...

	mtevor.com/cluster-v2/roblox-abs.js	9.6 kB	2023-03-07	2023-03-10
Pretty URL mtevor.com/cluster-v2/roblox-abs.js IP 172.96.187.226 ASN #32475 SINGLEHOP-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:13:10 Last Seen2023-03-10 15:03:21 Times Seen1 Hash 78f127abcffcaf7fa855581b2c3d7550 e9ed2dead43eb4b637f1fed0997db12b41eff1c2 296b12cabc5c02b2d588a1b7bdb53e90f10ff0cb6702f68d98767c88b4ee3b5a Loading...

	play.robuxtip.org/images/jquery.countto.js	2.4 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/jquery.countto.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:07 Times Seen206 Hash 2997f7484c171da3ffd1f9f7bf8b9056 be8d289c00db0f7c5975938a147181a772e0f6b6 0c3bb5ecb9b684b6efb1524648c7cf632511260270fa846369f27115ce269070 Loading...

	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd	514 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen199 Hash 09933286614ed7eb9801cf06011a4c9d fa97803d9532c6922800b799c7e43039f003f33d 68d3e0ce6a8a98aa641fc113c014919e27ccff17a6c7f286cfc325693f730e09 Loading...

	www.blogger.com/static/v1/widgets/4150139458-widgets.js	158 kB	2023-03-07	2023-03-14
Pretty URL www.blogger.com/static/v1/widgets/4150139458-widgets.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:10:33 Last Seen2023-03-14 11:35:19 Times Seen1 Hash 52c5c82c3da1ee190059ca69df0f8a33 588424f6cbdc6c258aa45ba2f0328aef9faef766 b52b894097b6d8f58a8c0dea115a8aa5826d71300933a1f714be1dd14d00ae9d Loading...

	play.robuxtip.org/images/com.js	15 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/com.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 04:24:01 Times Seen65 Hash 466cf8a36ac32eb927568e8c63d94f80 fbff8ca922aba7d561ba63cba4582026020fa76c 05b0cf64ba783827ded5c5dcd31e88670cf507a588d73371d304cb8c482ea39f Loading...

	play.robuxtip.org/images/sticky.js	20 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/sticky.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen395 Hash 1180d3ea8d2544bb6bec4dacb60526d2 d2788f5423575404112a66853e0f274960d743e0 bb88a49c99d278abff743baf1f0f492382031afd4212fb27b33a23068723f86e Loading...

	play.robuxtip.org/images/form-scripts.js	1.0 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/form-scripts.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:06 Times Seen200 Hash 7d7a87d79b5343d3f04fed2cc2bef2e3 021cc4c45ce7872041b7af085a4cf13f423c01e8 7a05b1e911af071c10812d790155447a62d4445db99b2d43872202bfcaded5ae Loading...

	s4.histats.com/stats/0.php?4275781&@f16&@g0&@h9&@i1&@j1664171771004&@k52828&@l9&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia\|template=PinkTong.xml\|anisacintia=2019hackingrobloxrobuxpromo.blogspot.com\|2019hackingrobloxrobuxpromo.blogspot.com=direct\|ref=direct\|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-191139108&@b3:1664171771&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w	50 B	2023-03-08	2023-04-25
Pretty URL s4.histats.com/stats/0.php?4275781&@f16&@g0&@h9&@i1&@j1664171771004&@k52828&@l9&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia\|template=PinkTong.xml\|anisacintia=2019hackingrobloxrobuxpromo.blogspot.com\|2019hackingrobloxrobuxpromo.blogspot.com=direct\|ref=direct\|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-191139108&@b3:1664171771&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w IP 198.27.80.143 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:31:00 Last Seen2023-04-25 05:09:23 Times Seen3 Hash 1e8e0e87faa5d42bea731e29c471a080 fecbd63956cc20500c03d36cdc949e0376e298bf 65a6954dea31b123a4b0a216dd6e521387f4d3770b29d71a0b1954f2da6a784a Loading...

HTTP Transactions (60)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.27

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 05:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Cp9A9MQdg36rTWKZtZOalf7r8DGHgrUd5OCsaMJm5HuPG1BbN4aRMw==
Age: 2452

2019hackingrobloxrobuxpromo.blogspot.ug/

142.250.74.161

302 Moved Temporarily

190 B

URL HTTP/1.1
2019hackingrobloxrobuxpromo.blogspot.ug/
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
190 B (190 bytes)
Hash
62cfccaebb143609641b5e5c4a226bf5
8aae93cb47b4b626155a01874f5abf8e5a3e260d
d6e6483f729caf2cd75e0f6d1fd586e4cfb12376a2bdc2f8a643d1d8f0505093

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: 2019hackingrobloxrobuxpromo.blogspot.ug
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Moved Temporarily
Location: http://2019hackingrobloxrobuxpromo.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 26 Sep 2022 05:56:10 GMT
Expires: Mon, 26 Sep 2022 05:56:10 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 190
Server: GSE

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7583
Expires: Mon, 26 Sep 2022 08:02:33 GMT
Date: Mon, 26 Sep 2022 05:56:10 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GT06d8FGdAnYAV1-S_9meIJSy280SeYbQ7da_js38WwWd29eG7h8OA==
age: 4855
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 05:56:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

2019hackingrobloxrobuxpromo.blogspot.com/

142.250.74.161

301 Moved Permanently

190 B

URL HTTP/1.1
2019hackingrobloxrobuxpromo.blogspot.com/
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
190 B (190 bytes)
Hash
c5722148e663fcb97d2b0e8085eafd74
705b25474e89cc9f60644562e37c6417b46f58a9
cb9ba8032bca35a8220f42c8c8a2211f416acd50f4e237cf3531c782d77af4eb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: 2019hackingrobloxrobuxpromo.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Location: https://2019hackingrobloxrobuxpromo.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 26 Sep 2022 05:56:10 GMT
Expires: Mon, 26 Sep 2022 05:56:10 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 190
Server: GSE

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.27

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.27:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 05:04:17 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Mon, 26 Sep 2022 05:22:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gVvgK03z7FK1Zpto2cJFI2EQn7rHZLweYwLR4R4cKIylhe8BwxbypA==
Age: 3531

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fd3b36dc2b620b48de491a8d9ba00fc0
be67ba7db5215dcb7c9225876e35a5e0a5005c9e
28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5523
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:10 GMT
Last-Modified: Mon, 26 Sep 2022 04:24:07 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

44.237.239.70

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.237.239.70:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3otRWd/AkigcICElRVyZrw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: hqUxZwtiqizqG/27TVEWjElkkQs=

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

2019hackingrobloxrobuxpromo.blogspot.com/

142.250.74.161

200 OK

39 kB

URL HTTP/2
2019hackingrobloxrobuxpromo.blogspot.com/
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2298)
Size
39 kB (38959 bytes)
Hash
c419986b8ba9f74652cbb619374a1155
83bf8cc6779715abb87688fb57d916ae0937bca1
709e1d533bd3c7bc6e989518d19665123cb96bda4beb6699f3fd473fef6c054b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: 2019hackingrobloxrobuxpromo.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 26 Sep 2022 05:56:11 GMT
date: Mon, 26 Sep 2022 05:56:11 GMT
cache-control: private, max-age=0
last-modified: Mon, 26 Sep 2022 01:42:37 GMT
etag: W/"f9754e0348770c6eb6c737ffea3f1274b7848c16e721fc60c04f137fcc95bf4a"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 38959
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/css?family=Roboto:400,700

142.250.74.10

200 OK

57 kB

URL HTTP/2
fonts.googleapis.com/css?family=Roboto:400,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2221)
Size
57 kB (57419 bytes)
Hash
0e48f08ffaf18617a776ea694d5fbe7a
7084ce571ee07af4315c0cc5965ae3c73e83f603
d2b10432030f9249304315e7e0c0abb21277d423f9a32201e1b5eb6e866e44fc

HTTP Headers

GET /css?family=Roboto:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2019hackingrobloxrobuxpromo.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Sep 2022 05:56:11 GMT
date: Mon, 26 Sep 2022 05:56:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
245fa9b453a885aab591773a075a448b
c17fe4a468f357240323a22613f767fa10929499
a648446b50d012257e03653a6ed7260a6e22de91cda03d0d4cd7402480c020e9

HTTP Headers

POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:12 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.robuxtip.org/images/gamebaglogo.png

172.67.220.56

200 OK

3.3 kB

URL HTTP/2
play.robuxtip.org/images/gamebaglogo.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3340 bytes)
Hash
e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f

HTTP Headers

GET /images/gamebaglogo.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FRYMsqMBE1KIHl94WMhr7vfPF2noWgjFeL6SMgaXgFniGux8MfD%2Bw763iRP8pZmNLdnACjyhxcbVRUDrZwPIBYTUZYzPgcram6wNfeu6130AQbI5%2FX7JDDPnOH4HX4YQD%2FtUlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbe80af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/ft-1.png

172.67.220.56

200 OK

3.3 kB

URL HTTP/2
play.robuxtip.org/images/ft-1.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3340 bytes)
Hash
e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f

HTTP Headers

GET /images/ft-1.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HVS7UrROn0zK%2Fhxs23AwV8AtJzdCOJ6Vb9zqhQ%2FSmVoM47x2UHA5w7eAWSTnoK8OZS3NeO%2FFV6%2FFlB7oMPiuvdwbR1i%2B0OfPAxyuZuUkcL8%2Bab2GqhL6tUVofn8VnHWvmFcGUg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbec0af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/header.png

172.67.220.56

200 OK

131 kB

URL HTTP/2
play.robuxtip.org/images/header.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size
131 kB (131285 bytes)
Hash
35e93538f31d67876a2cb38bf94279d8
49bf97732e9bffb5371ad60d024901b09d83651b
95c1de9315834de2ff3608a2dc048a6aedc273e665f9b54eb956523a81fc91df

HTTP Headers

GET /images/header.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: image/png
content-length: 131285
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-200d5"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ZVOSzwdJUFaN5xYlBe0Xc%2F2CwK63tq0zC%2Be1BU1uhMR5ZFq8Q%2Bm59A9%2B6ngGqLpFl5iMvKAMkg8i%2FouDZeUK1T4q3wpb2te9bJC6hxuKSoMn8L4j7nyyZsTLj%2FultGZfsaR2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbeb0af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
245fa9b453a885aab591773a075a448b
c17fe4a468f357240323a22613f767fa10929499
a648446b50d012257e03653a6ed7260a6e22de91cda03d0d4cd7402480c020e9

HTTP Headers

POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:12 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1

104.18.20.226

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
05b09d9df555fbec3558ee244aecf6de
cf9cb950ce62f6777a25edafdecf17ab3d9a92ee
cb0b06cee163912446cf0dec924e0c22d580d4e785327cae266ea3f89a3a5857

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 05:56:12 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D5F007442DF9A8A3382E0C4654D9EF1299B72A76"
Expires: Mon, 26 Sep 2022 17:00:00 GMT
Last-Modified: Mon, 26 Sep 2022 05:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 16
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7509c148f956b527-OSL

cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css

104.17.25.14

200 OK

1.5 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (3201), with no line terminators
Size
1.5 kB (1541 bytes)
Hash
8e09ceb5490863a66cd2e83ca3d7e524
35e3d074516ec70c508d748f7ae01827bc0c28ba
cccbb374fd4cb6dcbac9df64456b49cb11530e7bafdac6c6c7e67ff2ed350db9

HTTP Headers

GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css; charset=utf-8
content-length: 1541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-c81"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9613142
expires: Sat, 16 Sep 2023 05:56:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrrpd81Ue4eqH7Gn%2Fiy9xfQV%2FqHzSGeUyOCdIo8qS0G0ZB%2FZH5p8CdGHZOGv7r2qV5QwcP73Cbu2eoYE3eYgMJYn%2FyxxXVpDR9%2FqaVpnxD6z4kXgEXOG40KTg9QKYZe50MLfw0my"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7509c149083d1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4856
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 05:56:12 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4856
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 05:56:12 GMT
Connection: keep-alive

play.robuxtip.org/images/main.js

172.67.220.56

200 OK

19 kB

URL HTTP/2
play.robuxtip.org/images/main.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (24637)
Size
19 kB (18964 bytes)
Hash
396a4701b21307e096cf9f72f24f8170
60c41c47d1efdc95c8ae3b2d7f9889c7b45d6b06
aebf37154139e7ccaa947ee69feaffbbbee7d8d57a29d305275f1d010ec9656f

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/main.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=38451
etag: W/"5d9ca488-9633"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OT2v8fhzcV%2BrVIx%2BcRV3fO73EQLQ1zSw%2B4YY9cK56glxmGrMjU4DcAc7RZ29Gxr8BIwS5f0YqjS5zXSAYjlw%2BmM3O8V4rDnslsh9bv6LwpH6qIzLhD4FJd8V7Xlwr%2Bm0wQOTvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148cbff0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4856
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 05:56:12 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa675e34b-7ee1-4318-a6a3-b49bce6a4ca4.jpeg

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa675e34b-7ee1-4318-a6a3-b49bce6a4ca4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10944 bytes)
Hash
b6e43e36ae283d6ec12fb5c9c692fa83
a3b3a4396da5beac2430e8facdb4d4b799621c9d
49ed7dccf0fe8abb7b0bfdc34ff89b30ef719288571bb1d89d29a1cb8857310e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa675e34b-7ee1-4318-a6a3-b49bce6a4ca4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10944
x-amzn-requestid: 2711886c-e022-4a77-862e-9d7bbd0db02e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvxHsSIAMF8Pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-6b464e2e489825b51447d74d;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uUv7Bw-tIh5QVF-nZhx0sWz6K8EJn3gWP0pzUHBzktZS3A6uMudYSg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:25:04 GMT
age: 27068
etag: "a3b3a4396da5beac2430e8facdb4d4b799621c9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4856
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 05:56:12 GMT
Connection: keep-alive

play.robuxtip.org/images/validator.min.js

172.67.220.56

200 OK

2.6 kB

URL HTTP/2
play.robuxtip.org/images/validator.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (5862)
Size
2.6 kB (2591 bytes)
Hash
6dfce8fe5f8df6a005dcaac6d7a3250a
1be9ad29f13ab12277c0979d9258d2210f787cb8
4a980a37d1e0eace2d278f527a7d2ca823cf350b39fcd50fef1feca872e17e78

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/validator.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-17a7"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UyaXj2hmzQlKi%2BMWBTr2UJLs03XP0ppD25XtRzeDTpDPNwqG5NxHNksMZbkMsPbg1Vri0U0XyvwU6oGK612w%2Bg7WllQEoIhFgMuXIPiZnMUFBu8aPcgSUWAcKh1RIyDrBUiyZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbf70af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sticky.js

172.67.220.56

200 OK

18 kB

URL HTTP/2
play.robuxtip.org/images/sticky.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (16920)
Size
18 kB (18243 bytes)
Hash
60473008185a9b6a576e1c771d62b04a
ce54d4436e08947909c60cfa64bf1b86c78e7ee6
a1cb2f25cba11acbedf2c86e1fe0cc5da71209e0e14f6d048d3553229945a352

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/sticky.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=20845
etag: W/"5d9ca488-516d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z5PBvkdOILbsa1Jx38b33ejBE5SSZi6XNc67W7qajaOI9lHZrA6E7ThQAkRfPdTihlpw49NyVu6b23QbdzeyelBSxG5O8wApFM4RzKksj85x3Vj7vpbJE7PByVLuiwrLk3ZaNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148cbfe0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.2 kB (7185 bytes)
Hash
6d79a3a5bd7dc7aa6cab306176fafd11
0d5cb1f3e3ea510308034a5e569c0e65fae30835
57979dfcf6fdc76f04e4790c2b94b876e188ac780aa49d9bfc8a58c498dc4203

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7185
x-amzn-requestid: e7b997d7-f9ce-40c6-b9bb-372ee10d8ad0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTAfEX5oAMFcHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb9c-31e295e33ead940f381121a1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:43:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p7rimTrmOgUnwPuESSKSrsWlzhiSBJYx9h8XIacxP8DUyyvXye2iyg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:49:56 GMT
age: 29176
etag: "0d5cb1f3e3ea510308034a5e569c0e65fae30835"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

play.robuxtip.org/images/scripts.js

172.67.220.56

200 OK

12 kB

URL HTTP/2
play.robuxtip.org/images/scripts.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with no line terminators
Size
12 kB (11843 bytes)
Hash
4f6adc960e3f0f6e0a29e6ed60a17e65
93332b0ca72d107003f7275781a2c7234d903092
cd83da9f24aad96fc6e786ea7907dfe5fe35d551d131139ddda136891fa47144

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=225
etag: W/"5d9ca488-e1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 282764
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JYLpTSvPOZfzZsYDrZyAzHXbQYOPHeat0O5anU7akegrx8FOV%2BP5clu7iXyxnVJCPkFABdYr5z%2Bp6uYXpkB7AqA1xkHhECreyZkh7XNi5czfRnaD0vEscipIKvPfVcz14Zab3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148cc000af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700

172.67.220.56

200 OK

56 kB

URL HTTP/2
play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (701), with no line terminators
Size
56 kB (55495 bytes)
Hash
4058e5b657814b62c7e614cf169ba911
df8296db5804b5d01ac196a8843bdb8237d9d5d9
91e750e008cde9f97222ff88f0eeeb076dd56b9c609e9992f20bc904329b7cdd

HTTP Headers

GET /images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700 HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=773
etag: W/"5d9ca488-305"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9jh5a5CnoUDg6YJi3I8W86vM94Mrq5kSb3kopH2xgW2WnB%2Fj%2F0CnLLOnt2Frdgn6FQoaacdERAqRNiIWci2dFjH45yQNFyWzUgHCF7wUbuagUJposT4emNTh4GLqD9BhafeRNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bbb0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery.magnific-popup.min.js

172.67.220.56

200 OK

21 kB

URL HTTP/2
play.robuxtip.org/images/jquery.magnific-popup.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (21014)
Size
21 kB (20729 bytes)
Hash
0cb8d2e63c342d9ccf557e72f7316277
f7ba04e25653a801b0d6ff4e155bcf2f45b05511
7ec0f624eeba9f448e55064d13072c75596e87601731f4ba3a4ffea7beaecab9

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery.magnific-popup.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-5297"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=weVW1AAlDx3Dz0m2rf6yh4BvTUDMw5WiCibPpTamv1izhJ2PbEl%2Banuns3eAmwCPGiXp6n3bjaKqFwFZijcmfs%2BVY2AMTpsbxn7HZlvukaZcjowbjpEqV17IW9QAUZZX%2F8RkkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148cbfc0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery.countto.js

172.67.220.56

200 OK

1.5 kB

URL HTTP/2
play.robuxtip.org/images/jquery.countto.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1043)
Size
1.5 kB (1512 bytes)
Hash
13222807b40d26777f199e0a76b7a451
cb37177dc7fd4bc99441c21a63c2a4754e214862
1f851ff9c829aab570fd1cdcf0d56a831f334d7c060b73b9fbb2d285652ec9d0

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery.countto.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3761
etag: W/"5d9ca488-eb1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZ2bkqtN342sHsfqn%2B0YdHuaAEbdLtKIf5BmFJeX6xqN7UZPUulhMaNpv5zjgcKL947R9Hu0TuNWy7PzPjTRQyWPQBdvR%2BBbrKrbQOPZ7OPgbiZOu%2FuevWLn64ebvMwvPQwIOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbf20af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/animate.css

172.67.220.56

200 OK

5.9 kB

URL HTTP/2
play.robuxtip.org/images/animate.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (53418)
Size
5.9 kB (5921 bytes)
Hash
b8561aaf5309e1cf221c79aa3cc831b3
963b2adc019eed62103bd3faf639d1cdc04789eb
a5a476be8e608afcad23e24fd377bb66abe8c337d878a8f2ace19286b698dac0

HTTP Headers

GET /images/animate.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=68796
etag: W/"5d9ca488-10cbc"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p9%2FWlK8sr%2Bgd5MfH%2Fe7rT2%2BdxZbpGmmSaSg668b%2BJDWa4MnfRmKVXKWWmmVHDuYVG2V9MgHMy3suKR5LfE5MEIq0nPpIMCdjbjiIiOF9M6NwjT9wzu%2FDGs46J6f55bEQCcggfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bcc0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
650b6e71248092b05b7f35e8703da4fb
a675c71ea7c50c6a3576eb9626630b0445016d32
122a0ec921f9b9a6b845d4f75df0a4d950f2ce3c34a79cecc67d80962255c1ca

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5711
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:12 GMT
Last-Modified: Mon, 26 Sep 2022 04:21:01 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.robuxtip.org/images/fancyselect.css

172.67.220.56

200 OK

67 kB

URL HTTP/2
play.robuxtip.org/images/fancyselect.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (3595), with no line terminators
Size
67 kB (67414 bytes)
Hash
77b2175ecb7512ca58e70ef9bf42fe0d
82727e343a3871ba8c01544d51d89f8d748256eb
7d1342a291b45ad58f3830382bcfc9284495aa3dc9240b079a12de2fe6bb3d67

HTTP Headers

GET /images/fancyselect.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4253
etag: W/"5d9ca488-109d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BIAStsRQvGJzetDyqZECSuBghnVEWapkZisVApr7KHa28JJ2zFndn51TOcQLbKk0kJ6jKaPkSziDC2NgL7IkR4XuFZorNgyGUXHUsDkM1RHDmaw4bUdyu6zfjQVgCN%2BhQlE5zw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bd40af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 05:56:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.robuxtip.org/images/custom-css.css

172.67.220.56

200 OK

18 kB

URL HTTP/2
play.robuxtip.org/images/custom-css.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1606), with no line terminators
Size
18 kB (18254 bytes)
Hash
d5731160f6169cc24c846428758ebfce
6f130d660860d02baa84dba2dc1fb20cde797bd2
f7069aaff53f1874ee6fe7247fed09886ef504c725f2d55e4af5a336e63a5533

HTTP Headers

GET /images/custom-css.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1790
etag: W/"5d9ca488-6fe"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2BRBeNJfi7W8ijwpUoRDAXWiTSkJP9utmeXC%2FQX31AS6tvyNPd27coJbqexZg1B7KiPJkWy6%2B%2FBgNyURQSPe4X3Vq2%2BHApdFIdLbOPLlKR45Z96h%2BCFz5bS4ak4gvs4kmVhfdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bd70af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d60144b96f72539719011cc71dcaa7c2
02a0962fe84b3466d77542f7b1b42a9efcc84479
814e75d1f248cd7bdc505fabec42b103880ed89329940be06d039b84d1f1b95f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "814E75D1F248CD7BDC505FABEC42B103880ED89329940BE06D039B84D1F1B95F"
Last-Modified: Sat, 24 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4294
Expires: Mon, 26 Sep 2022 07:07:46 GMT
Date: Mon, 26 Sep 2022 05:56:12 GMT
Connection: keep-alive

s10.histats.com/js15_as.js

46.105.201.240

200 OK

4.4 kB

URL HTTP/2
s10.histats.com/js15_as.js
IP
46.105.201.240:0
ASN
#16276 OVH SAS

File type
HTML document, ASCII text, with very long lines (11440), with no line terminators
Size
4.4 kB (4364 bytes)
Hash
ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1

HTTP Headers

GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:47:35 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 358845971
content-type: text/javascript
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2

s4.histats.com/stats/0.php?4275781&@f16&@g0&@h9&@i1&@j1664171771004&@k52828&@l9&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia|template=PinkTong.xml|anisacintia=2019hackingrobloxrobuxpromo.blogspot.com|2019hackingrobloxrobuxpromo.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-191139108&@b3:1664171771&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w

198.27.80.143

200 OK

50 B

URL HTTP/1.1
s4.histats.com/stats/0.php?4275781&@f16&@g0&@h9&@i1&@j1664171771004&@k52828&@l9&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia|template=PinkTong.xml|anisacintia=2019hackingrobloxrobuxpromo.blogspot.com|2019hackingrobloxrobuxpromo.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-191139108&@b3:1664171771&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w
IP
198.27.80.143:0
ASN
#16276 OVH SAS

File type
ASCII text, with no line terminators
Size
50 B (50 bytes)
Hash
1e8e0e87faa5d42bea731e29c471a080
fecbd63956cc20500c03d36cdc949e0376e298bf
65a6954dea31b123a4b0a216dd6e521387f4d3770b29d71a0b1954f2da6a784a

HTTP Headers

GET /stats/0.php?4275781&@f16&@g0&@h9&@i1&@j1664171771004&@k52828&@l9&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia|template=PinkTong.xml|anisacintia=2019hackingrobloxrobuxpromo.blogspot.com|2019hackingrobloxrobuxpromo.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-191139108&@b3:1664171771&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 05:56:13 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 50
Connection: close

34.120.237.76

200 OK

7.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.6 kB (7648 bytes)
Hash
75a459d4f554d38a1701e727185c7e91
042d4b6927f80c5a44bb7baf77b763577c19ed36
c01b0d3a28ed31ec9432d879310cffa313260f97044f1ed473aa0331bdba5607

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bfaf0f-e716-4cf7-9785-ffcd146aed68.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 7648
x-amzn-requestid: 359116cc-4e08-4c57-8aba-0aa7bd232c98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSKWG2BIAMFlHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca42-2130239f2dab781c0f49f0e4;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: caqLwNG92a0CRHwZLzFYIndWri6UOUyN9Bm8pqEytrumcpAMAo0WmQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:47:32 GMT
age: 29327
etag: "042d4b6927f80c5a44bb7baf77b763577c19ed36"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

play.robuxtip.org/images/magnific-popup.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/magnific-popup.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/magnific-popup.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7946
etag: W/"5d9ca488-1f0a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OigcxI%2F1Gbg%2BiOlzNTqS9egzVVKVBZvP8tkchffebl4rMCdxGdwl2ScVEN4bpfE0JGcXDf5uga48psewEChUfPBqU2zy6x9%2FO%2FoBgfnjScUaZNfA6CfTicWullbdoTfJ43ceFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bd20af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/com.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/com.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/com.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=17963
etag: W/"5d9ca488-462b"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BHF73zwkC695scwPMbOpmdh8vJNBzvXAGKSCMXbhiYZN%2Bhht63JOVg%2BLV%2BxoIDTHVMGMatCxUa9SOH9CMuyqh5sEwTGQu0M22KJEfRH6zkLyGAaEL0T7qZlwpcNRH0DgORzNzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbf80af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/fancyselect.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/fancyselect.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/fancyselect.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6778
etag: W/"5d9ca488-1a7a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JQ79PBW1D%2BI4dcMraQIaF8qRjcLIjkVDIyMW%2F0S%2BT6S2tYWh6d%2FZemYF5yruaxyCMhZ714Qx3GLXSEcd0PvVmmUFkwGmT5yBqLg%2BadXG%2FYV9KyimpBNdNWO%2FFnK1M9jcB9pl2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbf00af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/font-awesome.min.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/font-awesome.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/font-awesome.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-6c3d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PUkBHcj6rihokw6CNy%2B6VyeiRaZAXWdEQ%2BkEq6izwej4aM%2FNJP07W5eSWz1Fk%2FmaRjREDjbAEIFJzYDVp600RqB9kciUx87TOHI4uNx0QIZrL1uTbnWrqxl1UzdcjduKSNrlXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bbe0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/bootstrap.min.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/bootstrap.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/bootstrap.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-1d990"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dhTKPykKDx1EueA%2F0Z09chtkYtmygTKE0Ko8NguW2%2BtScONv9YOopKgxy5HCypv%2FEBVTIa5zLoK3dI5l4s8CQruDoYZZQPAMVbbWCY0WmvMmV7RDMUyytd1taiH4e3QmsSMaRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bc80af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sweetalert2.min.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/sweetalert2.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/sweetalert2.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-4f51"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iZcr8iRKi8BUjy%2F3ZH%2F2ag8BHJoDf93MfvO4QR40VZMwfCCvh1c%2Bz2649%2BcIgC6%2FflOlnjK6TL1E0Cvsa7bnHtBIdkeIG4TgP5FAvwVXZmXrV5HplyTNy2Lfc%2Bk1RJOtq5I9NA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbf50af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery-3.2.1.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery-3.2.1.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery-3.2.1.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=268039
etag: W/"5d9ca488-41707"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BEPw%2B1SIypQxSa8wLLRkHp7SeZh2bRExPm1r0AFRZvWmizKlWji6zw5WXqefJ1365bQFdhiuSNaaIo6rP4gwrjxFjN9unb2fO5Du8EukQmHYiz4J8eKP6VTQD7%2F3rLIHObt%2FPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbed0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

mtevor.com/cluster-v2/roblox-abs.js

172.96.187.226

200 OK

0 B

URL HTTP/2
mtevor.com/cluster-v2/roblox-abs.js
IP
172.96.187.226:0
ASN
#32475 SINGLEHOP-LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /cluster-v2/roblox-abs.js HTTP/1.1
Host: mtevor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2019hackingrobloxrobuxpromo.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-powered-by: PHP/5.6.40
content-type: application/javascript
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 05:56:12 GMT
server: LiteSpeed
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://2019hackingrobloxrobuxpromo.blogspot.com/
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/html
last-modified: Mon, 27 Jun 2022 12:44:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 34006
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dLeoXFzI8Sf0LvdJ09ooyZftTu%2Fwz4LvhOQC8ILopDqwOOhNwiVwKEpGwSHUu247C9vzu80H%2BlHkw0CgWJ%2F6Ws0DixX%2Fzc2LcBB0KIYY9s3kb%2FLFzOAR%2Be3Lq6%2Bo10V%2FF7wkcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1482b730af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sweetalert2.min.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/sweetalert2.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/sweetalert2.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-36a4"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FrV55vOktHeAVda4IQGceCfw5JkLT%2FcoIPxHLtS%2B%2BRBkqAX5N4dWXrIvgZnmoqwlqCeMDpOwb73ts1x6aAJs77OxTzP70HB9sRLSijxjIz%2FEHmbTBoeV%2Bacxjkvvf1SSqiMrSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bd10af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/form-scripts.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/form-scripts.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/form-scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1469
etag: W/"5d9ca488-5bd"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JW%2BJyd49Eeetmv7Jjc3f6Q%2F%2FI0h1lKmp%2FwVAeUeuAbxIlyqV7UHjirLc7sglqMCp%2BZZWAzUqpNQYzwAsNZ3taeg6u8P2iX1jBjsqXYk0PTjPbHlvmzvDtm4nGr38Xrs69oBVTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbfa0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery-ui.min.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery-ui.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery-ui.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-30da8"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d6cA7Jh7ghFDTxktgRsRm0heV6q4m71e5OmQoHiBxkd5UafYtEuX6BBI6m17pJGjHiH5YTi3Yrd%2F1hkHp8SzrHuw7I9kPkmMXoMJ8kj2PgUsC1b2DzcZJyNTP509To127sC6rA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c148bbef0af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/style.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/style.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/style.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsImFuaXNhY2ludGlhIiwiMjAxOWhhY2tpbmdyb2Jsb3hyb2J1eHByb21vLmJsb2dzcG90LmNvbSIsIjIwMTloYWNraW5ncm9ibG94cm9idXhwcm9tby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171718176; HstCmu4275781=1664168347683; HstPn4275781=8; HstPt4275781=8; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Lia Piazza; username2Cookie=Marilena; username3Cookie=Jonathan; comment1Cookie=Wow! that was amazing!!! thanks a lot for this.    I can not believe believe that this really works, generated 100000 gold! c=; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .; comment3Cookie=thank you admin! works for me!  I can not believe believe that this really works, generated 100000 gold.. This trick is amazing  . c= thank you so much .; timePosted11Cookie=40493; timePosted22Cookie=35812; timePosted33Cookie=23079
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 05:56:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=50839
etag: W/"5d9ca488-c697"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769164
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Ix1HCXZtoHjkWHU8TMSlBggPyd%2BPtU%2BiegifETm5ZyW1Z2BlwK628OF1pW1gFvxKeIQkUr33YkJRP%2BSgYego7cQmm7mO2QYBhsn37iBxfND1XVUXjkBLxAHBCNh7Yuu%2BgBLPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c1489bd60af6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (19)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations