Report - ben10dittovsechoecho.blogspot.com.mt/

Report Overview

Submitted URL
ben10dittovsechoecho.blogspot.com.mt/
IP
142.250.74.161
ASN
#15169 GOOGLE
Submitted
2022-09-23 05:48:41
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ben10dittovsechoecho.blogspot.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	804 B	30 kB	142.250.74.161
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	58 kB	142.250.74.10
mtevor.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	376 B	17 kB	172.96.187.226
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.3 kB	6.2 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.35
s10.histats.com	15211	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	351 B	4.7 kB	46.105.201.240
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658 B	1.3 kB	93.184.220.29
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	498 B	19 kB	142.250.74.163
play.robuxtip.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	30 kB	1.2 MB	172.67.220.56
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	409 B	2.7 kB	104.17.24.14
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.7 kB	64 kB	34.120.237.76
s4.histats.com	12782	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.1 kB	183 B	192.99.13.63
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.0 kB	6.3 kB	142.250.74.3
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	35.83.91.138
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.115
ben10dittovsechoecho.blogspot.com.mt	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	356 B	623 B	142.250.74.161

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-09-23	medium	ben10dittovsechoecho.blogspot.com.mt/	Phishing
2022-09-23	medium	ben10dittovsechoecho.blogspot.com/	Phishing
2022-09-23	medium	ben10dittovsechoecho.blogspot.com/	Phishing
2022-09-23	medium	play.robuxtip.org/images/validator.min.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/sweetalert2.min.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/jquery.countto.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/scripts.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/main.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/jquery-3.2.1.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/jquery-ui.min.js	Phishing
2022-09-23	medium	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd	Phishing
2022-09-23	medium	play.robuxtip.org/images/com.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/form-scripts.js	Phishing
2022-09-23	medium	play.robuxtip.org/images/fancyselect.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (22)

	URL	Size	First Seen	Last Seen
	play.robuxtip.org/images/form-scripts.js	1.0 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/form-scripts.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:06 Times Seen200 Hash 7d7a87d79b5343d3f04fed2cc2bef2e3 021cc4c45ce7872041b7af085a4cf13f423c01e8 7a05b1e911af071c10812d790155447a62d4445db99b2d43872202bfcaded5ae Loading...

	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd	325 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen199 Hash 5644d012be9e47b1ae7bf89c80633745 e0fe867b75dd9c9ac03056fd960eb91512808860 477c2e410825c537de3848a9b47bb422f9aea7328dac8fc7395b2f8aa9f8e51e Loading...

	play.robuxtip.org/images/sweetalert2.min.js	20 kB	2023-03-07	2024-02-10
Pretty URL play.robuxtip.org/images/sweetalert2.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-02-10 04:05:40 Times Seen448 Hash 0ad69b0e70b7da1bb8f8a96e9e6b5d9a 7d21a0c1f43d3edb47dd9e69b05243f3fcb53152 4051f26691def4eafcae32928be110c13d1819e544a12b0a9b95378bfaf9859b Loading...

	play.robuxtip.org/images/fancyselect.js	4.6 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/fancyselect.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:07 Times Seen194 Hash fc20f6fcbceda58609e8ec93ed8972a6 346672aba10658ebe11580ff7fec4b70663c2e0f b92360cf3455f4f375b7c8cc3b601061686d92b9ffd4624004f420c9d09996d8 Loading...

	play.robuxtip.org/images/jquery.magnific-popup.min.js	21 kB	2023-03-07	2024-04-25
Pretty URL play.robuxtip.org/images/jquery.magnific-popup.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 21:53:59 Times Seen2407 Hash be3333626c57af03599abcb59b325e09 3824067348f6485d6b07d3a43660804e3731b21a ecbef0f33e8ccedd2c605816e052cfff778abcc0e30a80b874c097a5fddd24fc Loading...

	play.robuxtip.org/images/scripts.js	196 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/scripts.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen378 Hash 30110b3852b1800156f09776b7f8abc3 b3016d5bcc5d32713d4841b7430e8a36a08f4d82 c7b5716b450a19a471d68d99302a1aefc97409ad09b5248b7493052fb515f9ef Loading...

	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd	514 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen199 Hash 09933286614ed7eb9801cf06011a4c9d fa97803d9532c6922800b799c7e43039f003f33d 68d3e0ce6a8a98aa641fc113c014919e27ccff17a6c7f286cfc325693f730e09 Loading...

	s10.histats.com/js15_as.js	11 kB	2023-03-07	2024-03-25
Pretty URL s10.histats.com/js15_as.js IP 46.105.201.240 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-03-25 09:24:29 Times Seen1978 Hash e959fbdd13def4b9a9d0a5fc9a7de4d4 1e39712307e3673b40c0bdb8c7d3e86a3e8b60a0 2defe59e357a7d0683c8283ac42841db404a0884cae2eaecebf4b676e559dede Loading...

	ben10dittovsechoecho.blogspot.com/	290 B	2023-03-07	2023-03-07
Pretty URL ben10dittovsechoecho.blogspot.com/ IP 142.250.74.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:28:14 Last Seen2023-03-07 23:39:30 Times Seen1 Hash 7503cea047e5dfca604e6b20be8b1885 146ce0eb69ef04aed26304923d3300cc86938f77 1ed6d8057eee697d95c7678942b69e9b2c75dc48579e9cc4221ca95dc735b675 Loading...

	play.robuxtip.org/images/jquery-3.2.1.js	139 kB	2023-03-07	2023-10-31
Pretty URL play.robuxtip.org/images/jquery-3.2.1.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-10-31 00:50:02 Times Seen397 Hash 0b39dc8f94398407369f2c6f32042bac 8c4abc797c784a78061373a0aa078be14c7931b1 41f59ec5d59f17850334323c174baef773d00ed5bb48e3739d77bb41b3c59c00 Loading...

	mtevor.com/cluster-v2/roblox-abx.js	9.6 kB	2023-03-07	2023-03-10
Pretty URL mtevor.com/cluster-v2/roblox-abx.js IP 172.96.187.226 ASN #32475 SINGLEHOP-LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:13:11 Last Seen2023-03-10 17:03:28 Times Seen1 Hash ec7b89522aeedba4dff9698c46c7376b 9661125ebefe0001636e4abc68316916df651326 d0557ae1a47bc8f09b93df38d0f7dd5498348335405f97c64da6c4dc1dd6719c Loading...

	unknown	0 B	2023-03-07	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-26 04:30:11 Times Seen37083078 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	play.robuxtip.org/images/com.js	15 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/com.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 04:24:01 Times Seen65 Hash 466cf8a36ac32eb927568e8c63d94f80 fbff8ca922aba7d561ba63cba4582026020fa76c 05b0cf64ba783827ded5c5dcd31e88670cf507a588d73371d304cb8c482ea39f Loading...

	play.robuxtip.org/images/main.js	34 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/main.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen393 Hash b4a27b956eccd646f3bc2b2b2b6503c5 6df97b44c507a440a3c1dd6873b44fbc95e92fb1 948fe10b1ea0b581c4871ae90f94882ed8945bd19c9ce0352b20ac0467dc145a Loading...

	cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js	5.1 kB	2023-03-07	2024-02-26
Pretty URL cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-26 23:33:16 Times Seen286 Hash 5ca725d76acf5fc62e1e419e50031fd7 94c9b12c4d33f3f4e7b22a6f6e1420e5c90003c4 e3c6d1c8195fe393af47c014346ebdcd629556a6365ea1f5a671cd507f914ce1 Loading...

	play.robuxtip.org/images/jquery.countto.js	2.4 kB	2023-03-07	2024-02-11
Pretty URL play.robuxtip.org/images/jquery.countto.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2024-02-11 16:42:07 Times Seen206 Hash 2997f7484c171da3ffd1f9f7bf8b9056 be8d289c00db0f7c5975938a147181a772e0f6b6 0c3bb5ecb9b684b6efb1524648c7cf632511260270fa846369f27115ce269070 Loading...

	ben10dittovsechoecho.blogspot.com/js/cookienotice.js	6.5 kB	2023-03-07	2024-04-26
Pretty URL ben10dittovsechoecho.blogspot.com/js/cookienotice.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:24 Last Seen2024-04-26 04:28:04 Times Seen113657 Hash a705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568 Loading...

	www.blogger.com/static/v1/widgets/1416043673-widgets.js	158 kB	2023-03-07	2023-03-08
Pretty URL www.blogger.com/static/v1/widgets/1416043673-widgets.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:55:19 Last Seen2023-03-08 02:09:23 Times Seen1 Hash ac04150ca1086e22ae1e692c7c57f245 84604a838799867966c2ee9ecb86363942fc667f b232d7b579c6acbf16f1bfb13425365f74f3425b4a8ceca04b5e05a3ad329a58 Loading...

	play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd	622 B	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen199 Hash 7c5cdfb6321019cf9fd448815ff5db0d 88e72d5a1cbc98fb8abec7d7f271be3750f49ffd 247598654d9b470c026aef9f5ff263a7cb7ce6f9ebc3216c9b02809de308a6c6 Loading...

	s4.histats.com/stats/0.php?4275781&@f16&@g0&@h4&@i1&@j1663912111617&@k155686&@l4&@mRoblox%20Robux%20Generator%202022&@n0roblox-abx.js=hildameti\|template=PinkTong.xml\|hildameti=ben10dittovsechoecho.blogspot.com\|ben10dittovsechoecho.blogspot.com=direct\|ref=direct\|tags=roblox-abx.js&@ohttps%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-15353230&@b3:1663912112&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd&@w	51 B	2023-03-07	2023-03-07
Pretty URL s4.histats.com/stats/0.php?4275781&@f16&@g0&@h4&@i1&@j1663912111617&@k155686&@l4&@mRoblox%20Robux%20Generator%202022&@n0roblox-abx.js=hildameti\|template=PinkTong.xml\|hildameti=ben10dittovsechoecho.blogspot.com\|ben10dittovsechoecho.blogspot.com=direct\|ref=direct\|tags=roblox-abx.js&@ohttps%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-15353230&@b3:1663912112&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd&@w IP 192.99.13.63 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 23:39:30 Last Seen2023-03-07 23:39:30 Times Seen1 Hash f292af2dc3f77080903e379bc43444e0 c183317f303809a437ca6d836349ba963058c71e 716c9e840f694b63c00f303f933e4e60d2a27bdb3cb650f13c83720383881fc2 Loading...

	play.robuxtip.org/images/sticky.js	20 kB	2023-03-07	2023-04-16
Pretty URL play.robuxtip.org/images/sticky.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:18 Last Seen2023-04-16 10:44:31 Times Seen395 Hash 1180d3ea8d2544bb6bec4dacb60526d2 d2788f5423575404112a66853e0f274960d743e0 bb88a49c99d278abff743baf1f0f492382031afd4212fb27b33a23068723f86e Loading...

	play.robuxtip.org/images/validator.min.js	6.1 kB	2023-03-07	2024-04-25
Pretty URL play.robuxtip.org/images/validator.min.js IP 172.67.220.56 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-04-25 19:43:11 Times Seen917 Hash 81df0465f243a2e7b7b06b8ad6015173 996eb26bb4bdb44ed5257d048cedaf3ed0a6f90c c31a654938abf168fca328d9663ea83999b87ff36d18b016ea8aace1a9cb2cb1 Loading...

