{"report_id":"07f69ce5-f0b3-4d3a-893b-fe685a6538e9","version":6,"status":"done","tags":[],"date":"2026-01-13T13:22:07Z","url":{"schema":"https","addr":"gorobux.live","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"ip":{"addr":"104.21.34.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gorobux.live/","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"title":"GO-ROBUX","dom":{"size":7845,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (582)","md5":"60dfcfd2bb7ab7d082f43c91914399b1","sha1":"c178097a1082e318d2c3d9c0406401fb44da4ab4","sha256":"8143e6ebe766cd58e5f6d62dc291353ee794e25131eba91e3e98364c31be206d","sha512":"8000270c11874980f766b18880c3e5962d78db4d56a196b9316b80bb89cb6a53a93ea1f48c738300ce2970ed03775efc992971716cb96651de178849a2463b9e","ssdeep":"192:nMxBqUpnBmM/49B6ZzFEm0YrYyJQ6iUN0L6WlR4VcT:mFEcC","tlshash":"e5f1965ea9e70167601391a02ffb435e3b689013c20bcd5d3bdea394ef859e58582788","dom_hash":"domhashf8c51323d96f9c728ceb285458ea2d3f","first_seen":"2026-01-13T13:22:28.45581Z","last_seen":"2026-01-13T13:22:28.45581Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gorobux.live","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"ip":{"addr":"104.21.34.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T13:22:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"gorobux.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"gorobux.live","ip":{"addr":"172.67.198.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":3,"received_data":13299,"sent_data":1552,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img1.wsimg.com","ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":58983,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":209892,"sent_data":868,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":695,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":8432,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Smart Ad Server","description":"Smart Ad Server is an adserving and RTB platform.","website":"https://smartadserver.com","common_platform_enumeration":"","icon":"Smart Ad Server.svg","categories":["Advertising"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":62352,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":878,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gorobux.live/","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"ip":{"addr":"172.67.198.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fce3816f07800e8ea3875bca219308d","sha1":"2343c7e0daa8d9e5ce55751eb490bb7fd1152171","sha256":"278de7b5a9960671e0b04ca8b932bd90d359cc472db9bed1763e0c194325ca9a","sha512":"a97bd56ad7ce80a12a7976e1b42db660ed20317de3a377a5b441966dfd2633134ffddd280f94b3c8da486c00059216560142947333d68017361fdb04cd830723","ssdeep":"","tlshash":"44f0611cd0bb51638c3721a49657c1641d0129432503cf44bf2dc1529ff0ca2d98d9fe","size":490,"data":"","first_seen":"2026-01-13T13:22:28.46136Z","last_seen":"2026-01-30T20:24:24.248728Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorobux.live/","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"ip":{"addr":"172.67.198.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e96c9d90569b5e49ebe86cd06027ea1","sha1":"818040d2d996443e160ed94358f0cef855462645","sha256":"ad26c1e58e2ca5d82359e5966353acb7c7a5b3131faec5a183a46643df1dc882","sha512":"f20efa86410b76a949bdd99df853382dbe73449816dc8deeb734c493e75903f4a52a05eae2a8c79f62e0dbc05aa68fd945971010b41465ffbbf1d0fdc0bdcede","ssdeep":"","tlshash":"6de0c00dd0190082132588443211595fb71ac2fac3481c9ec3048c3a55df01bffad590","size":361,"data":"","first_seen":"2026-01-13T13:22:28.462271Z","last_seen":"2026-01-13T13:22:28.462271Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b309239dc60d45e344f4d49a2c5f041","sha1":"c3f931166c53c402c065d8d63119f1009bb30ccf","sha256":"aed4593b11665f063ca6e5e6184435777c74615f5b5991ccdf4acfb8b08e2431","sha512":"4486905b59f275f398b0ffb6aa63dd92662a12d674861b2464a11797f6d0c322df6504f16dbd7c67b3562a9af55e32f344ee8ebc6b5dea2af869630099341a37","ssdeep":"1536:CzSGh6DmEMRNJHY/vbV4vlzH9UOa3mTM+xLxCLuf:8N9Y/ZE1f","tlshash":"33a3a598f6a1f07142e76165412f010bf379a966b0aed0d4e725e8f4adf84ce8173f29","size":104464,"data":"","first_seen":"2025-10-08T00:41:42.369445Z","last_seen":"2026-06-21T14:49:19.309354Z","times_seen":25016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gorobux.live/","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"ip":{"addr":"172.67.198.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T13:21:45.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorobux.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 12:27:39 GMT","end":"Wed, 11 Mar 2026 13:25:13 GMT"},"fingerprint":{"sha1":"25:B8:9C:C6:B3:60:7E:82:D0:E7:C8:AD:55:32:A2:AD:7B:38:C1:B2","sha256":"C0:B4:62:78:C1:9B:29:A7:F7:01:F4:1F:5C:EE:5A:29:EB:30:0E:8F:F6:D2:43:9D:48:AC:12:A1:99:94:F1:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gorobux.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 13:21:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 19 Aug 2025 23:35:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=syWlWVSk7YdZEfRsbmqZO8c2vB86JXhOMRwuOikGBatLA70pd9cF%2B8Ka5I3KDGqpKMjLI9VMCbJ5qAaW2yozk7ACCnYDNW%2BlrO0gdA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bd532d42893723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8100,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (461), with CRLF line terminators","md5":"c2414f9b2c843c3c6c2dade7bdc178d9","sha1":"d28ccde2732b7d203f37c387a0884ea71ecf7199","sha256":"cb2b705467b7082e88d7066c2581ba977b62b15740002d151b93daab0162a7a9","sha512":"31a02f15845510f392a82d2c6bb7dbe91403ebc296734fff8cd1c5f4e1cec799efb17e542dbbb8fa68a6fd27af03623ac8d921cfde837b287e5e04bae3443f1c","ssdeep":"96:WEpNFPGlMwdU/nYlqXn0X/68y0X9hVFi5k21WlRsdVk:WEpuFK/YlqXn0ic7VFi5k21WlR4Vk","tlshash":"74f1446aa5820167503393a19fe3439eff984023c607875d77dea3966fb59e0c193e8c","first_seen":"2026-01-13T13:22:28.457341Z","last_seen":"2026-01-13T13:22:28.457341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":62,"dns":48,"connect":1,"send":0,"wait":611,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"gorobux.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gorobux.live/cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"ip":{"addr":"172.67.198.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gorobux.live/","date":"2026-01-13T13:21:46.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorobux.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 12:27:39 GMT","end":"Wed, 11 Mar 2026 13:25:13 GMT"},"fingerprint":{"sha1":"25:B8:9C:C6:B3:60:7E:82:D0:E7:C8:AD:55:32:A2:AD:7B:38:C1:B2","sha256":"C0:B4:62:78:C1:9B:29:A7:F7:01:F4:1F:5C:EE:5A:29:EB:30:0E:8F:F6:D2:43:9D:48:AC:12:A1:99:94:F1:1C"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: gorobux.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gorobux.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Tue, 13 Jan 2026 13:21:46 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCQ%2FE2IGjXx791cecXJJ%2Br55bP6FYcqNt5o%2BSTOUoekk1kFgIz%2BxnxTPikdTn3QxQc0CHFPpd5GtdoBW9pLxPtL44KC4HFEr2nq9Gg%3D%3D\"}]}\r\ncf-ray: 9bd532d8faeb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"12bc9fcd7f59bd4a0c74e0477ccbad55","sha1":"9c866d208d2bc04fdc136dbc1fef2e889beb9cbf","sha256":"cdc8b52c9402b72ef9c698027c0d2ea63058ed98b832a31d3ac57c9e7f8b35ed","sha512":"ca540a17b3dbf25d336c46d68cc6d5a1251a697d81eae1ec8caf8ffd02154c408327982b8d2f17ccd67e897a40e632a5c41630ff6c85e95a82cb608a29237b31","ssdeep":"","tlshash":"1531309246e10a29d153849072c2bb163a8c9843da4fcd1577e966a9cfcbe938d5334c","first_seen":"2023-03-07T23:05:21Z","last_seen":"2026-08-06T11:48:18.437054Z","times_seen":2527,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"gorobux.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorobux.live/","date":"2026-01-13T13:21:46.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gorobux.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: A9Ko66lPSIUcOwBNfQeXk3KeQXvRnPRNg9fyvp4kb/5LY0GBhVo4CI8GD1U5PWTVaGaHIOQDRMQ=\r\nx-amz-request-id: P0EK3P0FS4VX9XPC\r\nlast-modified: Tue, 07 Oct 2025 23:54:33 GMT\r\netag: \"6b309239dc60d45e344f4d49a2c5f041\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.0\r\nx-amz-version-id: 4tM7Y.UKy95ItOxUC5iSZfPs0Qcg_77y\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Tue, 13 Jan 2026 13:51:46 GMT\r\ndate: Tue, 13 Jan 2026 13:21:46 GMT\r\ncontent-length: 21133\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":104464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6b309239dc60d45e344f4d49a2c5f041","sha1":"c3f931166c53c402c065d8d63119f1009bb30ccf","sha256":"aed4593b11665f063ca6e5e6184435777c74615f5b5991ccdf4acfb8b08e2431","sha512":"4486905b59f275f398b0ffb6aa63dd92662a12d674861b2464a11797f6d0c322df6504f16dbd7c67b3562a9af55e32f344ee8ebc6b5dea2af869630099341a37","ssdeep":"1536:CzSGh6DmEMRNJHY/vbV4vlzH9UOa3mTM+xLxCLuf:8N9Y/ZE1f","tlshash":"33a3a598f6a1f07142e76165412f010bf379a966b0aed0d4e725e8f4adf84ce8173f29","first_seen":"2025-10-08T00:41:42.369445Z","last_seen":"2026-06-21T14:49:19.309354Z","times_seen":25016,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgur.com/XGsNdcd","fqdn":"imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gorobux.live/","date":"2026-01-13T13:21:46.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /XGsNdcd HTTP/1.1\r\nHost: imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gorobux.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"95f34225804f7ab570fd70ff74494e8c\"\r\nlast-modified: Wed, 03 Dec 2025 16:09:56 GMT\r\ncontent-type: text/html\r\ncontent-security-policy: upgrade-insecure-requests\r\ndate: Tue, 13 Jan 2026 13:21:47 GMT\r\nage: 83\r\nx-served-by: cache-hel1410034-HEL, cache-hel1410023-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0, 2\r\nx-timer: S1768310507.106345,VS0,VE0\r\nvary: Accept-Encoding\r\nserver: cat factory 1.0\r\nstrict-transport-security: max-age=300\r\nreporting-endpoints: default=\"https://chrome-reporting-server-qiu4epv3ia-uc.a.run.app/report\"\r\nx-frame-options: DENY\r\nset-cookie: postpagebeta=1; Expires=Mon, 4 Sep 2090 20:00:00 GMT; path=/; domain=.imgur.com;\r\naccess-control-allow-origin: https://imgur.com\r\naccess-control-allow-credentials: false\r\ncache-control: max-age=60, stale-while-revalidate=600, stale-if-error=86400, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Smart Ad Server","description":"Smart Ad Server is an adserving and RTB platform.","website":"https://smartadserver.com","common_platform_enumeration":"","icon":"Smart Ad Server.svg","categories":["Advertising"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7576,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7576), with no line terminators","md5":"c8f242e28a54d4aa68912c214f17d579","sha1":"c2ace710f8a7c9e3c37e1ab365be068c3c40ee97","sha256":"03a85b7612a7ba94c5f36b0f17ad673439fc0fc2beb1340db2a9aa1557cea28f","sha512":"c216fe87b10b8f6bd2331efb3d1abd940ecb8c67e871594a5fc43e7b5e1f7a43048d6defe46d58118203bccee15aedfb568a93b153d2ee0c3d8a06d5abaeca51","ssdeep":"96:jhxk2gCJg6aPmNJ30C4INvxbfOn/j/X4PAoHAO2AuRKq3PL4uXns7D:1m2g+g6aervxbO/jxogxRf3UuXnkD","tlshash":"e6f172a37e04c8194fa281e1a567f10cc02aa10f99f4dcd2a59c41f934e5ff68673ea9","first_seen":"2026-01-13T13:22:28.459409Z","last_seen":"2026-01-13T13:22:28.459409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":86,"dns":1,"connect":26,"send":0,"wait":27,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gorobux.live/","date":"2026-01-13T13:21:47.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":"Special Domain Services, LLC"},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1798\r\nOrigin: https://gorobux.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gorobux.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1798,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"d50e393d7ed14f3d9b7e8ae77680ce6b\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.0\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"d50e393d7ed14f3d9b7e8ae77680ce6b\",\"host\":\"gorobux.live\",\"path\":\"/\",\"location\":\"https://gorobux.live/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"8d572701-9943-4cbd-9eb6-0c73a71e7c34\",\"sessionId\":\"8d572701-9943-4cbd-9eb6-0c73a71e7c34\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-01-13T13:21:47.246Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1768310505619,\"connectStart\":1768310505600,\"domComplete\":1768310507241,\"domContentLoadedEventEnd\":1768310507057,\"domContentLoadedEventStart\":1768310507052,\"domInteractive\":1768310507048,\"domLoading\":1768310506325,\"domainLookupEnd\":1768310505599,\"domainLookupStart\":1768310505551,\"fetchStart\":1768310505542,\"navigationStart\":1768310505541,\"requestStart\":1768310505619,\"responseEnd\":1768310506230,\"responseStart\":1768310506230,\"loadEventStart\":1768310507241,\"loadEventEnd\":0,\"pageLoadTime\":1700,\"domContentLoadedTime\":1511,\"domInteractiveTime\":1507,\"domainLookupTime\":48,\"serverResponseTime\":611,\"serverConnectionTime\":19,\"redirectionTime\":1},\"paint\":{}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"cpsh-oh\",\"server\":\"p3plzcpnl508720\",\"dcenter\":\"p3\",\"cp_id\":\"10541497\",\"cp_cl\":\"8\"}},\"producerEventId\":\"b2464fa8-a3ae-4fdf-9a5d-e78bcf8e473f\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":2802,\"encodedBodySize\":2214,\"decodedBodySize\":8100}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 146439700391694764593809036569926724233\r\nx-envoy-upstream-service-time: 84\r\nExpires: Tue, 13 Jan 2026 13:21:47 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Tue, 13 Jan 2026 13:21:47 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-06T11:47:12.576318Z","times_seen":755869,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":25,"dns":10,"connect":1,"send":0,"wait":190,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.155","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gorobux.live/","date":"2026-01-13T13:21:46.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /traffic-assets/js/tccl.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gorobux.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-length: 0\r\nlocation: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js\r\ncache-control: max-age=31536000\r\nexpires: Wed, 13 Jan 2027 13:21:46 GMT\r\ndate: Tue, 13 Jan 2026 13:21:46 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":104464,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T11:49:18.179709Z","times_seen":17741993,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":48,"dns":47,"connect":1,"send":0,"wait":5,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gorobux.live/favicon.ico","fqdn":"gorobux.live","domain":"gorobux.live","tld":"live"},"ip":{"addr":"172.67.198.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gorobux.live/","date":"2026-01-13T13:21:47.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gorobux.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 12:27:39 GMT","end":"Wed, 11 Mar 2026 13:25:13 GMT"},"fingerprint":{"sha1":"25:B8:9C:C6:B3:60:7E:82:D0:E7:C8:AD:55:32:A2:AD:7B:38:C1:B2","sha256":"C0:B4:62:78:C1:9B:29:A7:F7:01:F4:1F:5C:EE:5A:29:EB:30:0E:8F:F6:D2:43:9D:48:AC:12:A1:99:94:F1:1C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gorobux.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gorobux.live/\r\nCookie: _tccl_visitor=8d572701-9943-4cbd-9eb6-0c73a71e7c34; _tccl_visit=8d572701-9943-4cbd-9eb6-0c73a71e7c34; _scc_session=pc=1\u0026C_TOUCH=2026-01-13T13:21:47.047Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Tue, 13 Jan 2026 13:21:47 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FR1qJh3oOyTXY4CPackujVM9TQ9aVTzmigtb3nypmhCNxBvbaKn5L3rjLvZK040BtXXLFy3hnk1Dzw36l4B066DyK5cBw21Bq%2FLvyA%3D%3D\"}]}\r\ncf-ray: 9bd532ddcc195ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"12bc9fcd7f59bd4a0c74e0477ccbad55","sha1":"9c866d208d2bc04fdc136dbc1fef2e889beb9cbf","sha256":"cdc8b52c9402b72ef9c698027c0d2ea63058ed98b832a31d3ac57c9e7f8b35ed","sha512":"ca540a17b3dbf25d336c46d68cc6d5a1251a697d81eae1ec8caf8ffd02154c408327982b8d2f17ccd67e897a40e632a5c41630ff6c85e95a82cb608a29237b31","ssdeep":"","tlshash":"1531309246e10a29d153849072c2bb163a8c9843da4fcd1577e966a9cfcbe938d5334c","first_seen":"2023-03-07T23:05:21Z","last_seen":"2026-08-06T11:48:18.437054Z","times_seen":2527,"resource_available":true,"data":null}},"time_used":592,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"gorobux.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gorobux.live/","date":"2026-01-13T13:21:47.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":"Special Domain Services, LLC"},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1045\r\nOrigin: https://gorobux.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gorobux.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1045,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"d50e393d7ed14f3d9b7e8ae77680ce6b\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.0\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"d50e393d7ed14f3d9b7e8ae77680ce6b\",\"host\":\"gorobux.live\",\"path\":\"/\",\"location\":\"https://gorobux.live/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"8d572701-9943-4cbd-9eb6-0c73a71e7c34\",\"sessionId\":\"8d572701-9943-4cbd-9eb6-0c73a71e7c34\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/page-view/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-01-13T13:21:47.047Z\",\"forensics\":{\"traceIdAdopted\":false},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"cpsh-oh\",\"server\":\"p3plzcpnl508720\",\"dcenter\":\"p3\",\"cp_id\":\"10541497\",\"cp_cl\":\"8\"},\"customProperties\":{}},\"producerEventId\":\"ace8cc03-3cdd-4b61-8a49-d37ce2e3aaba\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 113210753221446786374463131533544625602\r\nx-envoy-upstream-service-time: 93\r\nExpires: Tue, 13 Jan 2026 13:21:47 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Tue, 13 Jan 2026 13:21:47 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-06T11:47:12.576318Z","times_seen":755869,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":26,"dns":11,"connect":1,"send":0,"wait":180,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}