{"report_id":"1da47736-e4ad-45a4-b40c-d74962cd2584","version":6,"status":"done","tags":[],"date":"2026-04-17T00:55:33Z","url":{"schema":"http","addr":"iwww-roblox.co/users/393609540/profile","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"ip":{"addr":"62.171.141.207","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"iwww-roblox.co/page/error-page","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"title":"404 Not Found","dom":{"size":225,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1f67d8fc83bbf225418726fbdb871f8d","sha1":"f26b3a1e28967dd2517d0d3f001e168fa0dec233","sha256":"b533185477dc71d58c08ef5939c444f2d0e0e947690380eee4a53779e21e71fe","sha512":"aca48d428471c95fad5c41a57a81f269fdec1e52ea7e878ba60740c746ca67260eab8b855282bb2ad7f9387ec2874abdabe2d3814ef522a4ca72b044836be7ea","ssdeep":"","tlshash":"3ad0a79f514252475911157079c83685278e23f5603a83709a86d19b51d842acda29c5","dom_hash":"domhash6047034c37a0e90cd4b650026e316c39","first_seen":"2026-04-17T00:55:36.785061Z","last_seen":"2026-04-17T00:55:36.785061Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"iwww-roblox.co/users/393609540/profile","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"ip":{"addr":"62.171.141.207","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T00:55:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"iwww-roblox.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"iwww-roblox.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"iwww-roblox.co","ip":{"addr":"62.171.141.207","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":5,"received_data":1812,"sent_data":2320,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"iwww-roblox.co/users/393609540/profile","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"ip":{"addr":"62.171.141.207","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T00:55:10.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwww-roblox.co","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 22:08:42 GMT","end":"Wed, 15 Jul 2026 22:08:41 GMT"},"fingerprint":{"sha1":"4F:84:62:CD:F0:60:D3:95:5D:31:49:62:0F:A8:47:4A:6D:BD:77:D4","sha256":"53:5E:8B:D3:24:0F:C3:DF:BF:19:2E:FD:44:50:52:3F:72:38:FA:EC:17:67:31:36:4C:EF:75:FC:07:55:EE:DF"}}},"request":{"raw":"GET /users/393609540/profile HTTP/1.1\r\nHost: iwww-roblox.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.3\r\nDate: Fri, 17 Apr 2026 00:55:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"df29bec6074c1752e842c62bdf9b6230","sha1":"4d0223fd5976a96ebebe4e214da3657520f7e8bc","sha256":"605c17266c038bdad42c361f4c7e4dc1f09759701f65f407adb20a92ff73b389","sha512":"0fc398d74b6bc08c25a22f21cf00f953477f75bfebd6e9c04ebab928f105cca81819f69ddf1f4ccc144344bdb8083d3888cacf788032f49401a98a5b66a84f04","ssdeep":"","tlshash":"cca002961d18e14522b51623a936b10d646754d51610d5e600c0153116047cb4d5fee5","first_seen":"2026-01-10T17:58:04.073829Z","last_seen":"2026-04-17T00:55:36.786386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":115,"dns":64,"connect":22,"send":0,"wait":52,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"iwww-roblox.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"iwww-roblox.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"iwww-roblox.co/users/393609540/profile","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"ip":{"addr":"62.171.141.207","port":80,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T00:55:10.901Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /users/393609540/profile HTTP/1.1\r\nHost: iwww-roblox.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.3\r\nDate: Fri, 17 Apr 2026 00:55:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 60\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"df29bec6074c1752e842c62bdf9b6230","sha1":"4d0223fd5976a96ebebe4e214da3657520f7e8bc","sha256":"605c17266c038bdad42c361f4c7e4dc1f09759701f65f407adb20a92ff73b389","sha512":"0fc398d74b6bc08c25a22f21cf00f953477f75bfebd6e9c04ebab928f105cca81819f69ddf1f4ccc144344bdb8083d3888cacf788032f49401a98a5b66a84f04","ssdeep":"","tlshash":"cca002961d18e14522b51623a936b10d646754d51610d5e600c0153116047cb4d5fee5","first_seen":"2026-01-10T17:58:04.073829Z","last_seen":"2026-04-17T00:55:36.786386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":21,"dns":1,"connect":22,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"iwww-roblox.