firefox.settings.services.mozilla.com/v1/
143.204.55.115200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 12:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zEWZzWm1nvVAbwaip2O6PZmavY36ukxhECHiwTmbCnpXITfQSmRDrg==
Age: 1564
generadprdrrobux.blogspot.com.ar/
142.250.74.161302 Moved Temporarily 183 B URL HTTP/1.1 generadprdrrobux.blogspot.com.ar/
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 50880768785e9c857fb004a557fac489
ba060778fa4f6324caee26ecb08a2a065601e47c
9a0af08d797f440ad34de833d8de7b43bd472d8cdf88242171bd68f646b17ee3
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: generadprdrrobux.blogspot.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://generadprdrrobux.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 26 Sep 2022 12:41:22 GMT
Expires: Mon, 26 Sep 2022 12:41:22 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 183
Server: GSE
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2900
Expires: Mon, 26 Sep 2022 13:29:42 GMT
Date: Mon, 26 Sep 2022 12:41:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Lcfp-4mdG7lt0lfJVnEBHG_XtPv5iz2OEXGqzcScMy3FNmYZuMFbFA==
age: 29167
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 12:41:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.115200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.115:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 12:10:46 GMT
Expires: Mon, 26 Sep 2022 12:20:40 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tP6Ty9gFY_kzmBcVvneoL3Vkt7MwK8Aa_KQ-2SyoYIwgQR_QqlYthg==
Age: 1837
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5747
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:23 GMT
Last-Modified: Mon, 26 Sep 2022 11:05:36 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
generadprdrrobux.blogspot.com/
142.250.74.161301 Moved Permanently 182 B URL HTTP/1.1 generadprdrrobux.blogspot.com/
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9824b3b9d77b9df2f6beb6a5546dba9e
40742c5aa6a802e0d9d6a1aa66bd443650dfb6bc
c1b1caa29129c4a092ddc25e04dac8c7ab3d91c8b53ffcafa6f2ec404aa7f7a9
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: generadprdrrobux.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://generadprdrrobux.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 26 Sep 2022 12:41:23 GMT
Expires: Mon, 26 Sep 2022 12:41:23 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 182
Server: GSE
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
54.70.239.215101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.70.239.215:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CdNXtCT+/bOXzaV2wtaR5g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aDdImwauNDd/LTvShuB66X6EI4M=
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
generadprdrrobux.blogspot.com/
142.250.74.161200 OK 28 kB URL HTTP/2 generadprdrrobux.blogspot.com/
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2298)
Hash 0308c3c0b35de0edf9717028b0414acf
76601eab8c3fdc815aebd3090df490cb055b4c42
7315470a2c61c8cbef5087bec8c6b6e7e90d2b1778a00a1c5db845e38ef31c90
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: generadprdrrobux.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 26 Sep 2022 12:41:24 GMT
date: Mon, 26 Sep 2022 12:41:24 GMT
cache-control: private, max-age=0
last-modified: Sun, 25 Sep 2022 21:56:01 GMT
etag: W/"f67ded8ec1a49cf948339e9234cfadb6eed15fc4731e9aa96eb97f23c5299923"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 28535
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/4150139458-widgets.js
216.58.207.201200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/4150139458-widgets.js
IP 216.58.207.201:0
File type ASCII text, with very long lines (2221)
Hash b318be2224a9b91139a7a4b41f2e4b6e
4bcae447ce5bb3cb36a74745bcca9b72ba419c9f
bc5c92978c40e36f3da25045761d139de3a8a333c5290ccd233273af73bd7f4b
GET /static/v1/widgets/4150139458-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://generadprdrrobux.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56826
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 15:56:30 GMT
expires: Mon, 25 Sep 2023 15:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 08:50:22 GMT
content-type: text/javascript
age: 74694
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:400,700
142.250.74.10200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,700
IP 142.250.74.10:0
Hash 977610a00b48206185e03230e49bab03
194c95797c7d98fb9bf6475347ad8276219ff273
f622ad09c214f0688e53d67fc0c53ac4e3c1b501e1e78b815cd2fd81668ed494
GET /css?family=Roboto:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://generadprdrrobux.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Sep 2022 12:41:24 GMT
date: Mon, 26 Sep 2022 12:41:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
142.250.74.3200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP 142.250.74.3:0
Hash 245fa9b453a885aab591773a075a448b
c17fe4a468f357240323a22613f767fa10929499
a648446b50d012257e03653a6ed7260a6e22de91cda03d0d4cd7402480c020e9
POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:24 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.robuxtip.org/images/gamebaglogo.png
104.21.78.103200 OK 3.3 kB URL HTTP/2 play.robuxtip.org/images/gamebaglogo.png
IP 104.21.78.103:0
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f
GET /images/gamebaglogo.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X92vjT4zumTCCOsEPFavf4Yy1ulEdk5itxebKAwWUKcCoFt1wZEzuzGsZEk82HBKOjPxKSE89VjWDMz9sxNRkb%2FFDudlJMATprRhpVzO6LtQvdBs1a14z8v1q0jTReD1s%2BMMRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac730b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/ft-1.png
104.21.78.103200 OK 3.3 kB URL HTTP/2 play.robuxtip.org/images/ft-1.png
IP 104.21.78.103:0
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f
GET /images/ft-1.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iIq%2FNBzmAmELIrBFnBi%2BW3F3KLXYy4Rg5%2FiSLWq0QcD4rvNFOLg79w2d%2F2v0ZgDkgosZAJRCQ8iNSyk2i7qDGYWomW08ZZdtRakoTSlvhX7L3WsgVVj9sWGcdf9WdMv2PTzBqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac7a0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/header.png
104.21.78.103200 OK 131 kB URL HTTP/2 play.robuxtip.org/images/header.png
IP 104.21.78.103:0
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 131 kB (131285 bytes)
Hash 35e93538f31d67876a2cb38bf94279d8
49bf97732e9bffb5371ad60d024901b09d83651b
95c1de9315834de2ff3608a2dc048a6aedc273e665f9b54eb956523a81fc91df
GET /images/header.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: image/png
content-length: 131285
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-200d5"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GlaVwbxpQ2Ns2zayk61ic7Liezc2EkMtJ0JmULZldY8rtTGcJFumLquYMZuXg%2FimwMObiNNPjZSsL6WQS6bgtdYbOphj5t%2FdgyQXyb%2BGP3t1BW9RPqymJJtKhyRsMJb9ceGSHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac780b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
104.17.25.14200 OK 1.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
IP 104.17.25.14:0
File type ASCII text, with very long lines (3201), with no line terminators
Hash 8e09ceb5490863a66cd2e83ca3d7e524
35e3d074516ec70c508d748f7ae01827bc0c28ba
cccbb374fd4cb6dcbac9df64456b49cb11530e7bafdac6c6c7e67ff2ed350db9
GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css; charset=utf-8
content-length: 1541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-c81"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9637455
expires: Sat, 16 Sep 2023 12:41:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jI6VCPAJakxI73JVXEhACj31a0t9BzFJJyzstGV10mYfukIb8DnTFqtuC1y38V4jkn%2Fpc90T3hDu%2FPE13ClZeawbVW%2Bj45ododniw2bvWBLjdhBmW5Uy6cnt1z1aISFNOBFWqh%2BJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 750c12dbece2b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/form-scripts.js
104.21.78.103200 OK 1.9 kB URL HTTP/2 play.robuxtip.org/images/form-scripts.js
IP 104.21.78.103:0
File type ASCII text, with very long lines (516)
Hash 64bab603ee1dd65854bc038abfbfe96d
2c661e7637c48edf607590e5435f0470c68b11f8
