URL User Request GET HTTP/1.1IP 145.14.144.18:80
ASN#204915 Hostinger International Limited
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7218) Hash96bce92dd1324139943ed1dd579f76a6 a65eb0ac9ee247b1a1d631542ec9f57d655b8a45 effd8b5b34b20f55a1911a5ac9e2d8e256cd03e1352d7bd696f04124b0603d87
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: roblox-admin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 17:49:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: awex
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Request-ID: fc0f342bb104b85dba7486e87b85cd20
Content-Encoding: gzip
|
| www.000webhost.com/static/default.000webhost.com/images/powered-by-000webhost.png |  104.17.5.108 | 200 OK | 1.7 kB |
URL GET HTTP/2www.000webhost.com/static/default.000webhost.com/images/powered-by-000webhost.png IP104.17.5.108:443
CertificateIssuerSectigo Limited Subject*.000webhost.com FingerprintAF:3B:64:B8:97:36:96:8E:73:0C:F8:9C:49:20:6C:B3:09:39:3F:6E ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hashc897608d31a25b99bb376bf5c7eb35e2 ce3c13973a8430ea1481550cfba7d95f98059a34 d8fc3b9494a6c353542a977b11c24ecc545434933f797c2749490c93c6f0ad41
GET /static/default.000webhost.com/images/powered-by-000webhost.png HTTP/1.1
Host: www.000webhost.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://roblox-admin.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 17:49:51 GMT
content-type: image/webp
content-length: 1708
cache-control: public, max-age=2592000
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2785
content-disposition: inline; filename="powered-by-000webhost.webp"
vary: Accept
etag: "6614f805-ae1"
expires: Sat, 25 May 2024 17:49:51 GMT
last-modified: Tue, 09 Apr 2024 08:10:45 GMT
cf-cache-status: HIT
age: 958925
accept-ranges: bytes
server: cloudflare
cf-ray: 87a02c0bcc8f56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
| roblox-admin.com/style.css | 145.14.144.18 | 200 OK | 776 B |
URL GET HTTP/1.1roblox-admin.com/style.css IP145.14.144.18:80 ASN#204915 Hostinger International Limited
Hash46b74465c7d6036e97730015cdb0aa45 94b7bfa8fa7896a1e5c584a57222922e8cd44301 b40c2866cec42fd2ba5c9ce3e627f2cf492a92bf2235d9a6741b6f454af4c015
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /style.css HTTP/1.1
Host: roblox-admin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://roblox-admin.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 Apr 2024 17:49:51 GMT
Content-Type: text/css
Content-Length: 776
Connection: keep-alive
Last-Modified: Sun, 20 Aug 2023 23:10:59 GMT
Accept-Ranges: bytes
Server: awex
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Request-ID: b573f640dd8e0097244c001a6b813b4b
|
| roblox-admin.com/favicon.ico | 145.14.144.18 | 404 Not Found | 6.1 kB |
URL GET HTTP/1.1roblox-admin.com/favicon.ico IP145.14.144.18:80 ASN#204915 Hostinger International Limited
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7222) Hasha89fd66d3cc4ae7b469ec611317cebe7 e6633f25136827f057bfb293cf64cdad5955f254 a0b0f284e4a2b29dae8110e9fefbcc27c11eeba177cb93bdea9af10f07c87d0f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: roblox-admin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://roblox-admin.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Thu, 25 Apr 2024 17:49:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: awex
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Request-ID: d96c783a995f058d2151c71e0369ca4c
Content-Encoding: gzip
|