| r.dsc.gg/mafiaxgang | 104.21.7.223 | 302 Found | 0 B |
IP 104.21.7.223:443
Requested byhttps://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 CertificateIssuerLet's Encrypt Subjectdsc.gg FingerprintEC:BD:70:7B:1D:4D:D7:14:EB:E2:06:54:F4:77:CD:1F:E1:FE:C0:4E ValiditySat, 13 Jan 2024 07:14:12 GMT - Fri, 12 Apr 2024 07:14:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mafiaxgang HTTP/1.1
Host: r.dsc.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wwwvroblox.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 12 Feb 2024 20:32:02 GMT
content-length: 0
location: https://discord.gg/F829tR6BMc
x-ratelimit-reset: 5
set-cookie: clicked_tags=dsc.gg; Max-Age=86400; domain=
visited=true; Max-Age=86400; domain=dsc.gg; path=/mafiaxgang
access-control-expose-headers: location, set-cookie
x-ratelimit-remaining: 4
access-control-allow-credentials: true
x-ratelimit-limit: 5
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=otKC5a9NWfmDaQ9YyARxMbNDIW6uEPO7HItYVcitfmD%2Bi5ooaNHyfSwuIsH1O307i9s4Wcrd8Tdzst94Flj6F26sQkhJP76AZ2j9tqb7NxXuyn5lYxtzWWdGhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8547993d0c4256c1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| discord.gg/F829tR6BMc | 162.159.135.234 | 301 Moved Permanently | 0 B |
IP 162.159.135.234:443
Requested byhttps://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 CertificateIssuerCloudflare, Inc. Subjectdiscord.gg FingerprintE1:83:99:07:09:25:67:95:E6:CE:86:5E:C7:DA:97:73:DC:66:A6:72 ValidityThu, 12 Oct 2023 00:00:00 GMT - Fri, 11 Oct 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /F829tR6BMc HTTP/1.1
Host: discord.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wwwvroblox.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Mon, 12 Feb 2024 20:32:02 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
location: https://discord.com/invite/F829tR6BMc
strict-transport-security: max-age=31536000; includeSubDomains; preload
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlpX608rKzwnRF8nMgTE2BOQXbaJZN5%2B2eRuFB8ZBYjrLMrw43hFzJkg6SeXr2L%2BeNx36LxK8oiKge6bWdDXph8FU5jUDWGFA4qI9AfUYZE5eSGTYxAVwiCk%2FSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8547993fc87456bf-OSL
X-Firefox-Spdy: h2
|
|
| discord.com/invite/F829tR6BMc | 162.159.128.233 | 200 OK | 13 kB |
URL GET HTTP/2discord.com/invite/F829tR6BMc IP 162.159.128.233:443
Requested byhttps://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 CertificateIssuerCloudflare, Inc. Subjectdiscord.com FingerprintA8:AB:66:57:DC:35:70:C3:39:4A:3E:36:5C:AB:B3:0C:B1:E0:61:D3 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (8541) Hash5f6efdaa50e55515f84bd94d31d0f218 cbfbcd5ac0fd4772c0fad22b631645de5a566ad9 b6b39a15bdb9287f5667f1c573fcac634d6b0073f10b1e1768e4f233f9e29357
GET /invite/F829tR6BMc HTTP/1.1
Host: discord.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wwwvroblox.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 12 Feb 2024 20:32:02 GMT
content-type: text/html
cf-ray: 854799400ddd56aa-OSL
cf-cache-status: HIT
cache-control: private
last-modified: Thu, 08 Feb 2024 18:49:55 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-ODUsMTExLDg2LDE5LDU2LDQyLDI0MCwxNjk=' blob: https://cdn.discordapp.com/animations/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://checkout.paypal.com https://c.paypal.com https://kit.cash.app; style-src 'self' 'unsafe-inline' https://cdn.discordapp.com https://*.hcaptcha.com https://hcaptcha.com https://kit.cash.app; img-src 'self' blob: data: https://*.discordapp.net https://*.discordapp.com https://*.discord.com https://i.scdn.co https://i.ytimg.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com https://*.youtube.com https://*.giphy.com https://static-cdn.jtvnw.net https://pbs.twimg.com https://assets.braintreegateway.com https://checkout.paypal.com https://c.paypal.com https://b.stats.paypal.com https://slc.stats.paypal.com https://hnd.stats.paypal.com https://api.cash.app; font-src 'self' https://fonts.gstatic.com https://cash-f.squarecdn.com; connect-src 'self' https://status.discordapp.com https://status.discord.com https://support.discordapp.com https://support.discord.com https://discordapp.com https://discord.com https://discord-attachments-uploads-prd.storage.googleapis.com https://cdn.discordapp.com https://media.discordapp.net https://images-ext-1.discordapp.net https://images-ext-2.discordapp.net https://router.discordapp.net wss://*.discord.gg https://best.discord.media https://latency.discord.media wss://*.discord.media wss://dealer.spotify.com https://api.spotify.com https://music.amazon.com/embed/oembed https://sentry.io https://api.twitch.tv https://api.stripe.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://www.googleapis.com https://*.algolianet.com https://*.hcaptcha.com https://hcaptcha.com https://*.algolia.net ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' blob: disclip: https://*.discordapp.net https://*.discord.com https://*.discordapp.com https://*.youtube.com https://streamable.com https://vid.me https://twitter.com https://oddshot.akamaized.net https://*.giphy.