c487bb68d885034590326ed025cf58c37f9d660d9a6bfb9a0e2d4927132f8c90
Analyzer Verdict Alert fortinet Phishing
GET /images/form-scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1469
etag: W/"5d9ca488-5bd"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BU9R%2BWKreAgxcKGDrfb7WFUtAPBNAynhsqsN3hmUlkxJgvckbHtMoB5yqaIiLQhd75oDtL%2Bk6We%2F9TPiP2ECTNXC2laB8mmijFvad4C%2BAiWHrJe3rNlVcyZ%2Fnqx%2Fexx4SSHTLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbbc880b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19711
Expires: Mon, 26 Sep 2022 18:09:56 GMT
Date: Mon, 26 Sep 2022 12:41:25 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
142.250.74.3200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP 142.250.74.3:0
Hash 245fa9b453a885aab591773a075a448b
c17fe4a468f357240323a22613f767fa10929499
a648446b50d012257e03653a6ed7260a6e22de91cda03d0d4cd7402480c020e9
POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:25 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 639785692dc29802e484e1e1d0ec86c4
cf81784351ce6302f540f491f893b44496809677
0e47d6e33fe9f6e588d308b62fa059c960a000c56651713e30baf6cd09b7de41
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E47D6E33FE9F6E588D308B62FA059C960A000C56651713E30BAF6CD09B7DE41"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19711
Expires: Mon, 26 Sep 2022 18:09:56 GMT
Date: Mon, 26 Sep 2022 12:41:25 GMT
Connection: keep-alive
play.robuxtip.org/images/jquery.countto.js
104.21.78.103200 OK 13 kB URL HTTP/2 play.robuxtip.org/images/jquery.countto.js
IP 104.21.78.103:0
File type ASCII text, with very long lines (1043)
Hash c1a3b88189507e4c7db2c23dd162dcad
422d410984f220fe516dcea0cab276110eb709c4
9f4c4bcbafe23a6205ee6ea61e91ef9d920e392a77cb5d519f7575c199c006c1
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery.countto.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3761
etag: W/"5d9ca488-eb1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=55z7wa0UoS%2F4g1%2Boazii8HRMHRxbbO5RIolVu9XM4nuMWSic90t8MHpyhKgJbAC4g5GqJX8Qq9YvbVv7NQIvSwm4JS0ucdnomxOMJrUqN%2BZAAgq%2B7JfHfcBD9%2BpoMS1XiXQkbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac800b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/sweetalert2.min.js
104.21.78.103200 OK 16 kB URL HTTP/2 play.robuxtip.org/images/sweetalert2.min.js
IP 104.21.78.103:0
File type ASCII text, with very long lines (20305), with no line terminators
Hash 80e30b4ab8a896cab0dc7a01fd9dab6c
5cde7df60beb3f9a7aab143a3b889b51bd5426ca
e6b2c35dbc8e7a4553c89a4475a0e1d7e6fe122b3f70f057b041dda9e9b04d67
Analyzer Verdict Alert fortinet Phishing
GET /images/sweetalert2.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-4f51"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RR9APS2dL%2B8WGqzE6HfzAI4%2BZBkHctPfY7SHe%2FewTT3pONF%2B18q%2F4Px4P8MLYVq%2FqmcSYYNVUb3MjISbpEU6NZool3jkqE0rd0Ps5xG8re4%2FaPKfb96oPXngpfxkh0VOz05NmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac810b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/validator.min.js
104.21.78.103200 OK 7.2 kB URL HTTP/2 play.robuxtip.org/images/validator.min.js
IP 104.21.78.103:0
File type ASCII text, with very long lines (5862)
Hash a51120bf449f519460a1dbfb3c73352a
7005e5c3cd9a3e14fd58ab9c27b4e21aa1c4b0a3
c05bc34df4d43fd8dccb2e659c822469cde15f3146ef4e349056373c0c0c91f1
Analyzer Verdict Alert fortinet Phishing
GET /images/validator.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-17a7"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=68sRaKaPwdLivg4YQTms5KxBjNtNAZ%2Ffg8O68Jy3cBbVG1iBWDb4KuuyeIPSIlyAsGVsjokq3rM6ZXUnvQLLORCnLP0iGXkapBdWO1JA6GYYqc3AEMTOtdF%2FK%2F34y%2BzJSJDimw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac820b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/jquery.magnific-popup.min.js
104.21.78.103200 OK 16 kB URL HTTP/2 play.robuxtip.org/images/jquery.magnific-popup.min.js
IP 104.21.78.103:0
File type ASCII text, with very long lines (21014)
Hash e79a76c962768d6148090917ba568c35
086644388fa2f6872fee21220c150200d3f36fc1
74c7752b30cc189d4248e1e89ca7ea0d5421294767ed31e9d0178e05a6104a1b
