Report - freerobuxhacknohumanverificationyo4.blogspot.co.id/?m=1

Report Overview

Submitted URL
freerobuxhacknohumanverificationyo4.blogspot.co.id/?m=1
IP
142.250.74.161
ASN
#15169 GOOGLE
Submitted
2022-09-26 06:02:16
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.35
hablamosdegamers.com	513888	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	489 B	182 kB	188.40.3.204
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	1.9 kB	104.18.21.226
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
freerobuxhacknohumanverificationyo4.blogspot.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	842 B	19 kB	142.250.74.161
i.ytimg.com	109	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	156 kB	142.250.74.54
www.blogger.com	8975	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	411 B	58 kB	216.58.207.201
lh3.googleusercontent.com	66	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	30 kB	142.250.74.33
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	409 B	2.7 kB	104.17.25.14
s10.histats.com	15211	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	351 B	4.7 kB	46.105.201.240
freerobuxhacknohumanverificationyo4.blogspot.co.id	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	374 B	659 B	142.250.74.161
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	987 B	1.8 kB	93.184.220.29
pics.ballmemes.com	185707	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	469 B	35 kB	151.139.128.11
img.youtube.com	3087	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	427 B	10 kB	142.250.74.78
play.robuxtip.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	34 kB	290 kB	172.67.220.56
s4.histats.com	12782	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	182 B	192.99.8.28
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.35
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.77.32
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	35.161.6.128
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4.7 kB	9.8 kB	142.250.74.3
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.7 kB	82 kB	34.120.237.76
mtevor.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	391 B	518 B	172.96.187.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-26	medium	freerobuxhacknohumanverificationyo4.blogspot.co.id/?m=1	Phishing
2022-09-26	medium	freerobuxhacknohumanverificationyo4.blogspot.com/?m=1	Phishing
2022-09-26	medium	freerobuxhacknohumanverificationyo4.blogspot.com/?m=1	Phishing
2022-09-26	medium	play.robuxtip.org/images/validator.min.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/fancyselect.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery.countto.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/form-scripts.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/sticky.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/main.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery-3.2.1.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/scripts.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery-ui.min.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/sweetalert2.min.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/com.js	Phishing
2022-09-26	medium	play.robuxtip.org/images/jquery.magnific-popup.min.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (25)

	URL	Size	First Seen	Last Seen
	unknown	0 B	2023-03-07	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 13:58:57 Times Seen37092710 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	play.robuxtip.org/images/main.js	34 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/main.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen393 Hash b4a27b956eccd646f3bc2b2b2b6503c5 6df97b44c507a440a3c1dd6873b44fbc95e92fb1 948fe10b1ea0b581c4871ae90f94882ed8945bd19c9ce0352b20ac0467dc145a Loading...

	play.robuxtip.org/images/jquery.countto.js	2.4 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/jquery.countto.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:07 Times Seen206 Hash 2997f7484c171da3ffd1f9f7bf8b9056 be8d289c00db0f7c5975938a147181a772e0f6b6 0c3bb5ecb9b684b6efb1524648c7cf632511260270fa846369f27115ce269070 Loading...

	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd	622 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen199 Hash 7c5cdfb6321019cf9fd448815ff5db0d 88e72d5a1cbc98fb8abec7d7f271be3750f49ffd 247598654d9b470c026aef9f5ff263a7cb7ce6f9ebc3216c9b02809de308a6c6 Loading...

	s4.histats.com/stats/0.php?4275781&@f16&@g0&@h12&@i1&@j1664172126372&@k199258&@l12&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia\|template=Fastink.xml\|anisacintia=freerobuxhacknohumanverificationyo4.blogspot.com\|freerobuxhacknohumanverificationyo4.blogspot.com=direct\|ref=direct\|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:184342411&@b3:1664172126&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w	50 B	2023-03-08	2023-03-25
Pretty URL s4.histats.com/stats/0.php?4275781&@f16&@g0&@h12&@i1&@j1664172126372&@k199258&@l12&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia\|template=Fastink.xml\|anisacintia=freerobuxhacknohumanverificationyo4.blogspot.com\|freerobuxhacknohumanverificationyo4.blogspot.com=direct\|ref=direct\|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:184342411&@b3:1664172126&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w IP 192.99.8.28 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:31:16 Last Seen2023-03-25 23:23:37 Times Seen2 Hash 276278607e1e0ada5170578239d0263f fd3cbc01a2e4268ee36701a40811405220136273 8dfde32129c6e1766f583996023072d46d9bc4d82875f6fb5e83d3b8cfe77754 Loading...

	mtevor.com/cluster-v2/roblox-abs.js	9.6 kB	2023-03-07	2023-03-10
Pretty URL mtevor.com/cluster-v2/roblox-abs.js IP 172.96.187.226 ASN #32475 SINGLEHOP-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:13:10 Last Seen2023-03-10 15:03:21 Times Seen1 Hash 78f127abcffcaf7fa855581b2c3d7550 e9ed2dead43eb4b637f1fed0997db12b41eff1c2 296b12cabc5c02b2d588a1b7bdb53e90f10ff0cb6702f68d98767c88b4ee3b5a Loading...

	play.robuxtip.org/images/sweetalert2.min.js	20 kB	2023-03-07	2024-02-10
Pretty URL play.robuxtip.org/images/sweetalert2.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-02-10 04:05:40 Times Seen448 Hash 0ad69b0e70b7da1bb8f8a96e9e6b5d9a 7d21a0c1f43d3edb47dd9e69b05243f3fcb53152 4051f26691def4eafcae32928be110c13d1819e544a12b0a9b95378bfaf9859b Loading...

	play.robuxtip.org/images/sticky.js	20 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/sticky.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen395 Hash 1180d3ea8d2544bb6bec4dacb60526d2 d2788f5423575404112a66853e0f274960d743e0 bb88a49c99d278abff743baf1f0f492382031afd4212fb27b33a23068723f86e Loading...

	cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js	5.1 kB	2023-03-07	2024-02-26
Pretty URL cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-26 23:33:16 Times Seen286 Hash 5ca725d76acf5fc62e1e419e50031fd7 94c9b12c4d33f3f4e7b22a6f6e1420e5c90003c4 e3c6d1c8195fe393af47c014346ebdcd629556a6365ea1f5a671cd507f914ce1 Loading...

	play.robuxtip.org/images/scripts.js	196 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/scripts.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen378 Hash 30110b3852b1800156f09776b7f8abc3 b3016d5bcc5d32713d4841b7430e8a36a08f4d82 c7b5716b450a19a471d68d99302a1aefc97409ad09b5248b7493052fb515f9ef Loading...

	s10.histats.com/js15_as.js	11 kB	2023-03-07	2024-04-26
Pretty URL s10.histats.com/js15_as.js IP 46.105.201.240 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-26 09:23:14 Times Seen1981 Hash e959fbdd13def4b9a9d0a5fc9a7de4d4 1e39712307e3673b40c0bdb8c7d3e86a3e8b60a0 2defe59e357a7d0683c8283ac42841db404a0884cae2eaecebf4b676e559dede Loading...

	play.robuxtip.org/images/validator.min.js	6.1 kB	2023-03-07	2024-04-25
Pretty URL play.robuxtip.org/images/validator.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 19:43:11 Times Seen917 Hash 81df0465f243a2e7b7b06b8ad6015173 996eb26bb4bdb44ed5257d048cedaf3ed0a6f90c c31a654938abf168fca328d9663ea83999b87ff36d18b016ea8aace1a9cb2cb1 Loading...

	play.robuxtip.org/images/jquery.magnific-popup.min.js	21 kB	2023-03-07	2024-04-25
Pretty URL play.robuxtip.org/images/jquery.magnific-popup.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 21:53:59 Times Seen2407 Hash be3333626c57af03599abcb59b325e09 3824067348f6485d6b07d3a43660804e3731b21a ecbef0f33e8ccedd2c605816e052cfff778abcc0e30a80b874c097a5fddd24fc Loading...

	freerobuxhacknohumanverificationyo4.blogspot.com/?m=1	747 B	2023-03-07	2024-04-26
Pretty URL freerobuxhacknohumanverificationyo4.blogspot.com/?m=1 IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:43 Last Seen2024-04-26 10:31:37 Times Seen547 Hash ac52b0a29e5ac680b7865b61af620a46 145c28a01d16ac1524fa05aabb06ebdf0905c14b 4e7694a1a0f7e276972a91c8c590493abb7462ca33748abcbaecea50b8500b59 Loading...

	freerobuxhacknohumanverificationyo4.blogspot.com/?m=1	97 B	2023-03-07	2024-04-26
Pretty URL freerobuxhacknohumanverificationyo4.blogspot.com/?m=1 IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:43 Last Seen2024-04-26 10:31:37 Times Seen547 Hash d4d9ce85e4a6d09fcb4c430fd35e68a9 2d96d4131427e10863d4d6618c79b86040994cca 885ffb83483552bbcc30b8a3be70aba95138bb95adaf80312bf37f4d24d82cc3 Loading...

	freerobuxhacknohumanverificationyo4.blogspot.com/?m=1	333 B	2023-03-08	2023-03-08
Pretty URL freerobuxhacknohumanverificationyo4.blogspot.com/?m=1 IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:31:16 Last Seen2023-03-08 02:06:37 Times Seen1 Hash 3d8e01189c5a8eaeeb67bd8fa41da5e6 6a3f87b62537eda87549937059ec86574ca08fd8 f01fada8b360aa267c3ce1e47c821786382d67b5762f8e46bf711833572efc60 Loading...

	play.robuxtip.org/images/jquery-3.2.1.js	139 kB	2023-03-07	2023-10-31
Pretty URL play.robuxtip.org/images/jquery-3.2.1.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-10-31 00:50:02 Times Seen397 Hash 0b39dc8f94398407369f2c6f32042bac 8c4abc797c784a78061373a0aa078be14c7931b1 41f59ec5d59f17850334323c174baef773d00ed5bb48e3739d77bb41b3c59c00 Loading...

	play.robuxtip.org/images/jquery-ui.min.js	200 kB	2023-03-07	2024-03-22
Pretty URL play.robuxtip.org/images/jquery-ui.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:47 Last Seen2024-03-22 19:16:45 Times Seen485 Hash 234f1553c7d27cce512062c59800a9a8 b48e01c35c1e6ad622386b9a3161bd1bf02723c8 d87043ac816dbfadae73fcc32f84eadb9a665cf97ae938bea9702a27d3e9a54a Loading...

	play.robuxtip.org/images/com.js	15 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/com.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 04:24:01 Times Seen65 Hash 466cf8a36ac32eb927568e8c63d94f80 fbff8ca922aba7d561ba63cba4582026020fa76c 05b0cf64ba783827ded5c5dcd31e88670cf507a588d73371d304cb8c482ea39f Loading...

	play.robuxtip.org/images/fancyselect.js	4.6 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/fancyselect.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:07 Times Seen194 Hash fc20f6fcbceda58609e8ec93ed8972a6 346672aba10658ebe11580ff7fec4b70663c2e0f b92360cf3455f4f375b7c8cc3b601061686d92b9ffd4624004f420c9d09996d8 Loading...

	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd	325 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen199 Hash 5644d012be9e47b1ae7bf89c80633745 e0fe867b75dd9c9ac03056fd960eb91512808860 477c2e410825c537de3848a9b47bb422f9aea7328dac8fc7395b2f8aa9f8e51e Loading...

	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd	514 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen199 Hash 09933286614ed7eb9801cf06011a4c9d fa97803d9532c6922800b799c7e43039f003f33d 68d3e0ce6a8a98aa641fc113c014919e27ccff17a6c7f286cfc325693f730e09 Loading...

	freerobuxhacknohumanverificationyo4.blogspot.com/?m=1	57 B	2023-03-07	2024-04-26
Pretty URL freerobuxhacknohumanverificationyo4.blogspot.com/?m=1 IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:43 Last Seen2024-04-26 10:31:37 Times Seen547 Hash e9f96f342d6829882eaff88dfc72cf3c e8cd2af7fbf0a9eca7a78fdb94535c8528518b8b 3ba0207bf7175937b40c088b33c4a61f60f4ed764638cb878400639ea2809eca Loading...

	freerobuxhacknohumanverificationyo4.blogspot.com/js/cookienotice.js	6.5 kB	2023-03-07	2024-04-26
Pretty URL freerobuxhacknohumanverificationyo4.blogspot.com/js/cookienotice.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:24 Last Seen2024-04-26 11:40:27 Times Seen113841 Hash a705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568 Loading...

	play.robuxtip.org/images/form-scripts.js	1.0 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/form-scripts.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:06 Times Seen200 Hash 7d7a87d79b5343d3f04fed2cc2bef2e3 021cc4c45ce7872041b7af085a4cf13f423c01e8 7a05b1e911af071c10812d790155447a62d4445db99b2d43872202bfcaded5ae Loading...

HTTP Transactions (75)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 05:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tANkFLETRAakPdyyN7hcjwHRODqKG373pxOEUbb6ACGwI9bgDTfxBQ==
Age: 2807

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7269
Expires: Mon, 26 Sep 2022 08:03:14 GMT
Date: Mon, 26 Sep 2022 06:02:05 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: cp7bzkAsUze3qLAaC6h2b0GX_b2Hz_ZqxndjswB_jyeMrnEXYQoveg==
age: 5210
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 06:02:05 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

freerobuxhacknohumanverificationyo4.blogspot.co.id/?m=1

142.250.74.161

302 Moved Temporarily

201 B

URL HTTP/1.1
freerobuxhacknohumanverificationyo4.blogspot.co.id/?m=1
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
201 B (201 bytes)
Hash
4ecedbe49a504b084476a1195d2dd09d
4373a46478930833cac4bb5418da6b3f4ee88df8
d677bc83f1d4660a4bd827422bb15eea1e6a8eae27e9ce16504f9ed0935b421d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /?m=1 HTTP/1.1
Host: freerobuxhacknohumanverificationyo4.blogspot.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Moved Temporarily
Location: http://freerobuxhacknohumanverificationyo4.blogspot.com/?m=1
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 26 Sep 2022 06:02:05 GMT
Expires: Mon, 26 Sep 2022 06:02:05 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 201
Server: GSE

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 05:57:20 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Mon, 26 Sep 2022 05:22:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gLz2-bTHrijoSnEHbR2b2nPzsj_0bSJ6jsBQtO4h0LlMdD2qZIBILg==
Age: 3079

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fd3b36dc2b620b48de491a8d9ba00fc0
be67ba7db5215dcb7c9225876e35a5e0a5005c9e
28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3126
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:06 GMT
Last-Modified: Mon, 26 Sep 2022 05:10:00 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

35.161.6.128

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.161.6.128:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RcKTueZ9htvHO1dpOUJZoA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7nmdwqHUndypzkRGDwmSokpC0xI=

freerobuxhacknohumanverificationyo4.blogspot.com/?m=1

142.250.74.161

301 Moved Permanently

201 B

URL HTTP/1.1
freerobuxhacknohumanverificationyo4.blogspot.com/?m=1
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
201 B (201 bytes)
Hash
10791c209d0b4e341905eee353ddd11f
50c5087275c60471b949fa68bbe72f0493f011c9
608b0fda3b2365d9eb0b793d487465204bf42627f91e8ea6dadaec61854b7fd3

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /?m=1 HTTP/1.1
Host: freerobuxhacknohumanverificationyo4.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Location: https://freerobuxhacknohumanverificationyo4.blogspot.com/?m=1
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 26 Sep 2022 06:02:06 GMT
Expires: Mon, 26 Sep 2022 06:02:06 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 201
Server: GSE

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

freerobuxhacknohumanverificationyo4.blogspot.com/?m=1

142.250.74.161

200 OK

17 kB

URL HTTP/2
freerobuxhacknohumanverificationyo4.blogspot.com/?m=1
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (14233)
Size
17 kB (17431 bytes)
Hash
ae7adb997c9f7fabeda612449d4b95ce
010b34aba91366a7a54fb3d96281c9bd8394e823
c32533060279463cea2a3f6d4c1ad08e5b60195fc713a9683a6ac9b7c4df7d94

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /?m=1 HTTP/1.1
Host: freerobuxhacknohumanverificationyo4.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 26 Sep 2022 06:02:06 GMT
date: Mon, 26 Sep 2022 06:02:06 GMT
cache-control: private, max-age=0
last-modified: Mon, 26 Sep 2022 05:56:18 GMT
etag: W/"78f12cd4ad5351e32dc188a728914b62b27be11f3cd3688e5e2297884c0cd2dc"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 17431
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f864de16e2c738477abbf4addaae65f8
30fff82640e6e005aa148ef47d7de74a741c2467
0882106567d5f02552bcaf89d607f9c2d945191dad38332843dfe355f7d5d6c7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f864de16e2c738477abbf4addaae65f8
30fff82640e6e005aa148ef47d7de74a741c2467
0882106567d5f02552bcaf89d607f9c2d945191dad38332843dfe355f7d5d6c7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
ffb1ee0c677f670f393bc590d5c6bd11
494d666d08ace557a8b22aff6045d24bd68c1844
8d9e49545b65e314e949a0d012c664fbe8d2dae912906d1506c2e1243f154258

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f864de16e2c738477abbf4addaae65f8
30fff82640e6e005aa148ef47d7de74a741c2467
0882106567d5f02552bcaf89d607f9c2d945191dad38332843dfe355f7d5d6c7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

pics.ballmemes.com/wii-music-but-with-the-roblox-death-sound-coub-54103413.png

151.139.128.11

200 OK

35 kB

URL HTTP/2
pics.ballmemes.com/wii-music-but-with-the-roblox-death-sound-coub-54103413.png
IP
151.139.128.11:0
ASN
#20446 STACKPATH-CDN

File type
PNG image data, 500 x 433, 8-bit colormap, non-interlaced\012- data
Size
35 kB (34614 bytes)
Hash
085c516cf71e8c44dd218d0fe4998082
58e127ca25477b56bb1f1d76f277c1256d4ef5b6
666e2ebfe1ae7e32616e8c7bcb269be8c8f4be8dbfd7a97e887cde86a7358ba4

HTTP Headers

GET /wii-music-but-with-the-roblox-death-sound-coub-54103413.png HTTP/1.1
Host: pics.ballmemes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
cache-control: max-age=691200
content-length: 34614
content-type: image/png
last-modified: Mon, 04 Nov 2019 09:19:56 GMT
accept-ranges: bytes
etag: "085c516cf71e8c44dd218d0fe4998082"
server: WasabiS3/7.7.900-2022-08-19-6bff245bcf (head11)
x-amz-id-2: gzxZoGzBgn7r17QzzwxK+zjMZpU7gV7aDw5p1ni/dVxa5w7e1u1Y7q3Vop7mASEXadDIXc+4xZBM
x-amz-request-id: 522DB49CE9E35FD7
x-hw: 1664172127.cds250.sk1.hn,1664172127.cds024.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2

i.ytimg.com/vi/BVVxeZJWLRc/maxresdefault.jpg

142.250.74.54

200 OK

113 kB

URL HTTP/2
i.ytimg.com/vi/BVVxeZJWLRc/maxresdefault.jpg
IP
142.250.74.54:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size
113 kB (112911 bytes)
Hash
5089016f0692909c9335e3fc6e4d9b20
e55cc0b95ccc258e5ff65e6a9e648ac1f563d7cb
e0d812e2d3cb332b4a06fcb5c14a9bd206adebe99e9ee6f6682f96f3e5fd3f63

HTTP Headers

GET /vi/BVVxeZJWLRc/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 112911
date: Mon, 26 Sep 2022 06:02:07 GMT
expires: Mon, 26 Sep 2022 08:02:07 GMT
cache-control: public, max-age=7200
etag: "1611133814"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.blogger.com/static/v1/widgets/4150139458-widgets.js

216.58.207.201

200 OK

57 kB

URL HTTP/2
www.blogger.com/static/v1/widgets/4150139458-widgets.js
IP
216.58.207.201:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2221)
Size
57 kB (56826 bytes)
Hash
b318be2224a9b91139a7a4b41f2e4b6e
4bcae447ce5bb3cb36a74745bcca9b72ba419c9f
bc5c92978c40e36f3da25045761d139de3a8a333c5290ccd233273af73bd7f4b

HTTP Headers

GET /static/v1/widgets/4150139458-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56826
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 15:56:30 GMT
expires: Mon, 25 Sep 2023 15:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 08:50:22 GMT
content-type: text/javascript
age: 50737
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

i.ytimg.com/vi/M4YwOk23c_4/hqdefault.jpg

142.250.74.54

200 OK

10 kB

URL HTTP/2
i.ytimg.com/vi/M4YwOk23c_4/hqdefault.jpg
IP
142.250.74.54:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Size
10 kB (9993 bytes)
Hash
9a24ac43ca56f5f0e375cc0bce7211b1
51dbdb3a0ecc6c1e7b8a0d4a888498eb04704570
d03be662e974ce933cd5e32930d5f48c5d6f410c476944e308491d678be30e88

HTTP Headers

GET /vi/M4YwOk23c_4/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 9993
date: Mon, 26 Sep 2022 06:02:07 GMT
expires: Mon, 26 Sep 2022 08:02:07 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

i.ytimg.com/vi/AisHe_ACDOQ/hqdefault.jpg

142.250.74.54

200 OK

31 kB

URL HTTP/2
i.ytimg.com/vi/AisHe_ACDOQ/hqdefault.jpg
IP
142.250.74.54:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Size
31 kB (30769 bytes)
Hash
f8ac6e4d114b839967e4e0c60eea90ed
f9a2b4771f9a3584a5e11032c5ad01464b218d24
db6bc1a2b59e45a84110295c00cfce1b3c457785c2c5c7d9ab6249ee03b51baf

HTTP Headers

GET /vi/AisHe_ACDOQ/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 30769
date: Mon, 26 Sep 2022 06:02:07 GMT
expires: Mon, 26 Sep 2022 08:02:07 GMT
cache-control: public, max-age=7200
etag: "1575823776"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

lh3.googleusercontent.com/blogger_img_proxy/ANbyha3gcQ8mnoVByjqabniXn_s57lWp8n_ch48dHvEIOBXbSihrHRIPk-l_c-ViXNTNllWlH2qCffx8CO8IIFvyw9oCzYlAimVbU2GqnRwnQ-aFX8WylKkOlA=s0-d

142.250.74.33

200 OK

28 kB

URL HTTP/2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3gcQ8mnoVByjqabniXn_s57lWp8n_ch48dHvEIOBXbSihrHRIPk-l_c-ViXNTNllWlH2qCffx8CO8IIFvyw9oCzYlAimVbU2GqnRwnQ-aFX8WylKkOlA=s0-d
IP
142.250.74.33:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x180, components 3\012- data
Size
28 kB (27797 bytes)
Hash
7ad7710f99a0747267b64fd9f8e4e2d0
cf7f59ea8927caf43268694ce1a6c8a35b8712a2
c1e5a8976b2465611fd07e70ff22912c7d0be956dd49ca04ca55ae4df6bef4fb

HTTP Headers

GET /blogger_img_proxy/ANbyha3gcQ8mnoVByjqabniXn_s57lWp8n_ch48dHvEIOBXbSihrHRIPk-l_c-ViXNTNllWlH2qCffx8CO8IIFvyw9oCzYlAimVbU2GqnRwnQ-aFX8WylKkOlA=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Tue, 27 Sep 2022 06:02:07 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Mon, 26 Sep 2022 06:02:07 GMT
server: fife
content-length: 27797
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

img.youtube.com/vi/2MH-HlXBrVk/0.jpg

142.250.74.78

200 OK

9.3 kB

URL HTTP/2
img.youtube.com/vi/2MH-HlXBrVk/0.jpg
IP
142.250.74.78:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Size
9.3 kB (9298 bytes)
Hash
6e9dc288eba8ff08ba049e5d43b312fd
7a815bd78a3c9a04715880abddd68ed184c5e6d5
2a02e76dc865df43f231c747285532c77252b856bdcffed79c413b351c1d88e1

HTTP Headers

GET /vi/2MH-HlXBrVk/0.jpg HTTP/1.1
Host: img.youtube.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 9298
date: Mon, 26 Sep 2022 06:02:07 GMT
expires: Mon, 26 Sep 2022 08:02:07 GMT
cache-control: public, max-age=7200
etag: "1482986336"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
f864de16e2c738477abbf4addaae65f8
30fff82640e6e005aa148ef47d7de74a741c2467
0882106567d5f02552bcaf89d607f9c2d945191dad38332843dfe355f7d5d6c7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

lh3.googleusercontent.com/blogger_img_proxy/ANbyha2NmZDwKtavm-62_DuXCJiuuWAzKrFv_nPAHrD2D24YNRArCW0SeMbI4BRIx-9nfDDUNl8FPWw4_GOBWbuN6WkKaD0rVXKFHLlGk8ReuSZcsmBx8YtIdQ=s0-d

142.250.74.33

404 Not Found

1.2 kB

URL HTTP/2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2NmZDwKtavm-62_DuXCJiuuWAzKrFv_nPAHrD2D24YNRArCW0SeMbI4BRIx-9nfDDUNl8FPWw4_GOBWbuN6WkKaD0rVXKFHLlGk8ReuSZcsmBx8YtIdQ=s0-d
IP
142.250.74.33:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Size
1.2 kB (1187 bytes)
Hash
9fe85dcb3fe48e26d43227a130d47e6a
918db738002dda86a37aca5f2bece573f89d8084
57eb79ec23f95554cfee51062e26a0e62c8b095b030bf7aa4068894370e1052e

HTTP Headers

GET /blogger_img_proxy/ANbyha2NmZDwKtavm-62_DuXCJiuuWAzKrFv_nPAHrD2D24YNRArCW0SeMbI4BRIx-9nfDDUNl8FPWw4_GOBWbuN6WkKaD0rVXKFHLlGk8ReuSZcsmBx8YtIdQ=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
x-content-type-options: nosniff
date: Mon, 26 Sep 2022 06:02:07 GMT
server: fife
content-length: 1187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
ffb1ee0c677f670f393bc590d5c6bd11
494d666d08ace557a8b22aff6045d24bd68c1844
8d9e49545b65e314e949a0d012c664fbe8d2dae912906d1506c2e1243f154258

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

hablamosdegamers.com/wp-content/uploads/2020/06/Full-Complete-List-of-Roblox-ID-Songs-1200x900.jpg

188.40.3.204

200 OK

181 kB

URL HTTP/2
hablamosdegamers.com/wp-content/uploads/2020/06/Full-Complete-List-of-Roblox-ID-Songs-1200x900.jpg
IP
188.40.3.204:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1200x900, components 3\012- data
Size
181 kB (180891 bytes)
Hash
c4cca6721583a23b208fb376cca85480
a78a736847e02fbba252e37ddbb13bd2ca19f497
10f96325d80840f0f93d238eabe9fc109ec622e41a3a84956d6594cdc75b4277

HTTP Headers

GET /wp-content/uploads/2020/06/Full-Complete-List-of-Roblox-ID-Songs-1200x900.jpg HTTP/1.1
Host: hablamosdegamers.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
vary: Accept-Encoding
last-modified: Thu, 11 Jun 2020 16:41:23 GMT
accept-ranges: bytes
content-length: 180891
cache-control: max-age=10368000, public
expires: Tue, 24 Jan 2023 06:02:07 GMT
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: upgrade-insecure-requests
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: geolocation=self
content-type: image/jpeg
date: Mon, 26 Sep 2022 06:02:07 GMT
server: Apache
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
b75638f9d6a2e65511ac6b40dc98b488
34167ff0c410af8211a650774691539118cd5613
21d5ed3129ec0e26235783ec315d4488d7e1d1175910dd5d0796e11d9a080e49

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5285
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Last-Modified: Mon, 26 Sep 2022 04:34:02 GMT
Server: ECS (amb/6BBA)
X-Cache: HIT
Content-Length: 280

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4556
Expires: Mon, 26 Sep 2022 07:18:03 GMT
Date: Mon, 26 Sep 2022 06:02:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4556
Expires: Mon, 26 Sep 2022 07:18:03 GMT
Date: Mon, 26 Sep 2022 06:02:07 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4556
Expires: Mon, 26 Sep 2022 07:18:03 GMT
Date: Mon, 26 Sep 2022 06:02:07 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9070 bytes)
Hash
988b0c94c41a21c736b330c3256d0a3c
c16a6f018bd80c6390b7a07f4e6698db7bfd28b0
3034912f83810b3999ffa90f5eeaf0f45773c592cfd3cf2bfb794ea1b150158c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f164d87-257d-468b-9a99-3559bced005c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9070
x-amzn-requestid: 2aceb075-d4bc-45b8-8330-5e719c565f77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSKEEdPoAMFsNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca40-3f120e0774b1d58a08898c39;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: feNiTFDhUx-BfoiybnKj83hCq6CCoiMeOSEHyFs8b7cLIgKvnO1Cdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:05:32 GMT
age: 28595
etag: "c16a6f018bd80c6390b7a07f4e6698db7bfd28b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8637 bytes)
Hash
d02ede0c964f3346fd53ae2950bf2a62
e49306a3713cb724be024a4ddb5e90645718a718
c0e653d89656016c55aca9b198b9191620f1ae9a3c45742a90744bd74c4f9505

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9723d426-a6ee-4860-8067-0b8d98143233.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: 07dc23e0-000f-4f6c-8d2b-0e65d88be270
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSvvEenoAMFr0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb31-520803124760abc216152d7b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:42:09 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: mToVKJcSAtJB1AOuQ-Y9o_EZzyhUuZJivVa3DLql5FwzK4NC82kh5Q==
via: 1.1 27a84054de24e45f952ea4056a821764.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:06:17 GMT
age: 28550
etag: "e49306a3713cb724be024a4ddb5e90645718a718"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13584 bytes)
Hash
2c11e6fef1be62b971bd9daf378bfc95
ef9d756cbcda72cf7ef5029b7d384cd1fbaed633
b8369f83d6dddcd2355b81d8eb200791788165e56881ce21e1a1e9c8bb1bb2ef

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feddf5115-4c67-4a03-b497-8b149b3c332c.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13584
x-amzn-requestid: 198bd2b4-d4ae-4f19-a500-463aee52b890
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTHgFdNoAMFwEw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cbc9-19a1f7d2102820da4b21f18b;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:44:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: bGRBCfCtZkeYhbTpaE18IpIgUtOHyttE-0hRk8fWVB9sJS2rSbP22g==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:05:32 GMT
etag: "ef9d756cbcda72cf7ef5029b7d384cd1fbaed633"
content-type: image/jpeg
age: 28595
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce85614e-743a-4f62-8caf-9fdeb86a1c45.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.0 kB (4021 bytes)
Hash
53e1460eb42e8f71ed179c3be0709333
43c5b52cd3fb56660d826916eaafff0901340787
ec6de3d11b3c8d9743d8a91864a0c04a16259c206d87691591c2aa9b10edcd3c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce85614e-743a-4f62-8caf-9fdeb86a1c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4021
x-amzn-requestid: b265dc30-377d-42a7-93ce-9e6932febcbd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSJ5FMxoAMF4GQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca3f-58fbb5914e5ec38f6260893c;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1VPelfMeF-nwhiMI2NSq6AGg6hTGIXJDR3RnnEVWLuMVrK9EJN8pFA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:11:53 GMT
age: 28214
etag: "43c5b52cd3fb56660d826916eaafff0901340787"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Size
13 kB (12826 bytes)
Hash
b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6ZD1652Yn1xqZG7ehDcirlYoG8Hcsrdj11Fzfgj7zb-OiU8xHj1gw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:37:19 GMT
age: 30288
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F744f3733-ce02-4fd8-bd5a-62fdf6e03e58.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (14161 bytes)
Hash
45bfaa4f09146505d73d50365c63e9df
f31946e5ed8806c8c8ca0b7e7bcc8e3ea8df9c85
107d33f184be7c156e133b679752ee324be33c9c5e242ce67e0aafad811a592e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F744f3733-ce02-4fd8-bd5a-62fdf6e03e58.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14161
x-amzn-requestid: e2dec384-fbe8-44d6-9024-dcf46ed71e27
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSJuGQFIAMFS9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330ca3e-004eb3805201c42170903ac5;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:38:06 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ydsxR8YxLX5go4Ti83lBg05bRXvYryUWiFQe_qxYqerzlChGKwYV9A==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:47:24 GMT
age: 29683
etag: "f31946e5ed8806c8c8ca0b7e7bcc8e3ea8df9c85"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
245fa9b453a885aab591773a075a448b
c17fe4a468f357240323a22613f767fa10929499
a648446b50d012257e03653a6ed7260a6e22de91cda03d0d4cd7402480c020e9

HTTP Headers

POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.robuxtip.org/images/gamebaglogo.png

172.67.220.56

200 OK

3.3 kB

URL HTTP/2
play.robuxtip.org/images/gamebaglogo.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3340 bytes)
Hash
e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f

HTTP Headers

GET /images/gamebaglogo.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NTpOa%2FtJUy3hvg133UxPm9NH9SO%2FgMSCxUXYlm1hv8l1vkoZ2tZrVsI6Ly4%2Fb0BEBPuiZS5R4pSYqhUsQ3Ba9lQmaewOfPLxFbxr3Am0OX%2BzV9w3XXxw6syE39yHeUxK2ivlSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f60feeb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/ft-1.png

172.67.220.56

200 OK

3.3 kB

URL HTTP/2
play.robuxtip.org/images/ft-1.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3340 bytes)
Hash
e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f

HTTP Headers

GET /images/ft-1.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z0pL0Xe7cfsfXNJuL0w1BgiYPj38GoSmOO2sj5KxoMKpYtCDEMbdiJNUXnAB6mxs7KmFuE6GXGskoaUphQ644m9HgCEhr2vfuBt6O1OBx9xnzuHkH9RaMoKMmp1u5XVh6pDFIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f60ff3b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/header.png

172.67.220.56

200 OK

131 kB

URL HTTP/2
play.robuxtip.org/images/header.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size
131 kB (131285 bytes)
Hash
35e93538f31d67876a2cb38bf94279d8
49bf97732e9bffb5371ad60d024901b09d83651b
95c1de9315834de2ff3608a2dc048a6aedc273e665f9b54eb956523a81fc91df

HTTP Headers

GET /images/header.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: image/png
content-length: 131285
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-200d5"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tlg%2BpbFfyU9M9Dqis1zZD%2B2%2FdAUFjQXzcMi0ebaw56v1u6Qbx64OwPJR4aPA9uYNxIfFJNgzhysXMlUSrVXLndQym69xi7ZeELYsvMWOxsfMMq6Lkf%2Fdl75IsemsORwB0GFjXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f60ff1b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css

104.17.25.14

200 OK

1.5 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (3201), with no line terminators
Size
1.5 kB (1541 bytes)
Hash
8e09ceb5490863a66cd2e83ca3d7e524
35e3d074516ec70c508d748f7ae01827bc0c28ba
cccbb374fd4cb6dcbac9df64456b49cb11530e7bafdac6c6c7e67ff2ed350db9

HTTP Headers

GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css; charset=utf-8
content-length: 1541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-c81"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9613497
expires: Sat, 16 Sep 2023 06:02:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=62CDxlsOO8On%2BDcTrzp8PWwJtUQQG2HIMtDXqpdogqk50UasLGbjsn4xksApgJQqmaasuu4XIqXGsNdu%2F7D%2FC9l1h3r6pLRRECjZ9e59bAfJWGafagGAa5p9mtZhJgSkgtTmpuWV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7509c9f6386bb518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1

104.18.21.226

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
05b09d9df555fbec3558ee244aecf6de
cf9cb950ce62f6777a25edafdecf17ab3d9a92ee
cb0b06cee163912446cf0dec924e0c22d580d4e785327cae266ea3f89a3a5857

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 06:02:07 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "D5F007442DF9A8A3382E0C4654D9EF1299B72A76"
Expires: Mon, 26 Sep 2022 17:00:00 GMT
Last-Modified: Mon, 26 Sep 2022 05:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 371
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7509c9f66cbeb51b-OSL

ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
245fa9b453a885aab591773a075a448b
c17fe4a468f357240323a22613f767fa10929499
a648446b50d012257e03653a6ed7260a6e22de91cda03d0d4cd7402480c020e9

HTTP Headers

POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.robuxtip.org/images/animate.css

172.67.220.56

200 OK

4.6 kB

URL HTTP/2
play.robuxtip.org/images/animate.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (53418)
Size
4.6 kB (4616 bytes)
Hash
5735b7f36ed65f22d9d3007d1c8b22b5
f317711e952b7c52fdeddea83badd189c0e54548
0bf89a7e1a83ad6704a8433034cc54e097e6d63622c40c9123fe5d870d6a2010

HTTP Headers

GET /images/animate.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=68796
etag: W/"5d9ca488-10cbc"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ua2vwUr2IcM8eebfNoFkpNCxGQ%2Fd32GhSmXdsD5U7iNFtIAogloBD4W2trSJjAN%2FVK1bEl4ReksoNxz7qKKfyWXPs%2BPERk%2F1QEHQJYlegQUcnXBOlpBFWc5JxPCD5ondtDbNWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffe0b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700

172.67.220.56

200 OK

2.3 kB

URL HTTP/2
play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (701), with no line terminators
Size
2.3 kB (2252 bytes)
Hash
3a040c87140c036934678e47e361dd10
2a6494d227142fb4976533acda4eb71e0a894d08
0ab02bdaf095448a10aec9ba6663d8e0eb5d59404f768c4d6ae4c0e089bbdb57

HTTP Headers

GET /images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700 HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=773
etag: W/"5d9ca488-305"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Q6ucmu5bKLvxV54boEsMb2leAnshpxRYwtkW1LJJNl0LIcfbUqy06AVDHie6GdUXxgLaMX4JWMehxbAjrrBIz7A8pmXBHIyADXmVBd5Cu8gY%2B5WXGiscoW%2BrVThuitsbtZRuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffdbb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/validator.min.js

172.67.220.56

200 OK

18 kB

URL HTTP/2
play.robuxtip.org/images/validator.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (5862)
Size
18 kB (18171 bytes)
Hash
ec6088eba2e6acdf587c14fb2a97219b
af5249086358c2ee5159704debbd733ebff71876
64935040dd8128e647a8a2518f95f564fe519369c25963f8a54c3d3fbe7011d1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/validator.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-17a7"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yu0OH8UZJIxBzbjsgsLEpM0fQmDy9SIy1DAnzwACa2zeaOsnAYgrMZQRnZNu6iEctpueRRpaEY9lnOb1ds%2BcA240x3Wz5FoGFw66uQHQY36qYrqUu0kiXbi%2FzaWgLG4xRyWDZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f61fffb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
650b6e71248092b05b7f35e8703da4fb
a675c71ea7c50c6a3576eb9626630b0445016d32
122a0ec921f9b9a6b845d4f75df0a4d950f2ce3c34a79cecc67d80962255c1ca

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1663
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 06:02:07 GMT
Last-Modified: Mon, 26 Sep 2022 05:34:24 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279

play.robuxtip.org/images/fancyselect.css

172.67.220.56

200 OK

1.3 kB

URL HTTP/2
play.robuxtip.org/images/fancyselect.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (3595), with no line terminators
Size
1.3 kB (1262 bytes)
Hash
b0a7ee6fc1f4e49d2195f861e58690b1
cc0b730bcdfa27625c7f51e8222b0ceb7214c953
6627b4857a308681e207d6dbfe34123bfd11c22164841e34b48e0f4a462e6d55

HTTP Headers

GET /images/fancyselect.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4253
etag: W/"5d9ca488-109d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=faKfWgfQVVxN%2Bgpe0hpk9HTUwgo3hLDwMW2qSSsLiwhxAuomtcIJg6DoSROMy7BrFd0Xx%2BTPD3FIAJ1%2Bmt6iaaHztuBPnbXVyWv2jhaYcc3O5n8CE7NKQDfDC1vzH0puRJXy5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffe6b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/magnific-popup.css

172.67.220.56

200 OK

68 kB

URL HTTP/2
play.robuxtip.org/images/magnific-popup.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6066), with no line terminators
Size
68 kB (68299 bytes)
Hash
72eef2daedf4d7da2362169b77141770
42482af0e962eedd03c8d6f328a255427a1c87cf
a16eb755a82d7286e90de923a08dcc3dc89e61f3f9f181c1a7bbbd7dc7df75b8

HTTP Headers

GET /images/magnific-popup.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7946
etag: W/"5d9ca488-1f0a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hJebMTYTPZinv0CCmhYexdJ10dLCKC6Iaz%2BtPClXTuCzuc5%2BaIjYXJfwkyXTZLvw6ezl8S%2BgqLyrWK71pVTgmrVOt9pzY9rB%2FAJoj4KQwxdEiOz6n1KprrrnhrePYdIoPDZe%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffe4b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/font-awesome.min.css

172.67.220.56

200 OK

40 kB

URL HTTP/2
play.robuxtip.org/images/font-awesome.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (27546)
Size
40 kB (39844 bytes)
Hash
d0297116f025056ab9db9e06a434f0d3
1197798bde8fd273406cb969877de0fbffea692f
16436ab2376c433bc80fc128c151b8c59640314571acbc43f9c64a3a01e84dd2

HTTP Headers

GET /images/font-awesome.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-6c3d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pc19ZrPGAiwRS9WN%2Bh6OibN0on4taRJfKRrvi8NQUsWNVJP7vfrdrG1Tj5c0xmRfU0Fa2%2FHGPjKb4eaQxM3QVvzHtS6njfi%2FmPNcjWmeRjJ2E4zc%2FsHuc2Bzw4o6s8ARXR%2F2hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffdcb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d60144b96f72539719011cc71dcaa7c2
02a0962fe84b3466d77542f7b1b42a9efcc84479
814e75d1f248cd7bdc505fabec42b103880ed89329940be06d039b84d1f1b95f

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "814E75D1F248CD7BDC505FABEC42B103880ED89329940BE06D039B84D1F1B95F"
Last-Modified: Sat, 24 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3899
Expires: Mon, 26 Sep 2022 07:07:07 GMT
Date: Mon, 26 Sep 2022 06:02:08 GMT
Connection: keep-alive

s10.histats.com/js15_as.js

46.105.201.240

200 OK

4.4 kB

URL HTTP/2
s10.histats.com/js15_as.js
IP
46.105.201.240:0
ASN
#16276 OVH SAS

File type
HTML document, ASCII text, with very long lines (11440), with no line terminators
Size
4.4 kB (4364 bytes)
Hash
ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1

HTTP Headers

GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:00:41 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 462848146
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2

s4.histats.com/stats/0.php?4275781&@f16&@g0&@h12&@i1&@j1664172126372&@k199258&@l12&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia|template=Fastink.xml|anisacintia=freerobuxhacknohumanverificationyo4.blogspot.com|freerobuxhacknohumanverificationyo4.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:184342411&@b3:1664172126&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w

192.99.8.28

200 OK

50 B

URL HTTP/1.1
s4.histats.com/stats/0.php?4275781&@f16&@g0&@h12&@i1&@j1664172126372&@k199258&@l12&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia|template=Fastink.xml|anisacintia=freerobuxhacknohumanverificationyo4.blogspot.com|freerobuxhacknohumanverificationyo4.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:184342411&@b3:1664172126&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w
IP
192.99.8.28:0
ASN
#16276 OVH SAS

File type
ASCII text, with no line terminators
Size
50 B (50 bytes)
Hash
276278607e1e0ada5170578239d0263f
fd3cbc01a2e4268ee36701a40811405220136273
8dfde32129c6e1766f583996023072d46d9bc4d82875f6fb5e83d3b8cfe77754

HTTP Headers

GET /stats/0.php?4275781&@f16&@g0&@h12&@i1&@j1664172126372&@k199258&@l12&@mRoblox%20Robux%20Generator%202022&@n0roblox-abs.js=anisacintia|template=Fastink.xml|anisacintia=freerobuxhacknohumanverificationyo4.blogspot.com|freerobuxhacknohumanverificationyo4.blogspot.com=direct|ref=direct|tags=roblox-abs.js&@ohttps%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:184342411&@b3:1664172126&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 06:02:08 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 50
Connection: close

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda074419-8119-43b4-9e9f-bdccf9f5d3cf.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11824 bytes)
Hash
5f3086174be3cb03a9727dab1f2c57a2
fec58d5dfadad6f5913dc2303bfac89e56d5bc53
c74d48686365b9cc74e5296dc83a23a9e3580b5f2b7ef6b4b9ddc19bccf0fab8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda074419-8119-43b4-9e9f-bdccf9f5d3cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 11824
x-amzn-requestid: 6aad0f0e-feb3-4ffb-93bd-104c94d29944
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUCGGoNIAMFp3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd40-3c89372f6221548e79849d68;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:50:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1SV6hQb_ploB_ehNYpKMcjBODl9y1ayD_W4W0pkqR4VQVxFkVxy0-w==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:19:32 GMT
age: 27762
etag: "fec58d5dfadad6f5913dc2303bfac89e56d5bc53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

play.robuxtip.org/images/custom-css.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/custom-css.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/custom-css.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1790
etag: W/"5d9ca488-6fe"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2EDMgDs22rKAdqVL6Ve0U9oJCyx34r5oQ2dxK%2F1DbMdpMhaBei5l3swW7TJAXiWvQ7t49sTkYjA94pvZQ8y%2BVO397krC7PfqsQYEgJhWuYPMg%2BPYYeBELnl0R27ZCs2FkLIQIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f60fe9b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/bootstrap.min.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/bootstrap.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/bootstrap.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-1d990"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6izv5L42Q1XqsC%2FjFVd%2FNNhjYsFrznIJGkfn4w8yFrT3l81fkra3fJ4YxORhRBUP4wKyPHxXdRAekHABFAFhf%2Bm4BqTF7o57YtLRXxQ7dh1ENgRw51LQ0KXsNo%2FSfWTVnDKfCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffdeb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/fancyselect.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/fancyselect.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/fancyselect.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6778
etag: W/"5d9ca488-1a7a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M1uh7zZg9qAT9WMGkLpbwHU06tsdtNAJg4I2ul2kuW%2FyaMmAdnxMQAu4Hbwk7Wam3hz8YvzDSCHq%2BQNxC%2Bc6CwTxod0Bl6WluixGx2%2BiPHW%2FSmXBY%2B4qqnPDWmlRGY3XdUrcEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f60ff8b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery.countto.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery.countto.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery.countto.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3761
etag: W/"5d9ca488-eb1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dEGeV9EzB4WS%2BASYjVRZGpm2zIkIX19VKUGAAeApFW7fEiFk757oPtbK0h9j%2Fnn7AxF2m1bLsALuRSsYU7anIGVeU%2FiUSSssXsDdMJaNRe6h7pCyRKo4V%2FRzMeI%2FQXNt%2FJtGSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f61ffab524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/form-scripts.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/form-scripts.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/form-scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1469
etag: W/"5d9ca488-5bd"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R7hOnp7cQeyvR2GruZTFQAk1NAx06sJRcoTr1%2B%2FWIKsNrYcp6z3pAMwz6LxU5jFqJwpP5gpeo2z%2B4mAA3wdvg%2F1DRlSKjzPTS4BGqi983agMFjYZt4LdGzkF0XzbqQbVxev68g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f61809b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sticky.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/sticky.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/sticky.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=20845
etag: W/"5d9ca488-516d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uc%2FBJ40lmX3kJ2Apu%2BFpIsSA1D%2BEU4rM76hfPHM%2BLuhXqPnVQcMEGcusocqZy4owqEZTtF%2BosTI0lp9EGC9jn4mQm5PpbFRAkusMx8h8L9Ny4j%2BUbcRkla3BBbyHcrzJPAkBIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f6381ab524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sweetalert2.min.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/sweetalert2.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/sweetalert2.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-36a4"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y2v2Rsj%2BhsXNOMPYXdBB%2BdCaa6XCLSmAmYda2DFzP9003Wkq%2FXaS9bUsOLCTJZEaIHOC7w8YtmOfzbmxrcnve8dPrAe4uBLS83cZA1h1LCQ38RBKhu4yaEAt%2B6DEvdKxHRqj0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffe2b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/main.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/main.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/main.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=38451
etag: W/"5d9ca488-9633"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2BC4JZVcs4bMFn77ZNcKIXaZ2Qa8VSzn7sa27xPW5D24zsFZg0M%2BBnd4GQi1kTZhMKcucBeg5u0xZfFQZTWgH03QGCt5ICUxKnCy4G9WzeLjuewNqGRC9RbWaxIMR16uZUsm4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f6381bb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/style.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/style.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/style.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=50839
etag: W/"5d9ca488-c697"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IPlScE50Sce9%2BgPvsGsrNqTN950EsKcCylAhISBAW8bBawl1YtWUj3cjALOCnt21QbibkyH2gaWShSOmvAF3xqv8UvlXCQ5qyAmkMIJk0hYS%2FFN5uiXSqufWpppucjwZ37IQmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f5ffe7b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery-3.2.1.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery-3.2.1.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery-3.2.1.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=268039
etag: W/"5d9ca488-41707"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fttIo0DfuGlpafgZyzJv5uG%2BMJxXwyq%2FZJ%2BRVQtNi%2BjdGTtAS5f%2Bj8ywi6m%2BwGfFx2BOyrW1fO2ANJx7W6dQaDENSsk8JeOMwy0pwocRFPicti2pP5PeKR8c2Nvaodxa9z1Usg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f60ff5b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/scripts.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/scripts.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=225
etag: W/"5d9ca488-e1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 283119
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N4j0y8ApYV%2BoAlZ0ziIWU9g8m9jKO4461AcbJcpUXljwE6i%2FzDIwilzpJJl3cCjOPN8kOI0ZOB%2BRcOHve0CMpT2qUdx6kKkD2v6XNKzcgc%2B6IatUMyClZYjylUeuaGO3XxL6jQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f63825b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

mtevor.com/cluster-v2/roblox-abs.js

172.96.187.226

200 OK

0 B

URL HTTP/2
mtevor.com/cluster-v2/roblox-abs.js
IP
172.96.187.226:0
ASN
#32475 SINGLEHOP-LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /cluster-v2/roblox-abs.js HTTP/1.1
Host: mtevor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freerobuxhacknohumanverificationyo4.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-powered-by: PHP/5.6.40
content-type: application/javascript
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 06:02:07 GMT
server: LiteSpeed
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery-ui.min.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery-ui.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery-ui.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-30da8"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3U0V1i0jFJLLf2%2F4GWLPLkWNTF7Fl7WH9J6tPMTSK4chuqUQFtWluXD9U%2FEdx8yKQYQr7ahS9rKX%2FS%2BiGJNenbzb8CsuybmFQlXBkYI1583NBLoMeHlH%2FtPROu0ENaTzPq796w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f60ff7b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sweetalert2.min.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/sweetalert2.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/sweetalert2.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-4f51"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q48%2BUnL1Y3FVcH98tESybiE1GadQHFSZrClewslGhqb5QnspwqDO0nrYo9Onc7ultbR7XLTRjjsnq3JpwpmVh6ZZAxGl5Dp2ey0fGRG3uYlQSDhl1CbP1UOTbyn%2BaBp%2BmVmYCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f61ffcb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/com.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/com.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/com.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=17963
etag: W/"5d9ca488-462b"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RAD%2F3E3JUV%2B%2B%2B4u%2Fp04qFTT%2Bz%2BNVJtCVI7vig0pqQ0i5qPQcoY6%2B%2FBH3RNfTNxqibz2URBtgjs59iXZj9yJrcOd5xD5DziahrnUB1MnLPXUJ7dEDeMiBTCtOuoDDGtfFPeA%2BCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f61800b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery.magnific-popup.min.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery.magnific-popup.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery.magnific-popup.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJzLmpzIiwiYW5pc2FjaW50aWEiLCJ0ZW1wbGF0ZSIsIkZhc3RpbmsueG1sIiwiYW5pc2FjaW50aWEiLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJmcmVlcm9idXhoYWNrbm9odW1hbnZlcmlmaWNhdGlvbnlvNC5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFicy5qcyJd
Cookie: HstCfa4275781=1664168347683; HstCla4275781=1664171927114; HstCmu4275781=1664168347683; HstPn4275781=11; HstPt4275781=11; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Frobloxrobuxhackforcomputers.blogspot.com%2F; username1Cookie=Sam; username2Cookie=Adelia Conti; username3Cookie=Mafalda; comment1Cookie=WOW. thanks a lot. c= this website is giving some real stuff  =) i wonder why this wasn’t on the news. this is stunning tool! !; comment2Cookie=thanks! I was looking for this in a long time!  c: Perfect! this is what i am looking for!  1000000 Clash Royale Gems..; comment3Cookie=thanks Concordio..; timePosted11Cookie=194285; timePosted22Cookie=137888; timePosted33Cookie=64220
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Mon, 26 Sep 2022 06:02:07 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-5297"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 769519
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FwhtOIExkyKxSlTTbbocbh%2FwfDXERwdXQoV9nzd2ptiCgO%2FH1%2BO0ujzJQvKam73nkTtwFXpy7j9DKLbynsgJ0MeXJ2sgDG1De5fQVNUOYv8yH0z08xvxNj7%2BwOZzLoHH1twGCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509c9f6180ab524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (25)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP