Report - gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack

Report Overview

URL

gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
IP

91.223.82.61

ASN

#199968 Iws Networks LLC
Submitted

2022-12-16T07:12:35Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

50

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
downloadlocked.com (1)	127304	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1086	4544	23.22.126.183
is1-ssl.mzstatic.com (1)	1597	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	506	13422	23.38.200.24
i0.wp.com (1)	3021	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	392	1176	192.0.77.2
maxcdn.bootstrapcdn.com (1)	724	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	416	7564	188.114.98.224
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	52.38.227.80
track.enigmacdn.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1147	20892	91.223.82.61
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3245	50778	34.120.237.76
fonts.googleapis.com (1)	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	402	746	142.250.74.106
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2373	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5856	34.160.144.191
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	391	34.117.237.239
translate.googleapis.com (1)	1005	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	415	4565	142.250.74.138
ocsp.digicert.com (2)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682	1208	93.184.220.29
ocsp.pki.goog (13)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4459	9096	216.58.211.3
ajax.googleapis.com (2)	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	788	83635	142.250.74.74
translate.google.com (1)	1156	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	408	27627	216.58.211.14
s4.histats.com (1)	12782	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	641	183	149.56.240.132
gaminghelper.co (36)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	25320	277161	91.223.82.61
r3.o.lencr.org (11)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3718	9754	23.36.77.32
fonts.gstatic.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	503	45804	142.250.74.163
www.gstatic.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	843	4304	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-16	medium	gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack	Phishing
2022-12-16	medium	gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack	Phishing
2022-12-16	medium	gaminghelper.co/js/fancySelect.js	Phishing
2022-12-16	medium	gaminghelper.co/js/jquery.countTo.js	Phishing
2022-12-16	medium	gaminghelper.co/js/sweetalert2.min.js	Phishing
2022-12-16	medium	gaminghelper.co/js/validator.min.js	Phishing
2022-12-16	medium	gaminghelper.co/js/form-scripts.js	Phishing
2022-12-16	medium	gaminghelper.co/js/com.js	Phishing
2022-12-16	medium	gaminghelper.co/js/jquery.magnific-popup.min.js	Phishing
2022-12-16	medium	gaminghelper.co/js/sticky.js	Phishing
2022-12-16	medium	gaminghelper.co/js/main.js	Phishing
2022-12-16	medium	gaminghelper.co/fonts/bebasneue_bold-webfont.html	Phishing
2022-12-16	medium	gaminghelper.co/fonts/et-line.woff	Phishing
2022-12-16	medium	gaminghelper.co/fonts/bebasneue_regular-webfont.html	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed
2022-12-16	medium	gaminghelper.co	Sinkholed

HTTP Transactions (88)

URL IP Response Size

gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack

91.223.82.61

301 Moved Permanently

288

URL HTTP/1.1

gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

288
Hash

f67be5b40cc3fde64c7a9699a4980696

339654e95062b3da2176175132d896d894d126b5

b6211ddffa86643cd2d63b7c806509c131a8d5b53568dfc496ec6f91b7096f97

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /app/431946152/roblox-maps-free-download-online-game-hack HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 16 Dec 2022 07:12:23 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 288
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

381442da2a14cb93770f4c8f6e19d35b

31c48467751e2450a63004c57eea0c7872023eaf

61b0985f47033bd7020ab3b8cdcbc6c17be6ab9b6feba69e006088b78e21c0f0

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61B0985F47033BD7020AB3B8CDCBC6C17BE6AB9B6FEBA69E006088B78E21C0F0"
Last-Modified: Thu, 15 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7171
Expires: Fri, 16 Dec 2022 09:11:55 GMT
Date: Fri, 16 Dec 2022 07:12:24 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

ae86164fd9297dfdc05d67d69284d70e

5e5f27e3fd492f715baa6820f05c0fafde4040b3

be20f6ae6a51d20611cb4d350b52a5d0a339af6722fe9b2482ef58826c1e9de0

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE20F6AE6A51D20611CB4D350B52A5D0A339AF6722FE9B2482EF58826C1E9DE0"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20969
Expires: Fri, 16 Dec 2022 13:01:53 GMT
Date: Fri, 16 Dec 2022 07:12:24 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

