WEBSITE ANALYSIS REPORT

http://www.is.gd/8YBrSj/

21 Mar 2026 · 12:27:59.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:27:31.443 GET 301 document 0 B 0 ms —

12:27:31.982 GET 200 document 91.5 KB 407 ms 5 alerts

12:27:32.658 GET 200 stylesheet 116.0 KB 113 ms —

12:27:32.663 GET 200 stylesheet 1.10 MB 124 ms —

12:27:32.666 GET 200 stylesheet 36.4 KB 124 ms —

12:27:32.671 GET 200 stylesheet 852 B 126 ms —

12:27:32.674 GET 200 stylesheet 249 B 129 ms —

12:27:32.680 GET 200 stylesheet 2.5 KB 134 ms —

12:27:32.684 GET 200 stylesheet 25.7 KB 32 ms —

12:27:32.687 GET 200 stylesheet 10.1 KB 23 ms —

12:27:32.690 GET 200 stylesheet 475 B 13 ms —

12:27:32.691 GET 200 stylesheet 12.8 KB 28 ms —

12:27:32.692 GET 200 stylesheet 288 B 16 ms —

12:27:32.694 GET 200 stylesheet 275.1 KB 42 ms —

12:27:32.696 GET 200 stylesheet 116.7 KB 36 ms —

12:27:32.698 GET 200 stylesheet 2.4 KB 52 ms —

12:27:32.700 GET 200 stylesheet 3.4 KB 45 ms —

12:27:32.702 GET 200 stylesheet 23.8 KB 249 ms —

12:27:32.705 GET 200 stylesheet 54.5 KB 248 ms —

12:27:32.706 GET 200 stylesheet 3.4 KB 46 ms —

12:27:32.707 GET 200 stylesheet 5.9 KB 52 ms —

12:27:32.709 GET 200 stylesheet 4.4 KB 44 ms —

12:27:32.716 GET 200 stylesheet 1.4 KB 44 ms —

12:27:32.717 GET 200 stylesheet 1.8 KB 49 ms —

12:27:32.719 GET 200 stylesheet 6.8 KB 46 ms —

12:27:32.720 GET 200 stylesheet 5.7 KB 49 ms —

12:27:32.721 GET 200 stylesheet 784 B 41 ms —

12:27:32.724 GET 200 stylesheet 1.1 KB 50 ms —

12:27:32.725 GET 200 stylesheet 3.8 KB 46 ms —

12:27:32.727 GET 200 stylesheet 1.3 KB 50 ms —

12:27:32.729 GET 200 stylesheet 2.1 KB 52 ms —

12:27:32.730 GET 200 stylesheet 7.9 KB 48 ms —

12:27:32.734 GET 200 stylesheet 270.6 KB 48 ms —

12:27:32.736 GET 200 stylesheet 171 B 43 ms —

12:27:32.738 GET 200 stylesheet 31.2 KB 46 ms —

12:27:32.740 GET 200 stylesheet 85 B 41 ms —

12:27:32.742 GET 200 script 8.7 KB 108 ms 5 alerts

Transaction #109

Request / response

URL

GET HTTPS

https://www.robiox.com.ps/js/EnvironmentUrls.js

IP / ASN

179.43.150.242

AS51852 · Private Layer INC

Requested by: https://www.robiox.com.ps/games/109983668079237/Steal-a-Brainrot?privateServerLinkCode=76359021426308649459873372350627

Resource information

File type: JavaScript source, ASCII text, with very long lines (4357), with CRLF line terminators
MIME type: text/javascript
First seen (UTC): 11 Jun 2025 · 11:19:18.801 UTC
Last seen (UTC): 13 Sep 2026 · 08:43:48.318 UTC
Times seen: 4387

Size: 8.7 KB (8955 bytes)
MD5: 36c7b9cc8cf44b7627f9acbc3a588bd7
SHA1: 23fad6afa9d35eb7244d141997043f122d2222ca
SHA256: 3229415fc51026ac12efa95fc32be4578af238405a7adb8a813e202d090e4b5f

Certificate information

Issuer: Let's Encrypt · E8
Subject: robiox.com.ps
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: EF:B7:B3:2D:FE:B9:B4:98:84:EF:7B:61:19:92:C1:28:AD:BB:F7:67
Valid from: Sat, 17 Jan 2026 03:46:46 GMT
Valid until: Fri, 17 Apr 2026 03:46:45 GMT

Technology fingerprints

OpenResty (Web servers)
Nginx (Web servers, Reverse proxies)
Plesk (Hosting panels)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /js/EnvironmentUrls.js HTTP/1.1
Host: www.robiox.com.ps
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.robiox.com.ps/games/109983668079237/Steal-a-Brainrot?privateServerLinkCode=76359021426308649459873372350627
Cookie: A2L0g1nC3ssto=1774096052
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: openresty
date: Sat, 21 Mar 2026 12:27:32 GMT
content-type: text/javascript
last-modified: Tue, 10 Jun 2025 15:15:34 GMT
etag: W/"68484c16-22fb"
alt-svc: h3=":443"; ma=86400
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

12:27:32.743 GET 200 script 144.2 KB 330 ms —

12:27:32.745 GET 200 script 209.2 KB 244 ms —

12:27:32.746 GET 200 script 4.5 KB 310 ms —

12:27:32.747 GET 200 script 6.4 KB 319 ms —

12:27:32.749 GET 200 script 103.5 KB 252 ms —

12:27:32.780 GET 200 script 252 B 380 ms —

12:27:32.781 GET 200 script 1.9 KB 232 ms —

12:27:32.783 GET 200 script 13.8 KB 27 ms —

12:27:32.808 GET 200 img 10.3 KB 91 ms —

12:27:32.810 GET 200 script 244.9 KB 76 ms —

12:27:32.833 GET 200 script 23.5 KB 33 ms —

12:27:32.835 GET 200 script 5.5 KB 29 ms —

12:27:32.838 GET 200 script 151.6 KB 59 ms —

http://www.is.gd/8YBrSj/

Domain graph

Hostnames

Connections