HTTP Transactions (62)

URL IP Response Size

firefox.settings.services.mozilla.com/v1/

143.204.55.115

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 05:05:44 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fshMwy1Ziyy2HCARfu2hbiaxbAK6K_6Bdzrnovb3Clxy0uDpi9ks7g==
Age: 2566

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8223
Expires: Fri, 23 Sep 2022 08:05:33 GMT
Date: Fri, 23 Sep 2022 05:48:30 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GGu187TY1jR64QRAhTtTMHG-rm7h4Xq61iSS3BFJ7FEOInBv9KuJlg==
age: 4396
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 05:48:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ben10dittovsechoecho.blogspot.com.mt/

142.250.74.161

302 Moved Temporarily

184 B

URL HTTP/1.1
ben10dittovsechoecho.blogspot.com.mt/
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
184 B (184 bytes)
Hash
6ee99d50054e4143745303eb1b4f66df
43b819bd5f6af4c9a35a4ae45876900fe335dbe0
8e2c719902e8c7ad35fdb320f9ffaf532e3a76f23c14b627911b79ab3c6582fb

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: ben10dittovsechoecho.blogspot.com.mt
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Moved Temporarily
Location: http://ben10dittovsechoecho.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 23 Sep 2022 05:48:30 GMT
Expires: Fri, 23 Sep 2022 05:48:30 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 184
Server: GSE

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.115

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.115:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Fri, 23 Sep 2022 05:03:22 GMT
Expires: Fri, 23 Sep 2022 05:16:48 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XmWGf3NpRhOgpkoghdhLHWMtPE_NWt6Mn0pTbC4B0lCllCX21AybiA==
Age: 2708

ben10dittovsechoecho.blogspot.com/

142.250.74.161

301 Moved Permanently

183 B

URL HTTP/1.1
ben10dittovsechoecho.blogspot.com/
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
183 B (183 bytes)
Hash
1c2c0e7f68f3ca0d9b8c114ae67b5c9b
0467866a8f120739348d0acd0e35cc4258408c0b
052e07a983062ac27368ad720bbcec14300e0d53dc9abadb789c5491c6692a4b

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: ben10dittovsechoecho.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Location: https://ben10dittovsechoecho.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 23 Sep 2022 05:48:30 GMT
Expires: Fri, 23 Sep 2022 05:48:30 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 183
Server: GSE

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
316dd96c27cb1cae8a533df4714092b6
884cf94b1b24b145c72f60e7e36d7012a501f6f7
845cc35126bbeadcd22c6e8ad40d61981c776617f2a7e514dbc9110cf10b2d77

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
86624f45fb3b7126dbe002f69c94dd86
30bcf274db5037122f989fb25dbf1e72c9ec417b
2cc9600578cf057dc499835773fb495caa60ac154c4945f0fc1f2b31d43f5502

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 665
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:30 GMT
Last-Modified: Fri, 23 Sep 2022 05:37:25 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
316dd96c27cb1cae8a533df4714092b6
884cf94b1b24b145c72f60e7e36d7012a501f6f7
845cc35126bbeadcd22c6e8ad40d61981c776617f2a7e514dbc9110cf10b2d77

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b9893dbb93b5cc3cb8637b496ecd3c1c
007b31caa727ce627f6ba81a3f43326a1538181e
b82608484e9e9dbf009de73986da468fff9833e5d040016b3214b8774ba9f500

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

35.83.91.138

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.83.91.138:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: kVTOsMZbqlTTfgF1kQcswQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vflRlpOMxQkxY42ww0fZ+sYrXzg=

ben10dittovsechoecho.blogspot.com/

142.250.74.161

200 OK

29 kB

URL HTTP/2
ben10dittovsechoecho.blogspot.com/
IP
142.250.74.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2298)
Size
29 kB (28702 bytes)
Hash
d1e0bc2cc41d16eb91a9ee9ac7441a12
2651bb9167842754e7b57ed6a3230a30344d1a58
63e6fd1e08f4204e086e798536784b3c0d94a5724e2d45d64874bd3ef8c17f62

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET / HTTP/1.1
Host: ben10dittovsechoecho.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
x-robots-tag: all,noodp
content-type: text/html; charset=UTF-8
expires: Fri, 23 Sep 2022 05:48:31 GMT
date: Fri, 23 Sep 2022 05:48:31 GMT
cache-control: private, max-age=0
last-modified: Tue, 20 Sep 2022 10:34:56 GMT
etag: W/"27a32c6cefd23fb29a3dae87899e5714994f8152687e81cbc27eebfa8076f373"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 28702
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b9893dbb93b5cc3cb8637b496ecd3c1c
007b31caa727ce627f6ba81a3f43326a1538181e
b82608484e9e9dbf009de73986da468fff9833e5d040016b3214b8774ba9f500

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
017b35db8b7a44fb09d592e4f01e6221
52b62eda95cb2dc0fd4bb767f336dbeb0755071d
cf55ac8ca259aaa5113a2eb7bfdedc82cee487381dfe970f258503b55a996ffe

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.googleapis.com/css?family=Roboto:400,700

142.250.74.10

200 OK

58 kB

URL HTTP/2
fonts.googleapis.com/css?family=Roboto:400,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2221)
Size
58 kB (57506 bytes)
Hash
593fed3a208b8d2dca6e5b5853b395bc
825071f1f99c1dacf98a9bb259ef1d208845604a
ee8e4f88fb53b7ab6af32d3c0fc196ccefe7d3ca1d818ac03a0cc7b0da5dec7a