5b38399fcc8246505e5e6b0f62803a5a

bb374f8d97b2bd798873d74c6bbab20ad6843e96

406ab3af8adf2b151c052a06c0379fd8d83d3362e90c17ac2e5481b6b9a7441f

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "406AB3AF8ADF2B151C052A06C0379FD8D83D3362E90C17AC2E5481B6B9A7441F"
Last-Modified: Thu, 15 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3361
Expires: Fri, 16 Dec 2022 08:08:25 GMT
Date: Fri, 16 Dec 2022 07:12:24 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

bf0c602d32b3c14606f22a86183b5e3c

6eabd8d83475eba731968abe1a05a8bfd272f160

6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 16 Dec 2022 06:33:59 GMT
content-type: application/json
age: 2305
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

53341dea33f4f3d9b4966f80589f429a

20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d

651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: T0yTGzxby7OUflH+Q9xVFDmeg8eSft+37tt/1Cn5BqB5EUmeCRUOB2U9L1Curs/Des9Joa5+o8ipM0Qlbf+mug==
x-amz-request-id: VAY1G9868NDHKXY7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 16 Dec 2022 06:53:07 GMT
age: 1157
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

27e0e6a88819d8f07f4657a70c0a639f

a4ca4579b61704b486a219ee3b532d844013427b

23751a96503376052894b8869ba2f77bc2b69bb953578a4629dd90b7eb18be0d

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "23751A96503376052894B8869BA2F77BC2B69BB953578A4629DD90B7EB18BE0D"
Last-Modified: Thu, 15 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18626
Expires: Fri, 16 Dec 2022 12:22:50 GMT
Date: Fri, 16 Dec 2022 07:12:24 GMT
Connection: keep-alive

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 07:12:24 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack

91.223.82.61

200 OK

20003

URL HTTP/1.1

gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (14923)

Size

20003
Hash

94d17b53e2271b5c8ee9d31c9c3a57d2

58af2bb33446f359b61abecf0e9260f58a1cfe6f

2332bf48b3f4bed1d741a0ad0a77dee6ce0ab4d1fc1b929ebe8a3c69df1e230d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /app/431946152/roblox-maps-free-download-online-game-hack HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/8.0.8RC1
Content-Encoding: gzip

gaminghelper.co/css/bootstrap.min.css

91.223.82.61

200 OK

19597

URL HTTP/1.1

gaminghelper.co/css/bootstrap.min.css
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text, with very long lines (65371)

Size

19597
Hash

3f142cfc2d7123b31a1e696e0591f27a

834192dbadf2713cd2ff89f50d7ec2f1d4782e54

3421e2383a7c02f24509d2f1294d3099b658d0773f97706b87b832b0b770c0b6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /css/bootstrap.min.css HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: text/css
Last-Modified: Fri, 03 Sep 2021 06:30:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c104-1d9bb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/js/fancySelect.js

91.223.82.61

200 OK

1661

URL HTTP/1.1

gaminghelper.co/js/fancySelect.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text

Size

1661
Hash

a60791b5b353371813114e815d946494

69d1f371b0ed899641e640b2649c0914302812bd

5d19375a0386f8ea11115e3145c61105cfa1daca00d15ad54b49c84967f518d0

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/fancySelect.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b2-1a7a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/css/animate.css

91.223.82.61

200 OK

4026

URL HTTP/1.1

gaminghelper.co/css/animate.css
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text

Size

4026
Hash

48bc9b81bca18c06ba937cbb880b4cb3

697313edfad185bcca5c7bde18da4a98f93e3adb

b30b4d8565f9af6c8d2cb3839aa09dbccd60ca1a766465d542debade38f45741

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /css/animate.css HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: text/css
Last-Modified: Fri, 03 Sep 2021 06:30:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c104-10cbc"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/css/magnific-popup.css

91.223.82.61

200 OK

1994

URL HTTP/1.1

gaminghelper.co/css/magnific-popup.css
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text

Size

1994
Hash

c0275239cb960b014d780d8105b44d72

8db83ac790988232549a3740ecf04fc199da1ce8

211b79363793093a7a2f1d342768844e938e88156b62293093185a6500ead1cf

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /css/magnific-popup.css HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: text/css
Last-Modified: Fri, 03 Sep 2021 06:30:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c105-1f0a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/css/sweetalert2.min.css

91.223.82.61

200 OK

2737

URL HTTP/1.1

gaminghelper.co/css/sweetalert2.min.css
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text, with very long lines (13987), with no line terminators

Size

2737
Hash

1cfac88a4a8e1bc20b811757fb028b40

10427c064f703342d031411a3310e2a5ef2083bc

53976df2ad3ce0c0f2632bb620bbb02d930a5eb943298170e97189f029a0d70d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /css/sweetalert2.min.css HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: text/css
Last-Modified: Fri, 03 Sep 2021 06:30:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c106-36a3"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/css/fancySelect.css

91.223.82.61

200 OK

1023

URL HTTP/1.1

gaminghelper.co/css/fancySelect.css
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text

Size

1023
Hash

458a1a06f282aa4c457a8b613d6a38e6

b524e1cb32722230e18bc85f414b9a10e43a7e2d

3f41176d4616a36f4325865bb3c0ea652f3616dec60b31bd923df91f600506b2

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /css/fancySelect.css HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: text/css
Last-Modified: Fri, 03 Sep 2021 06:30:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c105-109d"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/css/style.css

91.223.82.61

200 OK

8520

URL HTTP/1.1

gaminghelper.co/css/style.css
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text, with very long lines (1512)

Size

8520
Hash

4d36bdeba8bb00f4ee280771fddfa689

8dfbed7251f5bb010d5fe8f64e0d60abc3e9fd54

08bb84420272831b8755bc5bd2858bf8a486006a9367b670d826ee516262a2c8

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /css/style.css HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: text/css
Last-Modified: Fri, 03 Sep 2021 06:30:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c106-bd7b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/js/jquery.countTo.js

91.223.82.61

200 OK

1125

URL HTTP/1.1

gaminghelper.co/js/jquery.countTo.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text

Size

1125
Hash

547f5246e091d19af521dee35588e468

4772f3c1e62865ccbbab04abd39e69510c8f5843

67880d8532d95db3e74b7da985ca2fe7c9d9660e3dd125202cebcda96a2007e2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/jquery.countTo.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b3-eb1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/js/sweetalert2.min.js

91.223.82.61

200 OK

6538

URL HTTP/1.1

gaminghelper.co/js/sweetalert2.min.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text, with very long lines (20305), with no line terminators

Size

6538
Hash

b238ef007e57c4c8f9447cba68fdb3a2

2d4ca455aca3fcd8ee7ac2e2883cfa89c87bd532

aeafa1e7bb6a973eac2b4f5462844b1c2d64d53eb2e09e75f265e646320f7080

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/sweetalert2.min.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b9-4f51"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/js/validator.min.js

91.223.82.61

200 OK

2094

URL HTTP/1.1

gaminghelper.co/js/validator.min.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text, with very long lines (5862)

Size

2094
Hash

1ab13fa2eeca5d16de99a1cad839416c

0d0a95bd88d04b02d89e1162dd3ebb20b5543dd8

56b8d7fb44f86809b49d416022455ac170fb0b79d1ab4b6e5192a046e660f667

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/validator.min.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b9-17a7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/js/form-scripts.js

91.223.82.61

200 OK

609

URL HTTP/1.1

gaminghelper.co/js/form-scripts.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text

Size

609
Hash

4fb85eb3b2f0dd8b8f5953c58236da3e

1c9f6c7a15a3248147e056672ffbf4fdbaed6718

3dd0f5e5567c73519dc3eeb98ba6fef9d2b2982af24544ba3d7bbc684d6bae6c

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/form-scripts.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b2-5bd"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/js/com.js

91.223.82.61

200 OK

3265

URL HTTP/1.1

gaminghelper.co/js/com.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

C source, Unicode text, UTF-8 text, with very long lines (2456)

Size

3265
Hash

ecf323c878106fa274f5e9f3b3a82437

86b15826e8a83c81da7ef264dd8e3ff59ef5c1bf

28babf5e232e3dc0985bab21a28eea25b17bc078bafc92a6ba049eefb1e45720

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/com.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b2-461a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

6c9f05fb499af4966a29ef3512602332

4b9a332ca18810028ea54c3b867feed1c49267e3

75342aaa31f02e9359554002a384b25bad7e12352bb89859068d07a62d4c2e2b

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5906
Cache-Control: max-age=91642
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Etag: "639ac640-117"
Expires: Sat, 17 Dec 2022 08:39:46 GMT
Last-Modified: Thu, 15 Dec 2022 07:01:20 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

gaminghelper.co/js/jquery.magnific-popup.min.js

91.223.82.61

200 OK

7685

URL HTTP/1.1

gaminghelper.co/js/jquery.magnific-popup.min.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text, with very long lines (21014)

Size

7685
Hash

12a9a563724e70a895de0fbd5f7b4ee5

a14c616f532deb9ca2d5fa0de6124d47ea60ab57

f2e1cd5f2953925591288bd1cc3f167bbd392497476119083458e33e9ab87079

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/jquery.magnific-popup.min.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b6-5297"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

gaminghelper.co/js/sticky.js

91.223.82.61

200 OK

URL HTTP/1.1

gaminghelper.co/js/sticky.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/sticky.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Content-Length: 0
Last-Modified: Fri, 03 Sep 2021 06:33:28 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "6131c1b8-0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

7ded1896628f431acd2e4a3d10ea3142

ad603e2b43da4629ede29f9f193ae5df09f3cbb8

dd4d3d2048b29affb30ddbbcf8112131cecdb15b0030a612c1d99cce54ab0132

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

7ded1896628f431acd2e4a3d10ea3142

ad603e2b43da4629ede29f9f193ae5df09f3cbb8

dd4d3d2048b29affb30ddbbcf8112131cecdb15b0030a612c1d99cce54ab0132

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

3972e23b068a857e4b879417ecbf1d1a

c5593984f70d07200faa6a1ca10572cb8670665d

db8f4f555c201994b386c718409b4f7b9dc75ef6910891a3d27097a0cb425e24

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

f8d21614a5f07dffe6f4fb52c6133ce1

aefac3c1cd05fd22634f71247cd4dd2e6fa1be88

b0f085491438d08c58906100ae4ddc2fea2e4b34b333c8f3a5a2258fdfd7a51e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js

142.250.74.74

200 OK

29725

URL HTTP/2

ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js
IP

142.250.74.74:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (32025)

Size

29725
Hash

83b3b5729cdff3976db52c51831e96b8

d23dc823e37f58e5366340be755730f3fa9a850d

675fa88b39008a09994460a93b310a7d4593735009a9b24b6f176c347ad12421

HTTP Headers

                                        GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29725
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 08:31:51 GMT
expires: Fri, 15 Dec 2023 08:31:51 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 81633
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js

142.250.74.74

200 OK

51711

URL HTTP/2

ajax.googleapis.com/ajax/libs/jqueryui/1.8.13/jquery-ui.min.js
IP

142.250.74.74:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (563)

Size

51711
Hash

d3908721b39ebbeffaf1c917bbda06e8

0f9b6c6bdad9cfc057f3e85f52cc417370959fb9

4ae100977cea8b9965e5d231f3ae655783b4f163c56ee703953aff937525ed37

HTTP Headers

                                        GET /ajax/libs/jqueryui/1.8.13/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 51711
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 15:53:49 GMT
expires: Wed, 13 Dec 2023 15:53:49 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 227915
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

gaminghelper.co/js/main.js

91.223.82.61

200 OK

15195

URL HTTP/1.1

gaminghelper.co/js/main.js
IP

91.223.82.61:0
ASN

#199968 Iws Networks LLC

Magic

ASCII text, with very long lines (16162)

Size

15195
Hash

562dc83f2f14b713905fe69a0994e11d

43cd616f9ea8c8c1eb0edccd54a29e2490fcf90a

745ecf708bc71ba73f7071b8a35c3f639ec7f3e05ceb826458a1b6a8fb4fe782

Detections

Analyzer	Verdict	Alert
fortinet	Phishing
quad9	Sinkholed

HTTP Headers

                                        GET /js/main.js HTTP/1.1
Host: gaminghelper.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/app/431946152/roblox-maps-free-download-online-game-hack
Cookie: HstCfa4515739=1671171768815; HstCla4515739=1671171768815; HstCmu4515739=1671171768815; HstPn4515739=1; HstPt4515739=1; HstCnv4515739=1; HstCns4515739=1; _pk_id.1.166e=fd8282799048b17c.1671171769.
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        HTTP/1.1 200 OK
Server: nginx
Date: Fri, 16 Dec 2022 07:12:24 GMT
Content-Type: application/javascript
Last-Modified: Fri, 03 Sep 2021 06:33:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
ETag: W/"6131c1b7-a08b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Content-Encoding: gzip

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 16 Dec 2022 07:08:00 GMT
age: 264
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

6c9f05fb499af4966a29ef3512602332

4b9a332ca18810028ea54c3b867feed1c49267e3

75342aaa31f02e9359554002a384b25bad7e12352bb89859068d07a62d4c2e2b

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5906
Cache-Control: max-age=91642
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Etag: "639ac640-117"
Expires: Sat, 17 Dec 2022 08:39:46 GMT
Last-Modified: Thu, 15 Dec 2022 07:01:20 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 279

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

aa1e449e845d673f1ff7857226e57105

ad6d901f1cbd5609a94c85e101c3e2eb6243e267

12427975a5e6113b7f8c429376d8f0a1fd74dcf4638d5b9ae20beed354bf9766

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12427975A5E6113B7F8C429376D8F0A1FD74DCF4638D5B9AE20BEED354BF9766"
Last-Modified: Thu, 15 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18627
Expires: Fri, 16 Dec 2022 12:22:51 GMT
Date: Fri, 16 Dec 2022 07:12:24 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

7ded1896628f431acd2e4a3d10ea3142

ad603e2b43da4629ede29f9f193ae5df09f3cbb8

dd4d3d2048b29affb30ddbbcf8112131cecdb15b0030a612c1d99cce54ab0132

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

translate.google.com/translate_a/element.js?cb=googleTranslateElementInit

216.58.211.14

200 OK

26820

URL HTTP/2

translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP

216.58.211.14:0
ASN

#15169 GOOGLE

Magic

data

Size

26820
Hash

7d75b33143f113e99ffa047c77a6269a

00b14d3fe2d7a956f9bebd658d5c2cd8d475e61f

f65a255721adefa7d6fdfe6936d2a69d51c4db40495d3e41bb9157fe8814be1c

HTTP Headers

                                        GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 16 Dec 2022 07:12:24 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+241; expires=Sun, 15-Dec-2024 07:12:24 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

f8d21614a5f07dffe6f4fb52c6133ce1

aefac3c1cd05fd22634f71247cd4dd2e6fa1be88

b0f085491438d08c58906100ae4ddc2fea2e4b34b333c8f3a5a2258fdfd7a51e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

3972e23b068a857e4b879417ecbf1d1a

c5593984f70d07200faa6a1ca10572cb8670665d

db8f4f555c201994b386c718409b4f7b9dc75ef6910891a3d27097a0cb425e24

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 16 Dec 2022 07:12:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

downloadlocked.com/cl/js/114v1

23.22.126.183

200 OK

3270

URL HTTP/2

downloadlocked.com/cl/js/114v1
IP

23.22.126.183:0
ASN

#14618 AMAZON-AES

Magic

data

Size

3270
Hash

98c68ef13d68ec4bb26df24ca5dbb696

c18d33171d9672228888f4b90112e5988a157a74

ba6938d7a12f7a607287fafb2f173791de9b7e09dd503ff05aa9be57215ad9d0

HTTP Headers

                                        GET /cl/js/114v1 HTTP/1.1
Host: downloadlocked.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gaminghelper.co/
Cookie: XSRF-TOKEN=eyJpdiI6IkU0cFlLK00yNjl5b1dFYzQyZWhRaHc9PSIsInZhbHVlIjoiek9VU2ViRFdRTG9JQkx1N2hQWTRlT2Y2NDREUkRNN0xpTmhhRmp3ZEJRVG0xVXY1NXVHaS9HdEpXYVY1V1VzZUdmalpzU2ZVOEhiNFBQa2g0SzJTaVphSnZMeHlnNnFVTlBjdkxWWXdYWko2UVpnWk4xWVk0d1JWZklIQ0hPZmMiLCJtYWMiOiJlMzQyOGIzZTQ1MmE0NzczMjI2MjJkYjJjZWVmM2FjZThhNjNmYzFhNjEyNmFlNDc0ZjUxZGZhODFmMzQyOGM3IiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6IlVTYUVlQ3Z1QldHdFFCMWwvVjlJUVE9PSIsInZhbHVlIjoiMTFZR0ZQUHZtcmRrMHkzMFU0NWl6QXhCYUFpOE5iRDBldXdMcXVQeTVWYnVDc0F2a0YyZ1dDeGYxZ0FjdFBPOFFkakRyRjVzdjlkSSt1bGthUGNoS2NHcTl2UFBrU0hjbnRwNkJKcHlVcE9oREFCdUpMS3h6VFNsTHhub0tTM08iLCJtYWMiOiI1Mzg3N2RmZDBiZmExODFiNTQ5MDllM2ZlNGY0OGY2YmU2MjU1MTVkNzU4MjI2YzQzYjc2YjQ4NDhmNjQ2ZWVmIiwidGFnIjoiIn0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Fri, 16 Dec 2022 07:12:24 GMT
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, private
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
x-robots-tag: none
set-cookie: XSRF-TOKEN=eyJpdiI6IlVZRWhvemdjUzhMeVVQZkY0VjlablE9PSIsInZhbHVlIjoiRTZCUFNEem0vRW1HQmt6ZzQxYjlFVE9Ib0lSUXhFLzJnYUhVeU1MVldobmxiaUdOZnA5ak5NQ1o3NTkwNkFhQUt1OVVOamYyOWZ3U2Qrakw0UnRxV2QvbE1QUXRRa01ybmZxa25ZZkc2WjJnRGNpZHNJMWg4RTN3VW9Uc1A3NlkiLCJtYWMiOiIxY2M0YjZiNDFkMThjZGQ0ZTE0YTJjZTVkOGZkOTk5MmFmOGQyYThlNzI4MWU2ODVjOTY5ODU0MzkxZmMwNjYzIiwidGFnIjoiIn0%3D; expires=Sat, 17 Dec 2022 03:12:24 GMT; Max-Age=72000; path=/; secure; samesite=none
ogads_session=eyJpdiI6IlNXbUNvMzhtNC9TUEVFS1RjUHhHM1E9PSIsInZhbHVlIjoiZEZTSGpKa29ySnNhdlZDZnJ4eUIzK243anBSWU5qMFpQc0paZUtOeDQrNndTTElIMjVhWjMyUCtGNENDN0VVOGdWeEZEd3RIQ1RSL2dUQ2dYVlpyc29lYm1vUUtIV2M0dDdndjdtZlZ6SUJBNUh1T3JaSVcwcjlBUlN6YjVpdkgiLCJtYWMiOiIyYmYyNzIxNWMwMjBkZmJmZDc5NDRiNjA3YWU1NWEyNDViMDk0NTU1YmY4YWMzNTQ0ZDI5ZTVkMmQ3NzlhNDY4IiwidGFnIjoiIn0%3D; expires=Sat, 17 Dec 2022 03:12:24 GMT; Max-Age=72000; path=/; secure; httponly; samesite=none
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: DENY, nosniff
X-Firefox-Spdy: h2

is1-ssl.mzstatic.com/image/thumb/Purple122/v4/9b/ac/11/9bac11ba-0ca7-a097-9c52-b47dcaf27748/AppIcon-1x_U007emarketing-0-7-0-0-85-220.png/150x150bb.jpg

23.38.200.24

200 OK

12213

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (20)

#1 JS:Script (size: 2799)

#2 JS:Script (size: 3761)

#3 JS:Script (size: 1469)

#4 JS:Script (size: 0)

#5 JS:Script (size: 22015)

#6 JS:Script (size: 424)

#7 JS:Script (size: 17946)

#8 JS:Script (size: 21143)

#9 JS:Script (size: 84380)

#10 JS:Script (size: 41099)

#11 JS:Script (size: 536)

#12 JS:Script (size: 11440)

#13 JS:Script (size: 20305)

#14 JS:Script (size: 76760)

#15 JS:Script (size: 134)

#16 JS:Script (size: 51)

#17 JS:Script (size: 6778)

#18 JS:Script (size: 200104)

#19 JS:Script (size: 211667)

#20 JS:Script (size: 6055)

HTTP Transactions (88)

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

Magic

Size

Hash

HTTP Headers