| realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=735&0z0T=s&1L0T=&1zEf=w9m9&50T=&5TRcT=&5df=&5f=s&70T=9F%2Ae99f92TEem2%21O5O29E%21T2TfeTsH99H5Ef&7NdX=7If&E0T=9a%28esFmno&E1L0T=&EE=&EJIhH=7UH&EJIhm=-ZQO%2A6-%21F&ER0T=9%219%2AO%2As-e&ETU=QOe%21e&I1U=&IhfRR=O&J11Lz=O&L0T=&NH1SLf=7Nd&PpT=%21&PzLfIX=s&RfVPRN=J11L%3A%2F%2FR75N7kAp0U0Ip%2F&S5I.EE.fkL=&SLNL=&STzLR=&TfEhhh=&U0=OF%21%21-9s-%21me%2AHeFemsH&YNz1L=s&YzJL=s&bT=&bYRX=&dE1=ZlcdklMkkm%2FMRl8f4X8mfRdV%2FfIfkRXXIp4&dLaP=&dT1H=&dT1O=&dT7hd0I=&dTU=&fER0T=&htmlsrc=1&hzLd=s&kkdd=nn%7C3%7CHnA%2A9&pTLR=s&pTLREIz1=&z04f=OO%2A%21ke9-&z5TRcT=&zE=&zzNT=%7B%22zzEE%22%3A%22%22%2C%22zzE1S%22%3A%22%22%2C%22zz0L%22%3A%22%22%2C%22zzzE%22%3A%22%22%7D&eobd=&eoac=RvYbkNvbY&eoch=RvYbkNvbY&ure=1#undefined&acl=&aclp=&cl=&clp=&l2type=ola&lp=%7B%22wlstp%22%3A%220%22%7D&matchstring=&pvl=%7B%22nmerr%22%3A%221%22%7D&pvlp=&sbdrId=&verid=&acid=undefined&tchkpts=%7B%22prel2%22%3A1744980943672%7D&stime=1744980943672&l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F26PE6%253D%25262M%253D1%25262TM%253D%25262s6%253D%252644%253D%252646r%253DgQ_3_%25264Ots6%253D%25264Ps6%253D-3-fQf1o_%25264s6%253D-ku_1Ah07%25264zcwC%253DXrC%25264zcwh%253DoJgQfeo3A%252656%253D%25265DPy%253D%25266M4www%253D%2526DFWOt%253D1%2526DWzt%253D1%2526FCObtM%253DXFT%2526I6tP%253D1%2526I6tP4cWO%253D%2526M4Ps6%253D%2526OW4M%253DY-h-%2526Ots6%253D%2526PMBZPF%253DzOOt%25253A%25252F%25252FPX2FXVdIsrscI%25252F%2526T4O%253DJHETVHxVVh%25252FxPH9M%252521y9hMPTB%25252FMcMVPyycI%252521%2526T6OC%253D%2526T6OQ%253D%2526T6XwTsc%253D%2526T6r%253D%2526TtkZ%253D%2526W26PE6%253D%2526W4%253D%2526WWF6%253D%25257B%252522WW44%252522%25253A%252522%252522%25252C%252522WW4Ob%252522%25253A%252522%252522%25252C%252522WWst%252522%25253A%252522%252522%25252C%252522WWW4%252522%25253A%252522%252522%25257D%2526Ws%252521M%253DQQf3V_-o%2526XFTy%253DXcM%2526Xs6%253D-Af_--M-N64_hN3Q2QN-436N6M_61C--C24M%2526ZI6%253D3%2526ZWtMcy%253D1%2526b2ca44aMVt%253D%2526b6WtP%253D%2526btFt%253D%2526cOr%253D%2526cwMPP%253DQ%2526htmlsrc%253D1%2526kkdd%253DA9%25257C3%25257C9HA%25252An%2526rs%253DQA33o-1o3h_fC_A_h1C%2526sWs6%253D1%2526ts6%253D%2526wWtT%253D1%2526zOOtW%253DQ%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D&infr=1&twna=1 |  0.0.0.0 | | 0 B |
URL GET realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=735&0z0T=s&1L0T=&1zEf=w9m9&50T=&5TRcT=&5df=&5f=s&70T=9F%2Ae99f92TEem2%21O5O29E%21T2TfeTsH99H5Ef&7NdX=7If&E0T=9a%28esFmno&E1L0T=&EE=&EJIhH=7UH&EJIhm=-ZQO%2A6-%21F&ER0T=9%219%2AO%2As-e&ETU=QOe%21e&I1U=&IhfRR=O&J11Lz=O&L0T=&NH1SLf=7Nd&PpT=%21&PzLfIX=s&RfVPRN=J11L%3A%2F%2FR75N7kAp0U0Ip%2F&S5I.EE.fkL=&SLNL=&STzLR=&TfEhhh=&U0=OF%21%21-9s-%21me%2AHeFemsH&YNz1L=s&YzJL=s&bT=&bYRX=&dE1=ZlcdklMkkm%2FMRl8f4X8mfRdV%2FfIfkRXXIp4&dLaP=&dT1H=&dT1O=&dT7hd0I=&dTU=&fER0T=&htmlsrc=1&hzLd=s&kkdd=nn%7C3%7CHnA%2A9&pTLR=s&pTLREIz1=&z04f=OO%2A%21ke9-&z5TRcT=&zE=&zzNT=%7B%22zzEE%22%3A%22%22%2C%22zzE1S%22%3A%22%22%2C%22zz0L%22%3A%22%22%2C%22zzzE%22%3A%22%22%7D&eobd=&eoac=RvYbkNvbY&eoch=RvYbkNvbY&ure=1#undefined&acl=&aclp=&cl=&clp=&l2type=ola&lp=%7B%22wlstp%22%3A%220%22%7D&matchstring=&pvl=%7B%22nmerr%22%3A%221%22%7D&pvlp=&sbdrId=&verid=&acid=undefined&tchkpts=%7B%22prel2%22%3A1744980943672%7D&stime=1744980943672&l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F26PE6%253D%25262M%253D1%25262TM%253D%25262s6%253D%252644%253D%252646r%253DgQ_3_%25264Ots6%253D%25264Ps6%253D-3-fQf1o_%25264s6%253D-ku_1Ah07%25264zcwC%253DXrC%25264zcwh%253DoJgQfeo3A%252656%253D%25265DPy%253D%25266M4www%253D%2526DFWOt%253D1%2526DWzt%253D1%2526FCObtM%253DXFT%2526I6tP%253D1%2526I6tP4cWO%253D%2526M4Ps6%253D%2526OW4M%253DY-h-%2526Ots6%253D%2526PMBZPF%253DzOOt%25253A%25252F%25252FPX2FXVdIsrscI%25252F%2526T4O%253DJHETVHxVVh%25252FxPH9M%252521y9hMPTB%25252FMcMVPyycI%252521%2526T6OC%253D%2526T6OQ%253D%2526T6XwTsc%253D%2526T6r%253D%2526TtkZ%253D%2526W26PE6%253D%2526W4%253D%2526WWF6%253D%25257B%252522WW44%252522%25253A%252522%252522%25252C%252522WW4Ob%252522%25253A%252522%252522%25252C%252522WWst%252522%25253A%252522%252522%25252C%252522WWW4%252522%25253A%252522%252522%25257D%2526Ws%252521M%253DQQf3V_-o%2526XFTy%253DXcM%2526Xs6%253D-Af_--M-N64_hN3Q2QN-436N6M_61C--C24M%2526ZI6%253D3%2526ZWtMcy%253D1%2526b2ca44aMVt%253D%2526b6WtP%253D%2526btFt%253D%2526cOr%253D%2526cwMPP%253DQ%2526htmlsrc%253D1%2526kkdd%253DA9%25257C3%25257C9HA%25252An%2526rs%253DQA33o-1o3h_fC_A_h1C%2526sWs6%253D1%2526ts6%253D%2526wWtT%253D1%2526zOOtW%253DQ%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D&infr=1&twna=1 IP0.0.0.0:0
Requested byhttps://yfdpco.com/sk-park.php?pid=9PO15V947&dn=roblox.giving&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&requrl=http%3A%2F%2Froblox.giving%2F&al=en-US%2Cen%3Bq%3D0.5
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sr/754870121/SAFEFRAME.html?ule=735&0z0T=s&1L0T=&1zEf=w9m9&50T=&5TRcT=&5df=&5f=s&70T=9F%2Ae99f92TEem2%21O5O29E%21T2TfeTsH99H5Ef&7NdX=7If&E0T=9a%28esFmno&E1L0T=&EE=&EJIhH=7UH&EJIhm=-ZQO%2A6-%21F&ER0T=9%219%2AO%2As-e&ETU=QOe%21e&I1U=&IhfRR=O&J11Lz=O&L0T=&NH1SLf=7Nd&PpT=%21&PzLfIX=s&RfVPRN=J11L%3A%2F%2FR75N7kAp0U0Ip%2F&S5I.EE.fkL=&SLNL=&STzLR=&TfEhhh=&U0=OF%21%21-9s-%21me%2AHeFemsH&YNz1L=s&YzJL=s&bT=&bYRX=&dE1=ZlcdklMkkm%2FMRl8f4X8mfRdV%2FfIfkRXXIp4&dLaP=&dT1H=&dT1O=&dT7hd0I=&dTU=&fER0T=&htmlsrc=1&hzLd=s&kkdd=nn%7C3%7CHnA%2A9&pTLR=s&pTLREIz1=&z04f=OO%2A%21ke9-&z5TRcT=&zE=&zzNT=%7B%22zzEE%22%3A%22%22%2C%22zzE1S%22%3A%22%22%2C%22zz0L%22%3A%22%22%2C%22zzzE%22%3A%22%22%7D&eobd=&eoac=RvYbkNvbY&eoch=RvYbkNvbY&ure=1 HTTP/1.1
Host: realtimesearchresults.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yfdpco.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| |  185.53.177.20 | 200 OK | 2.4 kB |
IP185.53.177.20:443 ASN#61969 Team Internet AG
CertificateIssuerLet's Encrypt Subjectroblox.giving Fingerprint03:43:57:C8:AA:09:AC:92:00:00:F1:C5:09:99:9F:DE:78:96:AD:33 ValidityTue, 11 Mar 2025 12:31:46 GMT - Mon, 09 Jun 2025 12:31:45 GMT
File typeHTML document, ASCII text Hashb26235f4b3559b667570127a58194560 6e8edf521402f3cada86bf0a69c4e62b855a9792 76a9e0de30aac3c2c3be4dbb62776c3b7db3f2c550b1c8fade6c5d8897b16448
GET / HTTP/1.1
Host: roblox.giving
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":8443"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 18 Apr 2025 12:55:41 GMT
server: Caddy, Caddy
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_syAhrx419wFWnkp9OvHWitMdxcYBHyd5jGffW+c+FiPWOD6eOEFb/uu1ZBoWTyUe+pOAp+BKP4ezczhLEeFQFg==
x-buckets: bucket102,bucket077
x-domain: roblox.giving
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-redirect: skenzo
x-subdomain:
x-template: tpl_CleanPeppermintBlack_twoclick
content-length: 1097
X-Firefox-Spdy: h2
|
|
| yfdpco.com/sk-park.php?pid=9PO15V947&dn=roblox.giving&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&requrl=http%3A%2F%2Froblox.giving%2F&al=en-US%2Cen%3Bq%3D0.5 |  208.91.196.46 | 200 OK | 4.6 kB |
URL GET yfdpco.com/sk-park.php?pid=9PO15V947&dn=roblox.giving&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&requrl=http%3A%2F%2Froblox.giving%2F&al=en-US%2Cen%3Bq%3D0.5 IP208.91.196.46:443 ASN#40034 CONFLUENCE-NETWORK-INC
CertificateIssuerLet's Encrypt Subjectyfdpco.com Fingerprint11:27:A7:25:C2:B3:A2:D1:26:CC:50:AF:91:B3:7E:94:9B:1C:B6:C3 ValidityMon, 03 Mar 2025 16:23:29 GMT - Sun, 01 Jun 2025 16:23:28 GMT
File typeHTML document, ASCII text, with very long lines (4458) Hash64b677ce7251f52fca8e8dc20afef6d2 989aebd54a9d647575281b57efe1834cffd88204 1dbc446657cdf09d83c8c7f5e9f4acf82d09c8713818df14f5839fa1a004fa0a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sk-park.php?pid=9PO15V947&dn=roblox.giving&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&requrl=http%3A%2F%2Froblox.giving%2F&al=en-US%2Cen%3Bq%3D0.5 HTTP/1.1
Host: yfdpco.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roblox.giving/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 18 Apr 2025 12:55:36 GMT
Server: Apache
Referrer-Policy: no-referrer-when-downgrade
Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")
Content-Length: 4625
Keep-Alive: timeout=5, max=112
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| roblox.giving/favicon.ico | 185.53.177.20 | 200 OK | 0 B |
URL GET roblox.giving/favicon.ico IP185.53.177.20:443 ASN#61969 Team Internet AG
CertificateIssuerLet's Encrypt Subjectroblox.giving Fingerprint03:43:57:C8:AA:09:AC:92:00:00:F1:C5:09:99:9F:DE:78:96:AD:33 ValidityTue, 11 Mar 2025 12:31:46 GMT - Mon, 09 Jun 2025 12:31:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: roblox.giving
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roblox.giving/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":8443"; ma=2592000
content-type: image/vnd.microsoft.icon
date: Fri, 18 Apr 2025 12:55:41 GMT
etag: "d98yu67of2tb0"
last-modified: Thu, 17 Apr 2025 13:58:57 GMT
server: Caddy, Caddy
vary: Accept-Encoding
content-length: 0
X-Firefox-Spdy: h2
|
|
| l.cdn-fileserver.com/bping.php?prid=8PR11258V&crid=848515096&vgd_rpth=%2Fola&mspa=0&vgd_cdv=O1646&ugd=4&lper=100&requrl=http%3A%2F%2Froblox.giving%2F&ssld=%7B%22QQNN%22%3A%22%22%2C%22QQN75%22%3A%22%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22%22%7D&gdpr=0&wshp=0&vgd_tsce=L838&vgd_l2type=ola&vgd_oresf=one&vgd_setup=c21&cid=8CU6073RK&vi=1744980943652676302&wsip=170762314&vgd_cage=1&lf=6&r=1744980943176&vgd_oreqf=one&vgd_wlstp=0&vgd_len=456&vgd_end=1 | 188.114.97.1 | 200 OK | 43 B |
URL GET l.cdn-fileserver.com/bping.php?prid=8PR11258V&crid=848515096&vgd_rpth=%2Fola&mspa=0&vgd_cdv=O1646&ugd=4&lper=100&requrl=http%3A%2F%2Froblox.giving%2F&ssld=%7B%22QQNN%22%3A%22%22%2C%22QQN75%22%3A%22%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22%22%7D&gdpr=0&wshp=0&vgd_tsce=L838&vgd_l2type=ola&vgd_oresf=one&vgd_setup=c21&cid=8CU6073RK&vi=1744980943652676302&wsip=170762314&vgd_cage=1&lf=6&r=1744980943176&vgd_oreqf=one&vgd_wlstp=0&vgd_len=456&vgd_end=1 IP188.114.97.1:443
Requested byhttps://yfdpco.com/sk-park.php?pid=9PO15V947&dn=roblox.giving&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&requrl=http%3A%2F%2Froblox.giving%2F&al=en-US%2Cen%3Bq%3D0.5 CertificateIssuerGoogle Trust Services Subjectcdn-fileserver.com Fingerprint43:ED:FF:6E:21:69:65:E5:72:32:95:48:3B:14:69:52:B1:5F:4B:CF ValidityTue, 08 Apr 2025 12:32:30 GMT - Mon, 07 Jul 2025 13:29:41 GMT
File typeGIF image data, version 87a, 1 x 1 Hash6f1d74c7168076c7666246504a8c03f2 00656377deb1a4393e0cf0055385b08b2b81b46c 8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde
GET /bping.php?prid=8PR11258V&crid=848515096&vgd_rpth=%2Fola&mspa=0&vgd_cdv=O1646&ugd=4&lper=100&requrl=http%3A%2F%2Froblox.giving%2F&ssld=%7B%22QQNN%22%3A%22%22%2C%22QQN75%22%3A%22%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22%22%7D&gdpr=0&wshp=0&vgd_tsce=L838&vgd_l2type=ola&vgd_oresf=one&vgd_setup=c21&cid=8CU6073RK&vi=1744980943652676302&wsip=170762314&vgd_cage=1&lf=6&r=1744980943176&vgd_oreqf=one&vgd_wlstp=0&vgd_len=456&vgd_end=1 HTTP/1.1
Host: l.cdn-fileserver.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yfdpco.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 18 Apr 2025 12:55:43 GMT
content-type: image/gif
content-length: 43
accept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
cache-control: max-age=0, no-cache, no-store
expires: Thu, 17 Apr 2025 12:55:43 GMT
pragma: no-cache
via: 1.1 google
strict-transport-security: max-age=63072000
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 93245171fb4d0b49-OSL
X-Firefox-Spdy: h2
|
|