HTTP Headers

GET /css?family=Roboto:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ben10dittovsechoecho.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Sep 2022 05:48:31 GMT
date: Fri, 23 Sep 2022 05:48:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
017b35db8b7a44fb09d592e4f01e6221
52b62eda95cb2dc0fd4bb767f336dbeb0755071d
cf55ac8ca259aaa5113a2eb7bfdedc82cee487381dfe970f258503b55a996ffe

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
31783719c018d63ac942fd965cd94f4a
5ca4a26e97e431360c70e569c5aec13b062cd16f
65a83a25835a9ce7f4a5e5fadfedede25f027a7cc263db8d1746ee9a255df192

HTTP Headers

POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:31 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.robuxtip.org/images/gamebaglogo.png

172.67.220.56

200 OK

3.3 kB

URL HTTP/2
play.robuxtip.org/images/gamebaglogo.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3340 bytes)
Hash
e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f

HTTP Headers

GET /images/gamebaglogo.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NwXxXXy4kK8aQYVeNFdZ5dBddD1bXrYb781KQmMLXGiiMm0i55Z%2FRu7EJK52120h24PVctvzb69zAUTNrWhSRSs5TxOCMU0AKW9l7krPN%2BgaSpZrKeI8WLci845IGpEzi4CCJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeaf9d6b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/header.png

172.67.220.56

200 OK

131 kB

URL HTTP/2
play.robuxtip.org/images/header.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size
131 kB (131285 bytes)
Hash
35e93538f31d67876a2cb38bf94279d8
49bf97732e9bffb5371ad60d024901b09d83651b
95c1de9315834de2ff3608a2dc048a6aedc273e665f9b54eb956523a81fc91df

HTTP Headers

GET /images/header.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: image/png
content-length: 131285
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-200d5"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RcKT11ndussVUliP4aDSzACtSJsyT3yHJxKdkU0kZjpYvDz9dABrtq8quk3BeapWQMRjzMSew3HkvlkrVqGv%2F6VQogwG5Y6jXslgSZa3NT8xkUcNUWi6YNmyzwlNArQZEf7OQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeaf9dab4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/ft-1.png

172.67.220.56

200 OK

3.3 kB

URL HTTP/2
play.robuxtip.org/images/ft-1.png
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size
3.3 kB (3340 bytes)
Hash
e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f

HTTP Headers

GET /images/ft-1.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3emLI3%2FeDx2Db0JRzkW4v%2FQjiuNKpsuyZj7GAqq2h9rml8Gk6Lt%2BnVrx69QiCy635Y3kaiSerdPqEcRrQVv9uoQcXgrCK59lTJuLgnfNYog0OJ5V5%2B02mrD5wG2HWE%2Bd39hZ9A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb09e4b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css

104.17.24.14

200 OK

1.5 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
IP
104.17.24.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (3201), with no line terminators
Size
1.5 kB (1541 bytes)
Hash
8e09ceb5490863a66cd2e83ca3d7e524
35e3d074516ec70c508d748f7ae01827bc0c28ba
cccbb374fd4cb6dcbac9df64456b49cb11530e7bafdac6c6c7e67ff2ed350db9

HTTP Headers

GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css; charset=utf-8
content-length: 1541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-c81"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9353481
expires: Wed, 13 Sep 2023 05:48:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BdFBF3A3DGFB6dQ3rGPtdtBAbm7SpwDc5l0zzLrE3YRKbl7%2FJHK2L0I3D6fBoa4MGfq%2FcYRuTNJdm2GcGflH2cNaqX%2FC1QzQqf83%2BB4UnwRQ85Pv9uOPdvGIbsRl48Ov%2BfhCYlb0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74f0fdeb3febb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/style.css

172.67.220.56

200 OK

9.0 kB

URL HTTP/2
play.robuxtip.org/images/style.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (40387), with no line terminators
Size
9.0 kB (8981 bytes)
Hash
e35c7d766926632f65aacb8a43a9adbb
032e087debcf64d45c391e3663fb94ac8399a65f
bc37197f96331d58ec82903b8224bf4e03ba66bf916c3f24c77b97ea148f4941

HTTP Headers

GET /images/style.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=50839
etag: W/"5d9ca488-c697"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3OwZJ60gffCJYD95xWhe6MgXQyUWTRj4YhVaJ%2B7NH4sqxCVxmrib%2FH8WXgv%2BbVIqlmOCfv4idpLKz9MS2aoo7nAmAtnN7ISVqhvrX4zbAz9KYuGLCICr0R4VQvadco9Hb6ZjIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeaf9cdb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/fancyselect.css

172.67.220.56

200 OK

839 kB

URL HTTP/2
play.robuxtip.org/images/fancyselect.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (3595), with no line terminators
Size
839 kB (839120 bytes)
Hash
294172698b9b1d469f811e5508c708a3
f9b5e2499c03fe3c77942889b14b2242a8fcf344
179e4f2e077f387c021292c8d66a6add8411823e50416708a36b90b9ed91e90d

HTTP Headers

GET /images/fancyselect.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4253
etag: W/"5d9ca488-109d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=afUUKn2nvzahSjf6n4zQZIZbonzKW%2FPB6tbwY%2Flntwd%2FNkPGxAs%2BB2%2BwQx5gUMkL2zV%2FtC0q0H1jnx3dmolsIXpip1PM2V1cTIIrfZi1KXGtNZq3pAzU4r50A9nN0vf9PyupbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeaf9cab4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/validator.min.js

172.67.220.56

200 OK

18 kB

URL HTTP/2
play.robuxtip.org/images/validator.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (5862)
Size
18 kB (18171 bytes)
Hash
ec6088eba2e6acdf587c14fb2a97219b
af5249086358c2ee5159704debbd733ebff71876
64935040dd8128e647a8a2518f95f564fe519369c25963f8a54c3d3fbe7011d1

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/validator.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-17a7"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IwPleQtFXH%2BIj9bRPAcnyOr1q%2FKX4NNLoIX5G8wzz5CpOMm%2FouJWc6ictAPo%2BqZlqyZjQnB6zcATXjad2dWcSBxDG7QPmYOrsUD81Sidm06sgkScwlMDtF7EtG%2B%2BeeVd7rAGhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb29f9b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sweetalert2.min.css

172.67.220.56

200 OK

3.4 kB

URL HTTP/2
play.robuxtip.org/images/sweetalert2.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (13988), with no line terminators
Size
3.4 kB (3428 bytes)
Hash
7ba57ba1250d38a61f064ebd1a742056
28e3e84281a145f6fe35987b746bf71ed7c0aaa8
7252641bc271399688693fc52d1218204d648af767641922ebe7936292b99d32

HTTP Headers

GET /images/sweetalert2.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-36a4"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C6xJYf1xFc97siiJQ26I3WO9HWzuwm8L3%2F7WqJyflbkfJIv0f7768udnDPypqtHMIOmqjMX9yGzXUSnj2EddyjWeRS2xfUz9ExWHEiuHDBccM3oxmYuKQ5SG9cPvKrIZ2yrY6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeae9c3b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/sweetalert2.min.js

172.67.220.56

200 OK

62 kB

URL HTTP/2
play.robuxtip.org/images/sweetalert2.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (20305), with no line terminators
Size
62 kB (61874 bytes)
Hash
8ba4015c04e4b42e561aec45abe81f99
a290aef89fff0039e184140fdffcf0ca9a9faf64
4ccb1ac6c48014bc684278905c5b05a00b329f7c0b0cbc32c9d75ac3813ee9e2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/sweetalert2.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-4f51"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6haxTt%2Ben3s91asLLwXx4japsczRD59stWwb%2FhAptQdCzUiO0Zj5gkmHVA6SEncP0zmybpIBfyM8e9cam3Bpze0ujHyub0Bg77JH136Y8o7i87noYNPDLWF9QH5HtT0J2WxFxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb19ecb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
de424c85b225196c5a35219b9e3ebd8e
85607bc7f8cd550eceab6a6c236b403ca91662f5
29fe2614f1d16a5e8c89f055ce08a45ea0d89e31f91b014e6cea52411a7902d3

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5497
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:32 GMT
Last-Modified: Fri, 23 Sep 2022 04:16:55 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 280

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
edd6c63988b69a64a51433c3fd91b0ba
a0a41a5403a2c397d70cfa267c1d6407250df043
c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
edd6c63988b69a64a51433c3fd91b0ba
a0a41a5403a2c397d70cfa267c1d6407250df043
c9b1efff4ebf41ad54d3137ee7a93b688c66765df99e387ae730b39abe2f115f

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 05:48:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.robuxtip.org/images/magnific-popup.css

172.67.220.56

200 OK

17 kB

URL HTTP/2
play.robuxtip.org/images/magnific-popup.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (6066), with no line terminators
Size
17 kB (17363 bytes)
Hash
6c6d3754adcbeaf7a96fbcf7abea6722
06822c25e7098060a86c54de08448a95b8322f1d
b77d7c8501b506c5e900af91c09750e6768f99d6709fe0584e9ed493b5825224

HTTP Headers

GET /images/magnific-popup.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7946
etag: W/"5d9ca488-1f0a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=28IilUhDXWVJa6YmOv0IEv9aaLr%2BLMD%2BJs0P4gc4Dm0FHk1qTjDZO9jZN%2F9ze%2Bz71iGhVMj6%2FLFsYwGxpTDWCq2B0QCjArHNB3wHJ5jd83D2IUbpJryRjhkdLZSgaJfsapMq3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeae9c4b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf

142.250.74.163

200 OK

18 kB

URL HTTP/2
fonts.gstatic.com/s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
TrueType Font data, 17 tables, 1st "GDEF", 7 names, Microsoft, language 0x409, type 1 string, Open SansRegular1.10;1ASC;OpenSans-RegularOpen Sans RegularVersion 1.10OpenSans-Regularhttp://ww\012- data
Size
18 kB (17789 bytes)
Hash
8c20320e2a77d984348f9e9aa7296b9d
0939a63b6a9982ab64f044dfc3a21dac2bca0499
0be48b762bdf588db02112492dfadcb3a098fad3ac5aa2ccc80568b799462c52

HTTP Headers

GET /s/opensans/v14/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://play.robuxtip.org
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 07:07:48 GMT
expires: Thu, 21 Sep 2023 07:07:48 GMT
cache-control: public, max-age=31536000
age: 168044
last-modified: Wed, 14 Jun 2017 16:46:31 GMT
content-type: font/ttf
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery.countto.js

172.67.220.56

200 OK

19 kB

URL HTTP/2
play.robuxtip.org/images/jquery.countto.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1043)
Size
19 kB (19231 bytes)
Hash
b6a9de22bd233894fe30f1a1d6a08892
dc1c96b0153e29811cffd3a111b3dc797f0a622a
b7eacaf8b4a838b7aeeef65e5a9c2b90300d3355d78975ae95aa6c99d7f9c14d

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery.countto.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3761
etag: W/"5d9ca488-eb1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BSNiwTgzsQGmEsnvOUrJqynfC%2BjSEZ10BIxZnywvosK%2BmLZAhOjiPK5%2BiOezFd%2FZUiSZ9a22dL6hZ6K%2By9lRy%2BUM5tjvDguw3dVOUosPdnaRLP3T3%2F7YX35iTgeZRMMn2TGdiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb19ebb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/custom-css.css

172.67.220.56

200 OK

19 kB

URL HTTP/2
play.robuxtip.org/images/custom-css.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1606), with no line terminators
Size
19 kB (19069 bytes)
Hash
48047e58c080600af99a82d0b569a3ad
077a6cd78050fc96818279dd7d747b8e9b7d6f66
85d93d729ec6d2406585040efba0e60af38f1fbbe36993a9db102aa6dc91f755

HTTP Headers

GET /images/custom-css.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1790
etag: W/"5d9ca488-6fe"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uq0N1LyX%2FLHBa1PIqIzRS4r%2Blzc5x4MrvYbroZwOrWEU%2FjNFN1FczJEg0M5g4XjxZR%2BoQOP%2BO%2F6MSdthxv5zG0wn4kV%2F2GgpZolTSZ9sxJbKMxgqD17lrbCJKSwldkXOvbGDyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeaf9d1b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

mtevor.com/cluster-v2/roblox-abx.js

172.96.187.226

200 OK

17 kB

URL HTTP/2
mtevor.com/cluster-v2/roblox-abx.js
IP
172.96.187.226:0
ASN
#32475 SINGLEHOP-LLC

File type
ASCII text, with very long lines (4802), with CRLF line terminators
Size
17 kB (16743 bytes)
Hash
2aca9625938f234f65beb9b5d20fe045
958ca5107d4f7b700b3835e54257b5b8575efacb
0f71537d032b7a4ec43ec95a4b6a92ef8c7839e533cb778a42930e42451bc98d

HTTP Headers

GET /cluster-v2/roblox-abx.js HTTP/1.1
Host: mtevor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ben10dittovsechoecho.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-powered-by: PHP/5.6.40
content-type: application/javascript
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
vary: Accept-Encoding
date: Fri, 23 Sep 2022 05:48:31 GMT
server: LiteSpeed
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2

play.robuxtip.org/images/bootstrap.min.css

172.67.220.56

200 OK

21 kB

URL HTTP/2
play.robuxtip.org/images/bootstrap.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65371)
Size
21 kB (20719 bytes)
Hash
92bacb4c4f0481f008724be69fac8c3d
1f703b4292e4c3a0b0938b101e5200f1c6642878
07358545d7b2930db9ee86f29eae9174cf85ae8f21e84d8fa04af7c2dedaf2e1

HTTP Headers

GET /images/bootstrap.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-1d990"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RdvZ4w46XNuUbFWzyirGm69utOfBeprOzUMrosAfsa6WelRzt8Ib0vh3BzsGUDRHRPQQF%2B5xoi5dNLzuTbLftYkfx5edEBDuAy4KKkdDGeEIaII8DQuL1AS%2BVjSevEO0sfhUwA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeae9c0b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
337bc17ad3f42a6fc2fb0b6ea8d66bb8
f1f1ca2528ade1334727ed3f212ad8e16ff5dd79
51712ea54a8a2ee6abc9f0abb941624add01797762f95a83ee8701804628f8da

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51712EA54A8A2EE6ABC9F0ABB941624ADD01797762F95A83EE8701804628F8DA"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10465
Expires: Fri, 23 Sep 2022 08:42:57 GMT
Date: Fri, 23 Sep 2022 05:48:32 GMT
Connection: keep-alive

s10.histats.com/js15_as.js

46.105.201.240

200 OK

4.4 kB

URL HTTP/2
s10.histats.com/js15_as.js
IP
46.105.201.240:0
ASN
#16276 OVH SAS

File type
HTML document, ASCII text, with very long lines (11440), with no line terminators
Size
4.4 kB (4364 bytes)
Hash
ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1

HTTP Headers

GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:46:53 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 1031602573
content-type: text/javascript
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11629
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 05:48:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11629
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 05:48:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11629
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 05:48:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11629
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 05:48:32 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11629
Expires: Fri, 23 Sep 2022 09:02:21 GMT
Date: Fri, 23 Sep 2022 05:48:32 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5936 bytes)
Hash
61059307f07edc4e2ba9d07a258bca43
370d166426ad83fc04ccb6e300238d8cb6ab644a
55ec802097ab49f275686e99844ff4a3b554c8998213bb9c3f0380709297c55b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5936
x-amzn-requestid: 39e79389-c158-4427-aae0-b1d0dc1d0377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VowElZoAMF2Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd1-2da28eb66f876af76158b090;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -DSp0__jaBzizsfagTtIpwhkPqkvjS1L6T17J0OS5W0QhZww03ywpw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:29 GMT
age: 27423
etag: "370d166426ad83fc04ccb6e300238d8cb6ab644a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11059 bytes)
Hash
9e125802119a2737820b343c4e9ecfb6
30ccc2dd2597b5b720d66c960ee8bd63c7115630
90cce372b2b8c89569fffc55de468bfc7cd4b7454ae7c55c48b7a846506b576e

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11059
x-amzn-requestid: 65fe1c05-a158-4ac2-8368-f26da119ef68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcDTgGV4oAMF0iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217f49-74fc5c511bee36fd11d6d2eb;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:14:17 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ArtxwEnLiPvfdnNGum0ZbXPBv8Xd6lR2-vWnBj7MnOIq4q3r6rswWQ==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:51 GMT
age: 27401
etag: "30ccc2dd2597b5b720d66c960ee8bd63c7115630"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948809a9-98f3-49af-9568-833cc0cfb149.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.5 kB (5533 bytes)
Hash
2644bb64610b60b23b7dff21736f7b4d
e95d1909750d36a9e426c170778985310cbfc4e4
e668fe1815310914cee8c5853fbcb3d0e48f6f0f8c2d07f7463e627f97153212

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F948809a9-98f3-49af-9568-833cc0cfb149.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5533
x-amzn-requestid: af64386b-45ae-47bb-a6fd-f80e306495df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCkMGVEIAMFfhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e1a-7e417f28422324ed2ddc85da;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fyCuR7eISu5Of0AcZBH5FOtHKRe-Nepnt52kqZtQm0tj1L7lAtGc8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 03:45:46 GMT
age: 7366
etag: "e95d1909750d36a9e426c170778985310cbfc4e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9892 bytes)
Hash
3056431736af42cc145a77dbc77c45a7
977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e
d299e38c678f4c4548cd2e7cf7ff1b07910b316bfc8b13c492b4fbee0a66b079

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9892
x-amzn-requestid: f1d435d6-ed01-46b6-8f36-615f07f8cac0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VpWGamoAMFppA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd5-2c3726b022bd389a156532c4;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ycp3xxTZqMDmPjKujrcqGRnuF0lKBH_avDsVSVASv_mU4tTkEfqoYw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 04:26:02 GMT
age: 4950
etag: "977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (8029 bytes)
Hash
02a682b4703bb9d6381c762726c05531
1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54
fb672de67420a239fe5d7e2588f640150ed29883fe2a46ded160385e3265004c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8029
x-amzn-requestid: 2fc5c63d-5cef-42f4-a6d2-b55f51c57af6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0tHjGoAMFcFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-73f2f78a2d1ca8fc666d2571;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 7DX67a-HmEh76IorINvRU61AKtSiimdPnHFnYeR2OJezZJ1_mJq0MA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 21:48:22 GMT
age: 28810
etag: "1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.0 kB (4999 bytes)
Hash
b577444b5b0cf15747fe28a9d7f22d53
e6097275af3204124c48aa0d876eba0d18b26e7e
0f57e130b23b87fa4e1f9c2a2beff54f1ca73d87a244442558209e378befef11

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa8822718-7784-42f7-9be3-17d81593a755.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4999
x-amzn-requestid: 6f7b073e-f199-4bfa-8f9c-6688dbfba15a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn7p7GyRIAMF1EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263fd8-566d8b3c1c25e3fa36259812;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:44:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: n4w6--Eta_zedQ8EOarLoCGZavQpadMCZnXlhGmQf4vgHZxyBKtRgw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:11:51 GMT
age: 27401
etag: "e6097275af3204124c48aa0d876eba0d18b26e7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

s4.histats.com/stats/0.php?4275781&@f16&@g0&@h4&@i1&@j1663912111617&@k155686&@l4&@mRoblox%20Robux%20Generator%202022&@n0roblox-abx.js=hildameti|template=PinkTong.xml|hildameti=ben10dittovsechoecho.blogspot.com|ben10dittovsechoecho.blogspot.com=direct|ref=direct|tags=roblox-abx.js&@ohttps%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-15353230&@b3:1663912112&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd&@w

192.99.13.63

200 OK

51 B

URL HTTP/1.1
s4.histats.com/stats/0.php?4275781&@f16&@g0&@h4&@i1&@j1663912111617&@k155686&@l4&@mRoblox%20Robux%20Generator%202022&@n0roblox-abx.js=hildameti|template=PinkTong.xml|hildameti=ben10dittovsechoecho.blogspot.com|ben10dittovsechoecho.blogspot.com=direct|ref=direct|tags=roblox-abx.js&@ohttps%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-15353230&@b3:1663912112&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd&@w
IP
192.99.13.63:0
ASN
#16276 OVH SAS

File type
ASCII text, with no line terminators
Size
51 B (51 bytes)
Hash
f292af2dc3f77080903e379bc43444e0
c183317f303809a437ca6d836349ba963058c71e
716c9e840f694b63c00f303f933e4e60d2a27bdb3cb650f13c83720383881fc2

HTTP Headers

GET /stats/0.php?4275781&@f16&@g0&@h4&@i1&@j1663912111617&@k155686&@l4&@mRoblox%20Robux%20Generator%202022&@n0roblox-abx.js=hildameti|template=PinkTong.xml|hildameti=ben10dittovsechoecho.blogspot.com|ben10dittovsechoecho.blogspot.com=direct|ref=direct|tags=roblox-abx.js&@ohttps%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-15353230&@b3:1663912112&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fplay.robuxtip.org%2Findex.html%3Ftrack%3DWyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 05:48:32 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 51
Connection: close

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56c6b5fd-d351-45b8-9f62-d5052869881a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10822 bytes)
Hash
948abf9bedd1bd67010284080ba06d01
dd94d525ad264856a0fdcb7a4b1faa2d68c3f68b
236639cc2279c6f269dd521796a087a40b43b252cb55faf3e4214cbdc8369a62

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56c6b5fd-d351-45b8-9f62-d5052869881a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 10822
x-amzn-requestid: 308978c4-679f-4bb6-bfd7-a81dc00ec3db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YoKcMG-kIAMFZKQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63265781-03f94c0a385ed28408de81c8;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 23:25:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9fh_DJXLHRaerYmgTGoVX3LRsMIgzf46bn48yzXp8Xdp8WippJExcg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 11:05:21 GMT
age: 67398
etag: "dd94d525ad264856a0fdcb7a4b1faa2d68c3f68b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

play.robuxtip.org/images/scripts.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/scripts.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=225
etag: W/"5d9ca488-e1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 23103
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HjH78%2Bhvrt3z616OzFFc5o1JlNj8OyhN1DpF%2F8%2BtOdh%2BlMo0%2FC5pYWfGBbH56QEyFzIESiq%2BovP9q6bd%2BMuQ9GnXgsqFnn5cT0b0iISI8J0X7C0dxxM%2FXKXDEe%2B4vMDScsYv0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb3a0eb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/main.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/main.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/main.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=38451
etag: W/"5d9ca488-9633"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1oq8Rh%2FfCNeNiWWdrPpxjtySPaMbO5yZ3hTZYbtIhvzAcKqrf7UAvDN%2BBM81EyJNUySeFP7ZfFrQ29yMaFjT5lkOtmM%2BauhrhU7xTE7B8KcguKd2cZoLDAcikOVBUwnjr2hGlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb3a0db4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery-3.2.1.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery-3.2.1.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery-3.2.1.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=268039
etag: W/"5d9ca488-41707"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P9KCsgJEfHfIPcY9zXHUk8P82CBVUU7UU4l2CVy8BbNxMqbd09cC6fjtzz8D5GN7dTpyKitY4y5v2aqcOXJrqMYl1cDWfqLUHIvI752jPs05%2BKd3AkAHO7x4W4Z7ib630GK9oA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb19e5b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/jquery-ui.min.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/jquery-ui.min.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/jquery-ui.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-30da8"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZMIqNe72C%2FoJjm%2BWbIOfXDmGISuunj8hSvUOgW98KWU%2FMeXH4GJZz3huI1MWud1cZ63aNhWmZhmYjUA0S%2BD%2FDnAu%2BasKRSIeuf2gEFKlEm4qZJLntd%2FQVt%2FokK2rdbcFWo0HDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb19e6b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ben10dittovsechoecho.blogspot.com/
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/html
last-modified: Mon, 27 Jun 2022 12:44:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 40374
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EO5MOX7M%2FF%2BupuMlUF3%2B73K7uPV1gPdoC%2BLl%2BLPXEaBiDhUyek4kuCCQeyy1rN8fiC8zVE5A37Wm5ISjAiGQkQxVXPfSsDgZEg3P9Z3pPLJ3HpQv%2F2qk6GJLo%2FT%2FCi2cvFq9wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdea795bb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700 HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=773
etag: W/"5d9ca488-305"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EN%2BmPHai4TQSwgvEIAiRYwPv5nBevkwh67HErNsBy2CNnLzH49ePbVAW45MBfhYPuI0u%2BJYgcIMqusQvP6pDNWywXc07tXzxfY%2FSprtK6VimLbMWTKPFy%2B4XhUTCIEGWcwVqBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeae9b9b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/com.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/com.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/com.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=17963
etag: W/"5d9ca488-462b"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p3%2BQTKmFCaOrOYti%2FXcUp1S7FMfMEVrwhl5g6y8zCad3YnxnAYcfzd%2BgTpo0oh3uKQJTH1QqjkV0VFmXw%2BqC6c1L4mmbV3JMx9ODMQlvVsgJ8EBDUzKWk9qb3UzBl6Z4Yq3KuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb29fab4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/form-scripts.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/form-scripts.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/form-scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1469
etag: W/"5d9ca488-5bd"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BGKH%2Fsg%2BFUn7ASa7Upce0Q%2FUf7jkJVbIjfMbDgboO9yOUK4Z4aI63ThNVljSAL37tCmKxD4t0PSpAniCiF8%2FG%2FpA%2F%2F80hktfA2R1tyXiG4AGM%2F0U%2BT8CBkNDruBozF72yBL5Ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb3a00b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/animate.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/animate.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/animate.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=68796
etag: W/"5d9ca488-10cbc"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C4BzptvpD7xNe6ZOl97vGkk7nX%2Fj9JVuzCqfwOL4otMV12G9Sudq1bAN0yXkA4%2ByQx9%2FcaWJmfW%2F5GyZLuD2gIHqvHtkv9UPN4i3Xt9ukiyd1gU8732Bwnnznda1G8TsGHrCYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeae9c2b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/fancyselect.js

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/fancyselect.js
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /images/fancyselect.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6778
etag: W/"5d9ca488-1a7a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fr%2Ba8TO8IAhJaO7oCQfkI9TQ6FhoyHwSScLoZcNWOED7YhijmMmRXtDI6kdWMkg0dQSJ12jZg81Nvxa789zOlgBWFM665lXnXZKVTYxHaI7x4NiWbHiAYMUFtYepQAsfk3SCOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeb19e7b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

play.robuxtip.org/images/font-awesome.min.css

172.67.220.56

200 OK

0 B

URL HTTP/2
play.robuxtip.org/images/font-awesome.min.css
IP
172.67.220.56:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/font-awesome.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtYWJ4LmpzIiwiaGlsZGFtZXRpIiwidGVtcGxhdGUiLCJQaW5rVG9uZy54bWwiLCJoaWxkYW1ldGkiLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJiZW4xMGRpdHRvdnNlY2hvZWNoby5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWFieC5qcyJd
Cookie: HstCfa4275781=1663909375114; HstCla4275781=1663911955931; HstCmu4275781=1663909375114; HstPn4275781=3; HstPt4275781=3; HstCnv4275781=1; HstCns4275781=2; c_ref_4275781=https%3A%2F%2Fhowdoyouget1millionrobuxforfree.blogspot.com%2F; username1Cookie=Chris Jericho; username2Cookie=Fausto Greco; username3Cookie=Priscilla; comment1Cookie=thank you so much .. works like a charm.. thanks admin..  c:; comment2Cookie=Thanks for this dude… at first i thought this is some shit again.. thanks a lot! .. :3 this is legit website; comment3Cookie=thanks..; timePosted11Cookie=266802; timePosted22Cookie=100891; timePosted33Cookie=68360
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 23 Sep 2022 05:48:31 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-6c3d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 509503
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SmRP7twNTHFpSOh4fze9hQyRKDxrjbrAymZOt6GOUCZ5b0csW5Vfn0pzUq%2FNxFqZ9vkdyoEdem%2BVcszSaRwXCxvZUK%2F%2FFyLg0TzRA0YZfdQkpE%2BGJe%2B%2BofAUrLKoGdnuHwukSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f0fdeae9bfb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (22)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations