firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 25 Sep 2022 05:14:51 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0dHut16fjf6cHoEkAaZXWH9lBuNizWBPB2HcxYcwJXNlRbQAvwpZTQ==
Age: 837
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3179
Expires: Sun, 25 Sep 2022 06:21:47 GMT
Date: Sun, 25 Sep 2022 05:28:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: G-b1yKkow9-Yp7VShEoB-2olcx1RGSbJZpcrtaouh_esIlSmcz-xuw==
age: 3214
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Sep 2022 05:28:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
funflexrobloxhacks.blogspot.ba/
302 Moved Temporarily 183 B URL HTTP/1.1 funflexrobloxhacks.blogspot.ba/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 3f0c018f4b0a3d8ea2f1d76d30b1955e
7e5ff8e34634cf23fd3880be6ac1ada8bbde671e
9ac5b60349495fd4ba1d08b79c9d374854dba59d5f0307340676d099cfd0e0b0
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: funflexrobloxhacks.blogspot.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: http://funflexrobloxhacks.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 25 Sep 2022 05:28:48 GMT
Expires: Sun, 25 Sep 2022 05:28:48 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 183
Server: GSE
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 25 Sep 2022 05:04:17 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 25 Sep 2022 05:06:19 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gcBFfajCp0YliTHcqJHlgWT_IpwgsnbWEob6tHD-mWaXGF7zIlIHKw==
Age: 1471
ocsp.digicert.com/
200 OK 471 B IP
Hash a7809de115ea73f8b61f3d20a9978493
01fc65a2b694d7aadd5204d21801e87b2b55b73e
72692486033feeb149424c59576c6c75b17228dfc89b4c369d2e17cc4bff3d52
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6504
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:48 GMT
Last-Modified: Sun, 25 Sep 2022 03:40:24 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: R/jO2Fy9S9x2ayad+7Ql5w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: z2zGWEKzU+bRfPz7jReOZ5wwPVg=
funflexrobloxhacks.blogspot.com/
301 Moved Permanently 183 B URL HTTP/1.1 funflexrobloxhacks.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ff6d3e240a2e1102b2f0c05a0ac2131f
8e902608177d2572b96fb096a57aec5afab5ee6d
57ccab2dc064f8cd9bcaa7d678e875e318b8686cbfcf50b4fbbb3ed94ba6fe73
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: funflexrobloxhacks.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://funflexrobloxhacks.blogspot.com/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 25 Sep 2022 05:28:49 GMT
Expires: Sun, 25 Sep 2022 05:28:49 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 183
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dde08ad6d0d33c288ad70cce74175fbb
de2d638241098268be6c8fc01b748fde38f1dd96
164fa18665323f6274da69ec244a59054ac277e17c5792a04eb2907758e0e586
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3379
Expires: Sun, 25 Sep 2022 06:25:09 GMT
Date: Sun, 25 Sep 2022 05:28:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3379
Expires: Sun, 25 Sep 2022 06:25:09 GMT
Date: Sun, 25 Sep 2022 05:28:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3379
Expires: Sun, 25 Sep 2022 06:25:09 GMT
Date: Sun, 25 Sep 2022 05:28:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3379
Expires: Sun, 25 Sep 2022 06:25:09 GMT
Date: Sun, 25 Sep 2022 05:28:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78aaf154-de5d-4fec-94c5-4e185b4c0cc1.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78aaf154-de5d-4fec-94c5-4e185b4c0cc1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7eba9d4ed7413abb8e8824cc86071b50
1ec47b0f11a2b1173a1dcd32d541e5680b0088b1
399622d6099137974fa30a332c145b45182a7be272523a325418c63bfe70e5a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78aaf154-de5d-4fec-94c5-4e185b4c0cc1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4320
x-amzn-requestid: 72d102a6-8552-473f-b3f8-99450722017d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--PmHEgIAMFXvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7730-7e4789b1723913e2500ea5f2;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4XK0s7000jxVbsu88-3ze_Mg_SqTKMDgAWKiLkc3ZCiiqGhS02Cn5w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 22:12:06 GMT
age: 26204
etag: "1ec47b0f11a2b1173a1dcd32d541e5680b0088b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6307cf78-7c68-41f1-9dfd-ba063eeb3f4b.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6307cf78-7c68-41f1-9dfd-ba063eeb3f4b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7bd3afd3069904500c28e9bb16587e8
a881666627e1077859ed1941cee576caf600d798
78a7b0a2127c583aba569abace503cff376cde67d5faa9a346c1494d91e8f3cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6307cf78-7c68-41f1-9dfd-ba063eeb3f4b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5172
x-amzn-requestid: d366d3e0-71d7-404c-a93b-3267852824ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_T5F5PoAMFqWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f78e5-52362b5f0dc1ee8951eebc07;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:38:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ean91lOEJLzLQFKy3gBuqD_G-BVw3SMuED20W6ixdkKYvVcMatdGJA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:39:23 GMT
age: 28167
etag: "a881666627e1077859ed1941cee576caf600d798"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dde08ad6d0d33c288ad70cce74175fbb
de2d638241098268be6c8fc01b748fde38f1dd96
164fa18665323f6274da69ec244a59054ac277e17c5792a04eb2907758e0e586
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16a0ebb5-2746-43ce-9354-d29ae28778f1.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16a0ebb5-2746-43ce-9354-d29ae28778f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75eb09cb0472d311d2deaf4475a2fb29
9e7b0fd5b7c45213e1808361867a254c8e313a30
c18626d0131533976be196823911d5146042e6bd8028389cb4f17a64ee0ec1e4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16a0ebb5-2746-43ce-9354-d29ae28778f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7690
x-amzn-requestid: e50abd36-e3d6-4177-ad5a-57ef7f743e1b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yv2HqHJqIAMFe9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63296a30-7de1ba3633620fed1eb26a04;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 07:22:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: x6m2265h0hSgCTluIqgbC-hSZiiyeqMR0qEwnYgXfjfxNa99trVEgA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 18:05:57 GMT
age: 40973
etag: "9e7b0fd5b7c45213e1808361867a254c8e313a30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Hash b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rN_8rm10Pxb0AUKW6ECfNulcYxBaS7FgGD15gT14dX-FlsGJfqahxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:19 GMT
age: 28291
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a9f4d93ea4a06628bc31a00a9c4e692
27f05479fd4fbe68993748fdb043850807ddebdd
31b0809297c7e8acbb46b544cf6f3f4ffaa6bda7a8896fe8678fbfc839a115ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11435
x-amzn-requestid: e1288aca-0375-4ce8-9daa-81afe23c9c5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_ETHE6oAMFqGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7881-01a836ab57a326356f838bfc;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X8xpMQCKuQGx46BrQ_851U0HhXIALy0k22WRO-zp8TuFhK0KaHItBw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:06 GMT
etag: "27f05479fd4fbe68993748fdb043850807ddebdd"
content-type: image/jpeg
age: 28304
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b8b1112-7394-4d92-9fc1-54f8e005817f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b8b1112-7394-4d92-9fc1-54f8e005817f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 716068d10c9e3a16d3a8e727992f71ec
f18edf7b5080b39e00bde335c16ca0f771428e8e
5991be1a009df210adc123f9f8081f669368a3a1891305717fc40ead172917a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b8b1112-7394-4d92-9fc1-54f8e005817f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10845
x-amzn-requestid: b819b750-c0b1-46b1-9e6c-010912fa87b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EzFpWoAMFxdA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7884-3671ba9f0fc6b3e52e25f8a7;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:08 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: F8HfbDS4Ki85iwI7IgBulH70M3NwK6_-lmATgGp2myUTSlJKCDiScw==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:39:26 GMT
age: 28164
etag: "f18edf7b5080b39e00bde335c16ca0f771428e8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
funflexrobloxhacks.blogspot.com/
200 OK 48 kB URL HTTP/2 funflexrobloxhacks.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (32023)
Hash 9af656a8415c0cdd2f8ad83d03bdc45c
fc9c93eba859da4934df7baea61aa99dfc326670
fa0465c2ae00c830adec68c13364ec80e4c1451513fddb0298a647aafe711476
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: funflexrobloxhacks.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sun, 25 Sep 2022 05:28:50 GMT
date: Sun, 25 Sep 2022 05:28:50 GMT
cache-control: private, max-age=0
last-modified: Sun, 25 Sep 2022 02:26:02 GMT
etag: W/"4be5a758029f0a9984b0aa87bd9e7eb1b9a6ade6bdb991657af434576d741c1c"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 47737
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1cff4f56be1b217fd676fff4644d9673
5ba2a68749b8a9a9d8a3863b18e8f896400a7660
8984cd65d1108783e8a05574eafe5471cc98f807e314ef009d104b9739413946
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/1416043673-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1416043673-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash c6aef9cbd2abf926a23970b70f8a24c2
78972b4f41a7d2580c383da41e3a472c4cfc647a
111111066b8f3fddcd24cedce8c4e8b93a1d9e9b8e3f5f2959172da5adda14b6
GET /static/v1/widgets/1416043673-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56913
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 04:10:30 GMT
expires: Mon, 25 Sep 2023 04:10:30 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 02:52:11 GMT
content-type: text/javascript
age: 4700
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 64b39684d4c80b63458f11ed8b8c5d17
6abc0bd0c0318d9e7a362eb3949bfe81a48c6343
c307464d222c4a9e1206586f0ebd7155de49baa84bbce8c8d0d4ce5e122cb076
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 64b39684d4c80b63458f11ed8b8c5d17
6abc0bd0c0318d9e7a362eb3949bfe81a48c6343
c307464d222c4a9e1206586f0ebd7155de49baa84bbce8c8d0d4ce5e122cb076
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 64b39684d4c80b63458f11ed8b8c5d17
6abc0bd0c0318d9e7a362eb3949bfe81a48c6343
c307464d222c4a9e1206586f0ebd7155de49baa84bbce8c8d0d4ce5e122cb076
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 64b39684d4c80b63458f11ed8b8c5d17
6abc0bd0c0318d9e7a362eb3949bfe81a48c6343
c307464d222c4a9e1206586f0ebd7155de49baa84bbce8c8d0d4ce5e122cb076
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 64b39684d4c80b63458f11ed8b8c5d17
6abc0bd0c0318d9e7a362eb3949bfe81a48c6343
c307464d222c4a9e1206586f0ebd7155de49baa84bbce8c8d0d4ce5e122cb076
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/proxy/pG23nw8vrL3DWAnlmlFQTdkbSE_ZSJXj2EAgvZfQgiVH_wj09jV1LkMkjvx822Tlcz1Pqkwcgb_4PHNRXAsQKleAKkZUktQcY-jOjBFVOXOu1byJQqSyXRCjnTWqWeqGcrbX=s72-w1200-c-h630-p-k-no-nu
400 Bad Request 1.6 kB URL HTTP/2 lh3.googleusercontent.com/proxy/pG23nw8vrL3DWAnlmlFQTdkbSE_ZSJXj2EAgvZfQgiVH_wj09jV1LkMkjvx822Tlcz1Pqkwcgb_4PHNRXAsQKleAKkZUktQcY-jOjBFVOXOu1byJQqSyXRCjnTWqWeqGcrbX=s72-w1200-c-h630-p-k-no-nu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash fbe36eb2eecf1b90451a3a72701e49d2
ae56ea57c52d1153cec33cef91cf935d2d3af14d
e8f2ded5d74c0ee5f427a20b6715e65bc79ed5c4fc67fb00d89005515c8efe63
GET /proxy/pG23nw8vrL3DWAnlmlFQTdkbSE_ZSJXj2EAgvZfQgiVH_wj09jV1LkMkjvx822Tlcz1Pqkwcgb_4PHNRXAsQKleAKkZUktQcY-jOjBFVOXOu1byJQqSyXRCjnTWqWeqGcrbX=s72-w1200-c-h630-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sun, 25 Sep 2022 05:28:50 GMT
server: fife
content-length: 1555
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1HcXaeAKX3xl4lNICuaTtRsVOgikVmZzjA5h8Bby9d0SyWEyqrAChOjttOsAxH4qkb5DLCRI6JltjDqZxIIOZ_vis8De2X2kWCE-4r4fwaotQ
200 OK 5.3 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1HcXaeAKX3xl4lNICuaTtRsVOgikVmZzjA5h8Bby9d0SyWEyqrAChOjttOsAxH4qkb5DLCRI6JltjDqZxIIOZ_vis8De2X2kWCE-4r4fwaotQ
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 234ca99b01f91511970dab2cec0bb64d
da411c0a61e5fba8b0e69e4d4dc00c42c9c8f314
e3162dc4b96d51fe168101a1d59330a47d5f111605f6cde9060aefb3cf9d04f2
GET /blogger_img_proxy/ANbyha1HcXaeAKX3xl4lNICuaTtRsVOgikVmZzjA5h8Bby9d0SyWEyqrAChOjttOsAxH4qkb5DLCRI6JltjDqZxIIOZ_vis8De2X2kWCE-4r4fwaotQ HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Mon, 26 Sep 2022 05:28:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 25 Sep 2022 05:28:50 GMT
server: fife
content-length: 5253
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0_VeF8JQTOyBqI6YDLoS7OVwrzPnnfmg8kLn9cNw6l31SFaTMb6vY7-doKfG8nHRfUPLBaByjpuZBlqnAE644ArG-Fp8hAFV3XX_7Wt_KdPA
200 OK 4.4 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0_VeF8JQTOyBqI6YDLoS7OVwrzPnnfmg8kLn9cNw6l31SFaTMb6vY7-doKfG8nHRfUPLBaByjpuZBlqnAE644ArG-Fp8hAFV3XX_7Wt_KdPA
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash c4b5461efc41b65db9677d838f3d9ad3
ec8090da61a1f9cf01d5c4ed2e441e9f6e001602
0bf33745eac25fbc76980a4939b604e3a996d37c3b4d77edd8ba0f1b10aca530
GET /blogger_img_proxy/ANbyha0_VeF8JQTOyBqI6YDLoS7OVwrzPnnfmg8kLn9cNw6l31SFaTMb6vY7-doKfG8nHRfUPLBaByjpuZBlqnAE644ArG-Fp8hAFV3XX_7Wt_KdPA HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Mon, 26 Sep 2022 05:28:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 25 Sep 2022 05:28:50 GMT
server: fife
content-length: 4384
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2dE0boar4u-FYmBWVx6A6jYdIpfKk10kKkjwVr_sDcWiK2XhssF-CZ1oOXgCXl4fxHk1PPWJf7Mb62V9IR7aiM-BSfxrfnK7_wBKagfRrqBZY
200 OK 4.2 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2dE0boar4u-FYmBWVx6A6jYdIpfKk10kKkjwVr_sDcWiK2XhssF-CZ1oOXgCXl4fxHk1PPWJf7Mb62V9IR7aiM-BSfxrfnK7_wBKagfRrqBZY
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 699fa76bdaad4d18bddb574e7cb28b7a
3c25f58390215637b546df2a34e020ee2bb03be2
1481d03d2477eb61562855b426700bd6bc47ab7c7354376f583a1f79041a5eeb
GET /blogger_img_proxy/ANbyha2dE0boar4u-FYmBWVx6A6jYdIpfKk10kKkjwVr_sDcWiK2XhssF-CZ1oOXgCXl4fxHk1PPWJf7Mb62V9IR7aiM-BSfxrfnK7_wBKagfRrqBZY HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Mon, 26 Sep 2022 05:28:50 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 25 Sep 2022 05:28:50 GMT
server: fife
content-length: 4246
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2_iFSQa2b_og61hbUsHlgV87ENaqKODk-pfo7Lcz1duwoeCLzm0LrqB_XcKgH59sqNNmRQvg9EydVS-s4xNRcAibzo_j2PaA5vgz3B8V_axZ0
404 Not Found 1.2 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2_iFSQa2b_og61hbUsHlgV87ENaqKODk-pfo7Lcz1duwoeCLzm0LrqB_XcKgH59sqNNmRQvg9EydVS-s4xNRcAibzo_j2PaA5vgz3B8V_axZ0
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 9fe85dcb3fe48e26d43227a130d47e6a
918db738002dda86a37aca5f2bece573f89d8084
57eb79ec23f95554cfee51062e26a0e62c8b095b030bf7aa4068894370e1052e
GET /blogger_img_proxy/ANbyha2_iFSQa2b_og61hbUsHlgV87ENaqKODk-pfo7Lcz1duwoeCLzm0LrqB_XcKgH59sqNNmRQvg9EydVS-s4xNRcAibzo_j2PaA5vgz3B8V_axZ0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/jpeg
x-content-type-options: nosniff
date: Sun, 25 Sep 2022 05:28:50 GMT
server: fife
content-length: 1187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1cff4f56be1b217fd676fff4644d9673
5ba2a68749b8a9a9d8a3863b18e8f896400a7660
8984cd65d1108783e8a05574eafe5471cc98f807e314ef009d104b9739413946
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 64b39684d4c80b63458f11ed8b8c5d17
6abc0bd0c0318d9e7a362eb3949bfe81a48c6343
c307464d222c4a9e1206586f0ebd7155de49baa84bbce8c8d0d4ce5e122cb076
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 14c4f50e0f41f858e858b124dcc866ec
1ad2814c77a84887c0f1547a775737e3e6c83f01
fa075971e9f184bf8d79929bbd7e981414d78f12ea06e3246ea4adfa2fbf4eeb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4613
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Last-Modified: Sun, 25 Sep 2022 04:11:57 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP
Hash 6e5577f6d5d5f592b59c4a00beaaa2c3
6f441641619ac55ae79d38b21ec9eee0288fec1c
74d3098f6eb279ff7cdbc84fafdd7b6bcafb8b1c1072db50459b399e505c9709
POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:50 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.robuxtip.org/images/gamebaglogo.png
200 OK 3.3 kB URL HTTP/2 play.robuxtip.org/images/gamebaglogo.png
IP
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f
GET /images/gamebaglogo.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bidk%2Bz3a81NRwTZR%2B6PFMMn4vxqRctPli713RkJasytXvLUw31lj05Cn5ygqVuvrr24iMnANNus9lwYmBDnIQSmzB%2F%2B%2BH%2BWTjMc8lCw8do7zpV6c1y3Rh%2FoKo6bxmn6y2%2F%2FFZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd64e6ab512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/header.png
200 OK 131 kB URL HTTP/2 play.robuxtip.org/images/header.png
IP
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size 131 kB (131285 bytes)
Hash 35e93538f31d67876a2cb38bf94279d8
49bf97732e9bffb5371ad60d024901b09d83651b
95c1de9315834de2ff3608a2dc048a6aedc273e665f9b54eb956523a81fc91df
GET /images/header.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: image/png
content-length: 131285
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-200d5"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aeO5ovs6dRsEeDqqjm2dDT4iuiTYeLj3Vaq8U90o7syS8%2Fg634ExAlDEG0xMUh4%2BKCOEGAk6Kt2LXmVWYnxDo%2FiXuzre8mYZnUexZXSGLkOCLrVhnic5LrRv5HJ8WZclqTVG4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd64e6bb512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/ft-1.png
200 OK 3.3 kB URL HTTP/2 play.robuxtip.org/images/ft-1.png
IP
File type PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced\012- data
Hash e84f0caa809a15b2aaa9cb93bbe6669a
22a330ad580aaa6b2232307a87b981adc7fbf38f
1f98c982fd0c9b5e6af138a4cb160f509bda9fcc7fa0a9463fa6cf11513c151f
GET /images/ft-1.png HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: image/png
content-length: 3340
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: "5d9ca488-d0c"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m7McHAFjmAaZ8%2Fs%2BS7DctA8u2xC79pAANC6TWkmMIUUziVmB3q%2B%2BkMcDBDHeDxcH1SEpgwNtnvxkD9hMbpf7g728cpN8h%2BVJwJQnpag%2Bz9Z60T3We6kPh%2BnmWX66aQL5lKk4xQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd64e6cb512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
200 OK 1.5 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css
IP
File type ASCII text, with very long lines (3201), with no line terminators
Hash 8e09ceb5490863a66cd2e83ca3d7e524
35e3d074516ec70c508d748f7ae01827bc0c28ba
cccbb374fd4cb6dcbac9df64456b49cb11530e7bafdac6c6c7e67ff2ed350db9
GET /ajax/libs/jquery-modal/0.9.1/jquery.modal.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css; charset=utf-8
content-length: 1541
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-c81"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9525100
expires: Fri, 15 Sep 2023 05:28:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIfvmG3aD9vgwNSZclV2HZdnbcL9p2DdFoj8y7A3D82EYMyNbH00vbpDsxXVzZbjwlF3YB4Uuf%2B5CAZPHrB3oox%2Fu93VfPJDikhYgQ7%2FQnYrZctR%2BzXGfhGiNM%2BNm6aGKr7XMzAG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 75015bd67a10b4f7-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js
200 OK 2.1 kB URL HTTP/2 cdn.jsdelivr.net/npm/js-base64@3.7.2/base64.min.js
IP
File type ASCII text, with very long lines (4802)
Hash 18914b05d782cca37716837edf14fa8a
c563d127cf718dd86389fdd007b4c51b6bb58dc3
4bded663a5f9ccaa1eb7c1692c1c7df756a7d0e037d19466979fb90c56fbefdf
GET /npm/js-base64@3.7.2/base64.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.7.2
x-jsd-version-type: version
etag: W/"1405-lMmxLE0z8/TnsipvbhQg5ckAA8Q"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Sep 2022 05:28:50 GMT
age: 5276511
x-served-by: cache-fra19165-FRA, cache-bma1682-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2068
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/1EpVtZKsCXY
IP
Hash 6e5577f6d5d5f592b59c4a00beaaa2c3
6f441641619ac55ae79d38b21ec9eee0288fec1c
74d3098f6eb279ff7cdbc84fafdd7b6bcafb8b1c1072db50459b399e505c9709
POST /s/gts1p5/1EpVtZKsCXY HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:51 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 7b6633694e6205c440ff600454d421d2
d8e715a8c2f66e09b51d973a89880e78632ca4ca
de9811cc7159aac6221de11dff48bde2ba4d3abfb3e74296b078b567664ce473
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Sep 2022 05:28:51 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "B5E10DC62D3A92969D138DE085CCFE86C6BA4409"
Expires: Sun, 25 Sep 2022 16:00:00 GMT
Last-Modified: Sun, 25 Sep 2022 04:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2080
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75015bd6dec5b512-OSL
play.robuxtip.org/images/jquery-ui.min.js
200 OK 891 kB URL HTTP/2 play.robuxtip.org/images/jquery-ui.min.js
IP
File type ASCII text, with very long lines (563)
Size 891 kB (891104 bytes)
Hash 0a631142c78aa03fcd011df0e1b49c19
169fc9f9ed27b51950181349637986bc04a9a237
39fa7df65aa0a81bfa652fe15af4ffb492863deaf98661baf7074da1f1702586
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery-ui.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-30da8"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JzNx1kQMqIRGmR4JlWpXPc5YlmoU9r9l7an1e2UxnmsEmME4H7HMZS97At%2Fsie38CW2%2BnDPX0PizrlYsw%2FhQRtm%2F5H8XcAOfSLLL3ZlIakXKM1Q0rmDkGshiXXhzwQbEVSlWQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd64e6fb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/sweetalert2.min.js
200 OK 9.8 kB URL HTTP/2 play.robuxtip.org/images/sweetalert2.min.js
IP
File type ASCII text, with very long lines (20305), with no line terminators
Hash 515699337f73331e752cca91347bc0ca
77ac93b82caaad4390640b58d49faf69a1847268
265ecf458f5e1825fd08d3cfe8ee824a7030e22094e969e6c48b541f591a192c
Analyzer Verdict Alert fortinet Phishing
GET /images/sweetalert2.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-4f51"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q9kJR2GyET6kvSRSWM6mraA4DeT46OF7Jw9Ww%2Bi5MVrGFwhJvNors2a0xF9RvpJT1jH7y29Hc7WxjGkvmecxXZBDX1DGGXrfcMh8%2BCn5%2BL1mj7MDYcOscVSWr2bnGYCR8rfCGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd65e79b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/validator.min.js
200 OK 4.1 kB URL HTTP/2 play.robuxtip.org/images/validator.min.js
IP
File type ASCII text, with very long lines (5862)
Hash 797262a92cfb0499911bc5d2e1a1a67e
68dbea468dcd6fdabcbebddc5d6a7c76c2c0e42b
38de5f51d665aac069adf31a54b0ee472ac71ddf1f0215dc71f70b04eccec86c
Analyzer Verdict Alert fortinet Phishing
GET /images/validator.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-17a7"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2LwwoCE14Sw57eArlbPm0UOAZfEAVn6GEWrJkP1FC2t%2FRdQ5lI16uIf6raP%2Bu7PLKpiVb8p6toLXla2CFbvpFI8azpVLkJs%2F8dTo2pd0XoaWdyKEwbK6EP6WWjq84KsAtBG5bQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd65e7ab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/sticky.js
200 OK 25 kB URL HTTP/2 play.robuxtip.org/images/sticky.js
IP
File type ASCII text, with very long lines (16920)
Hash f37b82c669688cf10ab603a8830ed132
e995b6bcec64ec32eb34257c66c2ad4ae5410c7a
0a0b5f08d0cf4533dfe5a1b6a1c7e0dd46ad3a965c0fcf03be0cb9d65356887b
Analyzer Verdict Alert fortinet Phishing
GET /images/sticky.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=20845
etag: W/"5d9ca488-516d"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Twf%2Fv0Q54Q3FocFDfKpNCCejynoGhgXtQbH9jKlgX5CxGh%2BN02PB0tu%2F5AORGotoat90FVXpLKlMLEgEBZw7%2BriMQapy8p3Bx%2FszRY2yZPYmz8Dgm37msynUweYr6k32yyAzNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd66e80b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash da681c2f112645651e5b32be2cfcd052
2e57e4163b8ed8ceebe8c6dde5ff1aa5efc7b946
302a7e1f8156051b7c793c61fbe3e81096374431e22bd9821b4aa38e1a5772f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Sep 2022 05:28:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.robuxtip.org/images/scripts.js
200 OK 19 kB URL HTTP/2 play.robuxtip.org/images/scripts.js
IP
File type ASCII text, with no line terminators
Hash 6fd3be561449a027fb61fbe114c5716c
f83661ec65cecd0952031ce2c9f914704d843145
0a361f0de8c33b9a82f912f39af72aa0db4efc46a4d17c13f814391c0d68cbe6
Analyzer Verdict Alert fortinet Phishing
GET /images/scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=225
etag: W/"5d9ca488-e1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 194722
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pfrSkBe%2Bmdr91%2FoqtefIdawO0GAPsfnq5hWlabxN6WxdVlqgMDq5hGLxg5JbDPL%2FY4BdgkQBQiieVUdRas6iyJXa6ei%2FFKo9jvfhy1l9rWxeNnH1UUabXU8qaGfhgvRJ%2B%2BquyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd66e87b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/com.js
200 OK 21 kB URL HTTP/2 play.robuxtip.org/images/com.js
IP
File type C source, Unicode text, UTF-8 text, with very long lines (15173), with no line terminators
Hash c0921b3d47dfbdc015b2849c50ce2832
5f27bc013ce3a4ad971066666d83126c5f14c93d
b9f4c291d940bbdb9da41a5e9244338cc5ec32781a98dea5674c2d84158599bd
Analyzer Verdict Alert fortinet Phishing
GET /images/com.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=17963
etag: W/"5d9ca488-462b"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UWstzjpUR4YQsOSQanKgGuhRLorwJEr25f6awMDAmTb%2FyIBLBWYyT%2FAk5XNB5maUQUZ%2FTIJl9ZkAcfd69h09%2FZ1TNe%2BdqSwA7Bb%2BvMQSPlBv%2FKbE4lBkV8nJsuUObulXyCAGtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd65e7bb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/jquery.countto.js
200 OK 4.2 kB URL HTTP/2 play.robuxtip.org/images/jquery.countto.js
IP
File type ASCII text, with very long lines (1043)
Hash 56d83f3c1a832c33d1059dfd201833f2
4451692f637ee26c82be87a91bdc3edc66380fd1
3f5967b0695fdd94c68e9d54a7964e5e816ad2d694e29b6949824a4bc50537c7
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery.countto.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3761
etag: W/"5d9ca488-eb1"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yaMIcnkxeZuHc2LPzLeq1%2BW%2B5c6yU6mxQmpvsrkgzPeKCq7RxYodZfUbkK0TEwgpIjABLHRxtzeygxZSKb144CpmKpowSKCsI0pz4KIlUPnywdr%2Fs1mFY%2B%2FyI%2F0zWP6bUv92iw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd65e78b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d60144b96f72539719011cc71dcaa7c2
02a0962fe84b3466d77542f7b1b42a9efcc84479
814e75d1f248cd7bdc505fabec42b103880ed89329940be06d039b84d1f1b95f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "814E75D1F248CD7BDC505FABEC42B103880ED89329940BE06D039B84D1F1B95F"
Last-Modified: Sat, 24 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14163
Expires: Sun, 25 Sep 2022 09:24:54 GMT
Date: Sun, 25 Sep 2022 05:28:51 GMT
Connection: keep-alive
s10.histats.com/js15_as.js
200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:22:36 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 380928796
content-type: text/javascript
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
play.robuxtip.org/images/fancyselect.js
200 OK 1.5 kB URL HTTP/2 play.robuxtip.org/images/fancyselect.js
IP
File type ASCII text, with very long lines (1254)
Hash a6b617e39b95fec36b4088b8c9927e1f
de66f9c05c2dc1842bad26155c18bc1f301e360c
488bc798548b933e216bcb5721f703f5007f2b59437366e687b1a5fc98388657
Analyzer Verdict Alert fortinet Phishing
GET /images/fancyselect.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=6778
etag: W/"5d9ca488-1a7a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=id4ZNnf2MT8%2B22MgC9GOJhTBU1%2BjiM0ROHZWPDouqP5QzEKMt2h6CsG4Dl1oRDwOLGgttw9uKN0X%2BeX4LoQtkeWSOTj6068JTrdhxOnvCV6lsPlivl15RRzlDKmfheOmHiIfHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd65e70b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c4875ff-4140-470a-943a-bc27f68957a5.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c4875ff-4140-470a-943a-bc27f68957a5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 00c09f267aacde9465a329542463b9e5
1534aa8a5158dfa9592d65e6fb761b41c0852c58
276ff24598159f62fd7333992575834f901eea7c75a228b9c12d1c049f1df558
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9c4875ff-4140-470a-943a-bc27f68957a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7642
x-amzn-requestid: b0fc9bea-7735-43c0-a176-eae4d5000a6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y2ZPtHajIAMF8zQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632c08ca-391092bd30ae5bf9692e93ba;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 07:03:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gc7lA-XfgIAhotpUdrOaihuA2nbdMY2zNiJSHZpSN3yKPaT-k93auQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 07:07:29 GMT
age: 80488
etag: "1534aa8a5158dfa9592d65e6fb761b41c0852c58"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
play.robuxtip.org/images/animate.css
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/animate.css
IP
GET /images/animate.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=68796
etag: W/"5d9ca488-10cbc"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7JudBWzTQSddTf%2Fjv5hP44ByPgL72es8B8r6yBa8Z83fLT6LXbR6NL%2BX86c9GUqQPYflfyJTBIfTj34d510xAFEb%2BKf34Qu9Mm0FVaQw06TSawpvFe06l%2BijEVaux9hFrXe2yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd61e51b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/jquery-3.2.1.js
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/jquery-3.2.1.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery-3.2.1.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=268039
etag: W/"5d9ca488-41707"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fui5HhJBKxVOa6Q0RLnJ9vG37KomclEjfzxmDdHlcudy3Pby2hJ94o9iPouf80D7hoQlB8JLH0VbseyqvG1t%2FsmxeRArXASaWYqkI1myQCvuGeUvQyBFhRWkE7PzslGiEvvfIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd64e6db512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/magnific-popup.css
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/magnific-popup.css
IP
GET /images/magnific-popup.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7946
etag: W/"5d9ca488-1f0a"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A10C6GFfmOxNXLJYSFhE9rdGIGAq80vdrSwmhlIZDt8ga%2FN2xV2lQrtEk8cxjkGp31gHGD7t6zMb22sBU495kKXN5SSHznnBA%2F0pvfEIDQjrMmeTehTNhIfIO5MD%2FVwlOYk02w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd62e57b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/style.css
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/style.css
IP
GET /images/style.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=50839
etag: W/"5d9ca488-c697"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CkLm0F0ogfg3jqCO%2B4CeBPTtJjpWqsM8OyA7115dKrYxLmvv6XE%2BF88oyHtEXus9VBe4%2B8iY9wpx3smMS1IwkW24BGkj9o5DpBsyt8ntBa%2Fydg0EMNg9IGSxLIMgOhijxadITw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd63e64b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/custom-css.css
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/custom-css.css
IP
GET /images/custom-css.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1790
etag: W/"5d9ca488-6fe"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XPndp8xMoZOyPL63c9YR6%2FrB1%2BnKPVGX3mA9IDjeP185VMxKf8Mz%2FMeIzQOlqnY25lpGyI7iY7zM37KpWkhusHzaqy6%2FiqfGdS7va6U%2BMvQ0R5XH0LhbKN3Bcvji0ylIgOgqJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd63e66b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700
IP
GET /images/css8a7c8a7c8a7c.css?family=Open+Sans:300,400,700 HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=773
etag: W/"5d9ca488-305"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZEKeU9C65aQK6YbpS5dXWeU8EEs60qPl%2FQO%2FU%2Bw0WfZk8m6wQfdxdYo7wldfmuwBvT5r2mjvI40NZdx9SbbyVD3x9au%2FCSonCvQjLpxh5GAyM22EskNepUEyYk%2BDGyVyRL8ewQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd61e4ab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/bootstrap.min.css
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/bootstrap.min.css
IP
GET /images/bootstrap.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-1d990"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CjOhEArkd16W04QTF35YE4Iftb%2F41Z9ATZsYekq4iJVNCQOO9J%2Fqx0ZeX99ta6tyWiSXbMA97hRs3vo88kZBhiSpeWSx7JWspDXjjGUZJXUCwsbSm2X5cGUstLWJeCkDSJgRZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd61e4cb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/jquery.magnific-popup.min.js
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/jquery.magnific-popup.min.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /images/jquery.magnific-popup.min.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-5297"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lKYm0LK11vVdDQRa8TScmGyRTmDCFeXMAnX0E544C2Vf0MSPOK9c4frSDV7CZjOYNvWBnDHO43vIlCpDEbnY4MFTrJO8HYfKE%2BKmWjKhNNQcq1vKvC9Jqa4XmkO5vzBF19YHtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd66e7fb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/font-awesome.min.css
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/font-awesome.min.css
IP
GET /images/font-awesome.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-6c3d"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uvqIlxkNPmKs4p5lIJBnqJpEz42ddxlUsNn2OTllRTWUtHA6HBXpb%2BuAYny3kgaBFFomM96BABr4w0lxEwO5uJUc58C1IZHx5tou8PZWAmxmpFMLk6Lhh6rjsVjnSvt1WxZzRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd61e4bb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/sweetalert2.min.css
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/sweetalert2.min.css
IP
GET /images/sweetalert2.min.css HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/css
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
etag: W/"5d9ca488-36a4"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B%2BYK7WHbB0d8CPxL9L94TZDuGiFR1cbJjTrpNMjjpqQY60zGV%2F99q3GeHz6iZnFW1JoHKRTv5JXp9%2BLyxC1IUU4SNpD0dk6ABSozmeh96hSYC1sqiMDTHpMoMkCfo1%2FJkegj%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd61e54b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/main.js
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/main.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /images/main.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=38451
etag: W/"5d9ca488-9633"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2F1Wog9B7dkESnbrWUhhAys409GeIUVciNeMs6jA%2BDKzfu8VxAH%2BZgzGwBa58EsBUkMv0jR0%2BzNm3OFUO3RVolvnQmJCEEeUjPFPghi98ou5JMvwHs5tdGy%2BdE5L%2BV3w70Cnyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd66e86b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mtevor.com/cluster-v2/roblox-crn.js
200 OK 0 B URL HTTP/2 mtevor.com/cluster-v2/roblox-crn.js
IP
GET /cluster-v2/roblox-crn.js HTTP/1.1
Host: mtevor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-powered-by: PHP/5.6.40
content-type: application/javascript
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
content-encoding: br
vary: Accept-Encoding
date: Sun, 25 Sep 2022 05:28:50 GMT
server: LiteSpeed
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
200 OK 0 B URL HTTP/2 play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
IP
Analyzer Verdict Alert fortinet Phishing
GET /index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://funflexrobloxhacks.blogspot.com/
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: text/html
last-modified: Mon, 27 Jun 2022 12:44:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZAhelHka2SE%2F%2Fya8naoEW6kVQs6OZ%2FZkHdxNBC%2FjGNmnM4YtebJKYOAUfHxO%2BzHsDGZ82Q914PXADQJuwsmSoOm7mY6M7wSO6Z7oTWk3Emvv%2FCJOeoPTsKV3clk5C1FzTv9zBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd59e10b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
play.robuxtip.org/images/form-scripts.js
200 OK 0 B URL HTTP/2 play.robuxtip.org/images/form-scripts.js
IP
Analyzer Verdict Alert fortinet Phishing
GET /images/form-scripts.js HTTP/1.1
Host: play.robuxtip.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://play.robuxtip.org/index.html?track=WyJyb2Jsb3gtY3JuLmpzIiwicmluYWV2YW5pZ21haWxjb20iLCJ0ZW1wbGF0ZSIsIlNFTy1FbGl0ZS1QcmVtaXVtLnhtbCIsInJpbmFldmFuaWdtYWlsY29tIiwiZnVuZmxleHJvYmxveGhhY2tzLmJsb2dzcG90LmNvbSIsImZ1bmZsZXhyb2Jsb3hoYWNrcy5ibG9nc3BvdC5jb20iLCJkaXJlY3QiLCJyZWYiLCJkaXJlY3QiLCJ0YWdzIiwicm9ibG94LWNybi5qcyJd
Cookie: HstCfa4275781=1664071580253; HstCla4275781=1664083675693; HstCmu4275781=1664071580253; HstPn4275781=3; HstPt4275781=5; HstCnv4275781=3; HstCns4275781=3; c_ref_4275781=https%3A%2F%2Fxonnekniocomprarobux.blogspot.com%2F; username1Cookie=Fausto Greco; username2Cookie=Ivo Zetticci; username3Cookie=Lia Piazza; comment1Cookie=works! FREAKING AAMZING!! 800000 Clash Royale Gems thanks! I was looking for this in a long time! .. =3; comment2Cookie=the most powerful tool ever! thank you thank you admin! 200000 Clash Royale Gems..; comment3Cookie=this website is giving some real stuff .; timePosted11Cookie=213379; timePosted22Cookie=82471; timePosted33Cookie=36216
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Sep 2022 05:28:50 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1469
etag: W/"5d9ca488-5bd"
last-modified: Tue, 08 Oct 2019 15:00:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 681122
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oULcFq6OSBmvvFKmsfGqFPROHZuJmQ85q%2FeBq%2FBqalSLdayfMWIaHG6Bdm2Q2MJuwSS0Oddg5%2FF8SBX8O0jfROrUjUiK0rDDTpw5GALQT7rVXhPlThK6p3mmfkI%2BMCFwZ1FN%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75015bd66e7cb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
142.250.74.161
151.101.85.229
104.18.20.226
23.36.76.226
46.105.201.240
93.184.220.29