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com; frame-src https://discordapp.com/domain-migration discord: https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://hooks.stripe.com https://checkout.paypal.com https://c.paypal.com https://assets.braintreegateway.com https://checkoutshopper-live.adyen.com https://kit.cash.app https://player.twitch.tv https://clips.twitch.tv/embed https://player.vimeo.com https://www.youtube.com/embed/ https://www.tiktok.com/embed/ https://music.amazon.com/embed/ https://music.amazon.co.uk/embed/ https://music.amazon.de/embed/ https://music.amazon.co.jp/embed/ https://music.amazon.es/embed/ https://music.amazon.fr/embed/ https://music.amazon.it/embed/ https://music.amazon.com.au/embed/ https://music.amazon.in/embed/ https://music.amazon.ca/embed/ https://music.amazon.com.mx/embed/ https://music.amazon.com.br/embed/ https://www.youtube.com/s/player/ https://twitter.com/i/videos/ https://www.funimation.com/player/ https://www.redditmedia.com/mediaembed/ https://open.spotify.com/embed/ https://w.soundcloud.com/player/ https://audius.co/embed/ https://*.watchanimeattheoffice.com https://sessionshare.sp-int.playstation.com/embed/ https://localhost:* https://*.discordsays.com https://discordappcom.cloudflareaccess.com/; child-src 'self' blob: https://assets.braintreegateway.com https://checkout.paypal.com https://c.paypal.com; prefetch-src 'self' https://cdn.discordapp.com/assets/;
cross-origin-opener-policy: same-origin-allow-popups
permissions-policy: interest-cohort=()
x-build-id: ae72f647894ce34bcebc36cda4062f582f66a94e
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OlT2iBO38CuWg8DsL10TPy5aH%2B%2FmG6Ei50xDa1dsO5ObXFYX7a%2BPWnQOGFHAStVTXl%2F%2FD41Iv7bDnk4PwCSPNgKbfOt9F0dlNKJ84N1kjqhIa1OBheqv4eg7r4Yl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __dcfduid=c78ffc20c9e511eead47253165b4a0a8; Expires=Sat, 10 Feb 2029 20:32:02 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
__sdcfduid=c78ffc21c9e511eead47253165b4a0a8d06f2b1d9fdefb12369ec7d884a56e33b9f344364be8ac94f4fee3fa75f81396; Expires=Sat, 10 Feb 2029 20:32:02 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
__cfruid=acb13709f91dd52f72ba334672f3702bf47ce9b0-1707769922; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
_cfuvid=zdlLYozpmoNoBhsnzFnDMKMu26OUV.3iMzqwBGM1RQU-1707769922796-0-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 | 172.67.191.183 | 500 Internal Server Error | 0 B |
URL User Request GET HTTP/2wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 IP 172.67.191.183:443
CertificateIssuerLet's Encrypt Subjectwwwvroblox.com Fingerprint0E:E3:5C:43:1D:70:1E:44:2B:AB:73:6D:63:E8:33:2B:77:5E:9A:AB ValidityMon, 29 Jan 2024 23:20:41 GMT - Sun, 28 Apr 2024 23:20:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 HTTP/1.1
Host: wwwvroblox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 500 Internal Server Error
date: Mon, 12 Feb 2024 20:32:01 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.15
strict-transport-security: max-age=15768000; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8HJWcHrCc8EzcCKoEXJIETIBFzyvEPW4D7e5OAoigW%2BK%2FdB7Ouj9pBnb4t0hcXsWoEvuQfjSTDRJlEA4g0mUMCZzg42ZvGklJDM2UVWDVqK5K35kd5j9LVVZW2hpDpeYyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 85479935afad56bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wwwvroblox.com/favicon.ico | 172.67.191.183 | 301 Moved Permanently | 0 B |
URL GET HTTP/2wwwvroblox.com/favicon.ico IP 172.67.191.183:443
Requested byhttps://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 CertificateIssuerLet's Encrypt Subjectwwwvroblox.com Fingerprint0E:E3:5C:43:1D:70:1E:44:2B:AB:73:6D:63:E8:33:2B:77:5E:9A:AB ValidityMon, 29 Jan 2024 23:20:41 GMT - Sun, 28 Apr 2024 23:20:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: wwwvroblox.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Mon, 12 Feb 2024 20:32:01 GMT
content-type: text/html; charset=UTF-8
location: https://dsc.gg/mafiaxgang
x-powered-by: PHP/8.2.15, PleskLin
strict-transport-security: max-age=15768000; includeSubDomains
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UKEG3JQJvpXLD4nd2%2BG95os%2F09qHBIV136HWblVyK0JIpS8AGYqiPtDiM7Rx5wnpdWuv4KC9LIqnt9R7SCyVt43a2l4aStc6jmTyQ1K0hLafGidvPuJLZIgldtSndWzbfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8547993b2f0f56bb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dsc.gg/mafiaxgang | 172.67.156.126 | 302 Found | 0 B |
IP 172.67.156.126:443
Requested byhttps://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940https://wwwvroblox.com/games/2753915549/Blox-Fruits?privateServerLinkCode=76713627280689045006812787152940 CertificateIssuerLet's Encrypt Subjectdsc.gg Fingerprint31:08:AE:72:91:8D:FD:AE:CA:6C:88:0D:66:5B:68:E5:64:47:A0:8D ValidityThu, 01 Feb 2024 07:01:39 GMT - Wed, 01 May 2024 07:01:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mafiaxgang HTTP/1.1
Host: dsc.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://wwwvroblox.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 12 Feb 2024 20:32:02 GMT
location: https://r.dsc.gg/mafiaxgang
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RrByRChPGtcbeUqxVKKjL3sjC3rgEw0KKH8XWkRXn3MljwNUQGYGXPXfQlvV%2FPfIGm3TpSqiq5ZwKypKOVhCC6DOsfjx0EW8OF2qNTp7XvNCkOokkCxBGNg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8547993cacffb4f1-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|