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"iwww-roblox.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iwww-roblox.co/page/error-page","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"ip":{"addr":"62.171.141.207","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T00:55:11.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iwww-roblox.co","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 22:08:42 GMT","end":"Wed, 15 Jul 2026 22:08:41 GMT"},"fingerprint":{"sha1":"4F:84:62:CD:F0:60:D3:95:5D:31:49:62:0F:A8:47:4A:6D:BD:77:D4","sha256":"53:5E:8B:D3:24:0F:C3:DF:BF:19:2E:FD:44:50:52:3F:72:38:FA:EC:17:67:31:36:4C:EF:75:FC:07:55:EE:DF"}}},"request":{"raw":"GET /page/error-page HTTP/1.1\r\nHost: iwww-roblox.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://iwww-roblox.co/users/393609540/profile\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.3\r\nDate: Fri, 17 Apr 2026 00:55:11 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 277\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"43cadef5e95ffbfa76dc7e8fa0bf4646","sha1":"7a0f22ed9c4d94504d500dac2513021529d9f02d","sha256":"e7fcfeb8feb2b511bf0185e3331b017f27fdca2a09590f8c999e91572a19670e","sha512":"8f91f995e01fcf75828740b4ba0a76a8b9552221cdca9054d3af84ac09a8193ec1ce8db16949fa2f0f6ceafc99d85b0ed5d1a3e9821195ab4322f9bda073ecd3","ssdeep":"","tlshash":"63d0ebee500363820802105039c121c2238e13f6a03a82f82ec2f08b02d813ecd9a9c9","first_seen":"2026-04-17T00:55:36.787219Z","last_seen":"2026-04-17T00:55:36.787219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"iwww-roblox.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"iwww-roblox.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"iwww-roblox.co/page/error-page","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"ip":{"addr":"62.171.141.207","port":80,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T00:55:11.105Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /page/error-page HTTP/1.1\r\nHost: iwww-roblox.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://iwww-roblox.co/users/393609540/profile\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.3\r\nDate: Fri, 17 Apr 2026 00:55:11 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 276\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f25d3aa008cdf64c0c18db7995783988","sha1":"cbc15c70a8a78c71e441ba16a0b205cccfea7393","sha256":"b5e96056599cdd1842e3543eecf206aff02579a36556bb8c0b4d236f0597a5da","sha512":"91120d4b9cdce781c63d9e10c92b7aa30ddd6c89e32bb164bbc55afda5c5369c619c4b1ad429cce5be55311b0f2176c28b13fa295901f7b21ab806704b6e6333","ssdeep":"","tlshash":"53d0ebee504362830802006039c521c2234d13f6a03a82f82e82f08b02d843ecd9a9c9","first_seen":"2026-04-17T00:55:36.78814Z","last_seen":"2026-04-17T00:55:36.78814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"iwww-roblox.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"iwww-roblox.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"iwww-roblox.co/favicon.ico","fqdn":"iwww-roblox.co","domain":"iwww-roblox.co","tld":"co"},"ip":{"addr":"62.171.141.207","port":80,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://iwww-roblox.co/page/error-page","date":"2026-04-17T00:55:11.162Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: iwww-roblox.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://iwww-roblox.co/page/error-page\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.3\r\nDate: Fri, 17 Apr 2026 00:55:11 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 276\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"f25d3aa008cdf64c0c18db7995783988","sha1":"cbc15c70a8a78c71e441ba16a0b205cccfea7393","sha256":"b5e96056599cdd1842e3543eecf206aff02579a36556bb8c0b4d236f0597a5da","sha512":"91120d4b9cdce781c63d9e10c92b7aa30ddd6c89e32bb164bbc55afda5c5369c619c4b1ad429cce5be55311b0f2176c28b13fa295901f7b21ab806704b6e6333","ssdeep":"","tlshash":"53d0ebee504362830802006039c521c2234d13f6a03a82f82e82f08b02d843ecd9a9c9","first_seen":"2026-04-17T00:55:36.78814Z","last_seen":"2026-04-17T00:55:36.78814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"iwww-roblox.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-17","alert":"Phishing Block","trigger":"iwww-roblox.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}