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery.magnific-popup.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-5297"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3nLHK8IyCiXLieqQrFf5dFhdCIZJIeRn35NL77uU78X5QMX%2BDWzSrChYiLMIhGjJQ1ev3Ur84SJkO1Yt7PB7QKhMEKm4rsiVlGJhQDeeCm3cJy7c9En9pHnp15b%2FOc0yvFa13A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbdcab0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/scripts.js
104.21.78.103200 OK 8.8 kB URL HTTP/2 play.robuxtip.org/images/scripts.js
IP 104.21.78.103:0
File type ASCII text, with no line terminators
Hash ecfc9866e151ef08541fbc60955fbe14
2af317f257027aa1b5c24809c47430c86409f7a9
e616ce7e3e666dcbd5515df93ed52253f6fef3060d5521ed3129c0f520a88432
Analyzer Verdict Alert fortinet Phishing
GET /images/scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=225
etag: W/"5d9ca488-e1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 307077
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qxOIfOgmXvvPpOOOIFUddX%2FJCaYBFWzSfJVfeoF%2BNVUartSIx4wQBGWE8dsGhDF7alH2BJ7hlB8b0hdjJ4ZTK6fCeFEkF%2FoQ7Ja2B3hELLZRsgeBWyTDykZsXnKmxDQCMPugZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbecbf0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/com.js
104.21.78.103200 OK 16 kB URL HTTP/2 play.robuxtip.org/images/com.js
IP 104.21.78.103:0
File type C source, Unicode text, UTF-8 text, with very long lines (15173), with no line terminators
Hash 32711125ad6b938f814e0c023a70647d
334bcc497dd85a17254ef78332c2ac2400e89fd5
6fba2120f554e0d9ca5b8548dc6d19540948f981f89a67c033390d0084a7ff1b
Analyzer Verdict Alert fortinet Phishing
GET /images/com.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=17963
etag: W/"5d9ca488-462b"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F6UvItxHvvhguTeQLwqgyF6DZK7iMCNO8FZgpytcYtmKG8HhxxY9D1xRh1Axwdv87jI6R6F%2FLzP%2FlLzcuil8E6xDXfJ%2Fs7YCyy7PPZZp3lguVJQOiKWme1eF2TOy0KYS5xT5ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbbc840b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/main.js
104.21.78.103200 OK 18 kB URL HTTP/2 play.robuxtip.org/images/main.js
IP 104.21.78.103:0
File type ASCII text, with very long lines (24637)
Hash fe358f2f1eab97894e26b82b67ed05fe
d969c53a7eafc9aac9232a51f73bbba786601d10
42101ef7051214443f39a27db94f4e76b26d38342fe94795b305c3dd5bf0999a
Analyzer Verdict Alert fortinet Phishing
GET /images/main.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=38451
etag: W/"5d9ca488-9633"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gO8ZeKYt7Tp1OiAc2vAD2lpq62kmO9vvs%2BsahEXhNyY%2BQqas%2FyF%2BYXPOijd%2FZPTKdBL%2BTmhwYiYdEodZPyjUsU9Z30wchUXfkpQju8q57gSOrw%2Fsa8OY9iVApLBaVQp49nP5gA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbecbe0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/jquery-3.2.1.js
104.21.78.103200 OK 96 kB URL HTTP/2 play.robuxtip.org/images/jquery-3.2.1.js
IP 104.21.78.103:0
File type ASCII text, with very long lines (1237)
Hash 200489053066c4d35b9c765d61c0136d
6036d63cfe60babc72215b5d67db41862deea2b0
a24160b8dc242a8a219b5a030dd714d4b4d96ab0d1864b46175a3d1f73c8a6ee
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery-3.2.1.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=268039
etag: W/"5d9ca488-41707"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KS7YgRm8Fmrth4Dkbx%2Fl9YQzYUXJmsgA3Sjwe5WqhIou7qmCwrWDbDsIvIuZGsMKsm5PxKRMmTbyg8OnL3Bow2OX29rmZ%2B8fi%2BLsbFyswqtTXWrdhaX%2FAkWVWAhgw16jyQWc8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac7b0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash bddecffbabfee51d9960094502eac272
d686a32447a5cab561a0d3272f313e7a9cf01eb7
a57a4fe0e0ce9c4cbd59312ec9b7aa9264ae2cc187beae1a265f031a71f5a52f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5986
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:25 GMT
Last-Modified: Mon, 26 Sep 2022 11:01:39 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 12:41:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.robuxtip.org/images/magnific-popup.css
104.21.78.103200 OK 5.0 kB URL HTTP/2 play.robuxtip.org/images/magnific-popup.css
IP 104.21.78.103:0
File type ASCII text, with very long lines (6066), with no line terminators
Hash a4d98eca0c49060161ce0fba09faa73f
a869e2da0e825e494972da71f42b9045ee96550e
754c937fc04a95f95f35be6506b4111f384bb526546a1784f23a1db0d17bf162
GET /images/magnific-popup.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7946
etag: W/"5d9ca488-1f0a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kVH1L6A6TXi2PROxPSZKAPO9h4r%2FJUyjNsL%2B%2Fy1y6wVKGANvuKHdzVu4qSltXX3LPncCCv9aEcINKa2FjQVkCasPQ%2BhJ%2F%2Bb0m0QL5N6%2F%2Ff2hQo3BEvNWbFS4OHJPypxRBkB9bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db9c640b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d60144b96f72539719011cc71dcaa7c2
02a0962fe84b3466d77542f7b1b42a9efcc84479
814e75d1f248cd7bdc505fabec42b103880ed89329940be06d039b84d1f1b95f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "814E75D1F248CD7BDC505FABEC42B103880ED89329940BE06D039B84D1F1B95F"
Last-Modified: Sat, 24 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19144
Expires: Mon, 26 Sep 2022 18:00:29 GMT
Date: Mon, 26 Sep 2022 12:41:25 GMT
Connection: keep-alive
play.robuxtip.org/images/fancyselect.css
104.21.78.103200 OK 5.2 kB URL HTTP/2 play.robuxtip.org/images/fancyselect.css
IP 104.21.78.103:0
File type ASCII text, with very long lines (3595), with no line terminators
Hash b2ad74ac850bfa3d9b634214a5677675
b5b5890e6caa64084385f670fa52824434cba0a3
59b59ae34d5e7083baeb4901d9478b8230d42ad76113a2a59a22ee90ced0935e
GET /images/fancyselect.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4253
etag: W/"5d9ca488-109d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aTr06ZGSw7noK%2Ff3QLy36kGYxl%2B20zV3EmaRL%2BpJHEeK7VYwtRl3KlNzcwZFHUNoZQRdcun7%2F9NX9A3ofgBZmgU005NVb1zMc43TxKxeaAOKR8HsEojqBlrPx9emHC%2FumLAqxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db9c6b0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s4.histats.com/stats/0.php?4275781&@f16&@g0&@h2&@i1&@j1664196083701&@k27820&@l2&@mRoblox%20Robux%20Generator%202022&@n0roblox-crn.js=rinaevanigmailcom|template=PinkTong.xml|rinaevanigmailcom=generadprdrrobux.blogspot.com|generadprdrrobux.blogspot.com=direct|ref=direct|tags=roblox-crn.js&@ohttps%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-92401528&@b3:1664196084&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0&@w
192.99.8.34200 OK 52 B URL HTTP/1.1 s4.histats.com/stats/0.php?4275781&@f16&@g0&@h2&@i1&@j1664196083701&@k27820&@l2&@mRoblox%20Robux%20Generator%202022&@n0roblox-crn.js=rinaevanigmailcom|template=PinkTong.xml|rinaevanigmailcom=generadprdrrobux.blogspot.com|generadprdrrobux.blogspot.com=direct|ref=direct|tags=roblox-crn.js&@ohttps%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-92401528&@b3:1664196084&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0&@w
IP 192.99.8.34:0
File type ASCII text, with no line terminators
Hash 174b639c3885de502f0c277eefee6a8d
21bacbb7746f207394f3368361b44f884ff9962f
96d9dd6669a5a119b924044bda8bcd347eadf4001022a65e31b76d9664cde072
GET /stats/0.php?4275781&@f16&@g0&@h2&@i1&@j1664196083701&@k27820&@l2&@mRoblox%20Robux%20Generator%202022&@n0roblox-crn.js=rinaevanigmailcom|template=PinkTong.xml|rinaevanigmailcom=generadprdrrobux.blogspot.com|generadprdrrobux.blogspot.com=direct|ref=direct|tags=roblox-crn.js&@ohttps%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-92401528&@b3:1664196084&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 12:41:25 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 52
Connection: close
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
34.120.237.76200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef17205adb2b478d3bff54b048208d22
12aac1bd22e675f09a220de08b4656e801c2e647
620fe39cf421ed3a21e968570f7e863d69224113be867ec2457ed3850ea113f6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3689ec8-63b4-42ae-b7d5-a9b4b63af788.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5980
x-amzn-requestid: fbf0c390-da24-49e2-8492-43e29e5d4bb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHCGJVoAMFgxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc6-1f9b1b7d63467c58702e6d7e;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:38 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Iy0oyFx_T6CEuOQckEzvUQOUo307Jm_OgJzomWlMz9BhgD3eOaysdA==
via: 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:48:52 GMT
age: 53559
etag: "12aac1bd22e675f09a220de08b4656e801c2e647"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
IP 104.21.78.103:0
GET /images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700 HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=773
etag: W/"5d9ca488-305"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JoAQntppuDDiP%2BjkTVfTjoYdBMTIy94ix7PcLIpQVA3uaRL8DCvXXaeB3Zu%2Fz5l6%2B0R6VuSuwXvF3u%2F6HVfNRVp94RByXDRde53HZpbqy51bQEEectnjMKA4Xz3SMNJzxNGgYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db7c3f0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/jquery-ui.min.js
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/jquery-ui.min.js
IP 104.21.78.103:0
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery-ui.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-30da8"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wGAMBCHX1FuFnDQdy%2BwtWMtdSrtAw%2BMWhn2ugoYSvBhXZN2EEmLznta2htmvo7e2fJcPXFgOC4015RPXwYI85s7yn8n0RKkACB%2BYWcP8ZMT7nC6EXyK9od1Owg%2FS4LkU6Ir7UQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac7d0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/bootstrap.min.css
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/bootstrap.min.css
IP 104.21.78.103:0
GET /images/bootstrap.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-1d990"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9efyD6fhq3imcwg8Inr4UsSNsTh2ExR5sC8YPc6zvvheU%2FKgbTfUv0x0cWzX47aVxWOuNTjHUTKiLzDWDY%2F4MbnPt%2F%2Ff9nxv%2FOr8rSEG%2BRRNEUSnpm5Vone1E940jfBdPGKjKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db8c4a0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/sweetalert2.min.css
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/sweetalert2.min.css
IP 104.21.78.103:0
GET /images/sweetalert2.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-36a4"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Nf%2FDp7TCwCgSBy%2BDXxxpdvcD0Xyj%2BrKd%2FjKT%2BGKKazswRH1riaiFkY6dPMPyI37%2FZez2HlQ4Wgdr7lHeVczbf%2FnhH%2BpNnH4I8Bkwq5OKVKxpsoZO77jI4460oq9PoCf1pyvxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db9c5e0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/style.css
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/style.css
IP 104.21.78.103:0
GET /images/style.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=50839
etag: W/"5d9ca488-c697"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JVCWZVuGX%2Bjqdgn6qnkfTmHg589FUcE0GBQTN9ESO7pdCBL3LlsdvK0oEISxX9Tg7LAgHMQS531TLWAcJlzmxUkXMVRAc3ueiJYI6achojYiy9JBzPe0MaLmgcpcp0Ix%2Fvo8qw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db9c6c0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/fancyselect.js
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/fancyselect.js
IP 104.21.78.103:0
Analyzer Verdict Alert fortinet Phishing
GET /images/fancyselect.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6778
etag: W/"5d9ca488-1a7a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AnsOeTNPJsKwKeB%2F8%2FSYF8a2MN9mDcB7tTa8vs4qgE07DU30uk7W81IYyo4%2BpJLsqkvQiXt0L0SBBTRj43a5gmY5xYe789bbBNR0DG5BpgWzJzjIaTNNH8Y0B0JtX4esyoQGyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbac7e0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
IP 104.21.78.103:0
Analyzer Verdict Alert fortinet Phishing
GET /index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0 HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://generadprdrrobux.blogspot.com/
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:24 GMT
content-type: text/html
last-modified: Mon, 27 Jun 2022 12:44:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 24785
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cLq5HHn8EFg02oQeMZpmw3tbxXy9TclRNWvV8EBfUOXGn0bmWivSdPLcCuDNB8jAW3BM7hM%2B5NJQl5CSWeUzn8oZmltifit0J3ILr0nymI4wqcTj88bjbfVkhvMoAdLyzPOcbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db1bc40b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/font-awesome.min.css
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/font-awesome.min.css
IP 104.21.78.103:0
GET /images/font-awesome.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-6c3d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TmJa6asM2WvAExwoCPqj0%2FR6TF7xXEIBvrJ3PzSuAOx%2Fe1PU%2FOQm5g2rYjePn%2FB0MhLeh8Y4gtJCVXbC0kP3npF1rOoeaC%2F%2BMgBRMRaT9VMWUv9fCRJvdFI6I3rDpvD8rJj%2Fxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db8c470b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/sticky.js
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/sticky.js
IP 104.21.78.103:0
Analyzer Verdict Alert fortinet Phishing
GET /images/sticky.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=20845
etag: W/"5d9ca488-516d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GPI8JGaEkTrlHIhqOZqe3vIhXBcV%2FFgKceJPF4HyUH1y7wkFdF7lGJOAv2fB6AiHrlaPj7zqNK3QyGhH9H0uANBDoTscJhZJvvb4pixqJbrw6Qx66xpnxQozfnfZuLxf%2B%2Bb5ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12dbecbc0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mtevor.com/cluster-v2/roblox-crn.js
172.96.187.226200 OK 0 B URL HTTP/2 mtevor.com/cluster-v2/roblox-crn.js
IP 172.96.187.226:0
GET /cluster-v2/roblox-crn.js HTTP/1.1
Host: mtevor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://generadprdrrobux.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: PHP/5.6.40
content-type: application/javascript
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 12:41:24 GMT
server: LiteSpeed
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
play.robuxtip.org/images/animate.css
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/animate.css
IP 104.21.78.103:0
GET /images/animate.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=68796
etag: W/"5d9ca488-10cbc"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kKGZzda8MFgPDZwf2XW2u2E42CyZteY6l1gyDvPyV2NXOErqohCJYKgE%2Fqj5eAGpC6yhIprYhpbUj12gw0%2BjFQ1ijXydMHASlDWGqL82iI0cEdP3GUeR8%2FI99p2hEZHXK5Z0nA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db8c4c0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/custom-css.css
104.21.78.103200 OK 0 B URL HTTP/2 play.robuxtip.org/images/custom-css.css
IP 104.21.78.103:0
GET /images/custom-css.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlBpbmtUb25nLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZ2VuZXJhZHByZHJyb2J1eC5ibG9nc3BvdC5jb20iLCJnZW5lcmFkcHJkcnJvYnV4LmJsb2dzcG90LmNvbSIsImRpcmVjdCIsInJlZiIsImRpcmVjdCIsInRhZ3MiLCJyb2Jsb3gtY3JuLmpzIl0
Cookie: username1Cookie=Marilena; username2Cookie=Giselda Capon; username3Cookie=Sam; comment1Cookie=WOW.. thank you so much! c: amazing tool bro. thanks you so much for sharing this !; comment2Cookie=Wow =3 this is legit website amazing job admin… thank you for sharing 1000000 Clash Royale Gems!; comment3Cookie=amazing job admin… thank you for sharing 1000000 Clash Royale Gems.. :3 i wonder why this wasn’t on the news. this is stunning tool! ..; HstCfa4275781=1664196055881; HstCla4275781=1664196055881; HstCmu4275781=1664196055881; HstPn4275781=1; HstPt4275781=1; HstCnv4275781=1; HstCns4275781=1; c_ref_4275781=https%3A%2F%2Frobloxrobuxgeneratorhackworking.blogspot.com%2F; timePosted11Cookie=57418; timePosted22Cookie=55017; timePosted33Cookie=19825
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 12:41:25 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1790
etag: W/"5d9ca488-6fe"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 793477
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yeL8HxQUsAT7V%2F1t7I%2FOIddtR%2B07SoTntIaOvUAIGdYM6NbsKfuhoDaZE3x4mmeuSbNkj%2F%2FShD4eDnyOOcSnGEybeQboiSBbCMbbOSIWBWzSm7g21ir6MrO9y87AtzNNxjGO9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 750c12db9c720b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2