{"report_id":"2a0b2def-0c06-4b06-afb2-546bd7d88982","version":6,"status":"done","tags":[],"date":"2026-02-13T22:19:37Z","url":{"schema":"https","addr":"bux.fund/","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"ip":{"addr":"204.11.58.205","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bux.fund/","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"title":"Roblox Robux Unlocked","dom":{"size":27808,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5626)","md5":"378b7a0dbf7b28c5c4ae68c19d86d2cb","sha1":"87f7b2fa92cbba479ab7344b87af864ba1f498a4","sha256":"382aaa4ab156fff176bde3e9c66e604142eccb7a7b09f660376fe0715ea5bfea","sha512":"f52b53ae216cf4527ed185d089270044b640a0931afd697120802a3bdf4d8acb88d5f071be88b806b4e0e508e61f10227718e24985d4472be45e19df13ee16b9","ssdeep":"768:Srb/2zuYE9FwqxYelNyqA1xuA1TgA1KQA1wsMW20aMH7a6ps4aXpsha/pssa+ps6:Srb/2zuY6F9psppswpsgpsNFbHlmB","tlshash":"87c22b73c8b6551eb02b9668bfe5658d3235d0035b038d6cb79c9a1ccf8f69a257232c","dom_hash":"domhashfb22989fa0e602b6048791ca41dbc3d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bux.fund/","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"ip":{"addr":"204.11.58.205","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T22:19:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cdn.lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cdn.lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":6,"received_data":130250,"sent_data":3262,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.rbxcdn.com","ip":{"addr":"52.84.50.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-07-17","domain_rank":99657,"first_seen":"2013-08-19T11:03:07Z","last_seen":"2026-02-11T23:43:44.200233Z","alert_count":0,"request_count":3,"received_data":448026,"sent_data":1415,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"stats.trafficinsights.info","ip":{"addr":"3.92.60.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-08-19","domain_rank":0,"first_seen":"2025-11-03T02:31:28.607454Z","last_seen":"2026-02-08T12:53:55.929429Z","alert_count":0,"request_count":1,"received_data":448593,"sent_data":419,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ws-mt1.pusher.com","ip":{"addr":"18.232.48.33","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1997-06-03","domain_rank":33232,"first_seen":"2016-01-27T14:04:54Z","last_seen":"2026-02-13T16:04:09.159819Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":625,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sdk.lockertools.ai","ip":{"addr":"54.240.174.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-03-23","domain_rank":3318358,"first_seen":"2023-05-25T04:58:14Z","last_seen":"2026-02-12T22:22:32.482619Z","alert_count":0,"request_count":1,"received_data":21214,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"bux.fund","ip":{"addr":"204.11.58.205","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-12T22:22:32.00141Z","last_seen":"2026-02-12T22:22:32.00141Z","alert_count":12,"request_count":4,"received_data":49156,"sent_data":1734,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"cdn.lockedapp.org","ip":{"addr":"52.84.50.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2025-10-08T23:20:24.913754Z","last_seen":"2026-02-12T22:22:32.658217Z","alert_count":2,"request_count":1,"received_data":169272,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":3,"received_data":38890,"sent_data":1405,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lockedapp.org","ip":{"addr":"23.22.126.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2025-09-13T20:50:48.117549Z","last_seen":"2026-02-12T22:22:32.683517Z","alert_count":4,"request_count":2,"received_data":26399,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wallpapers.com","ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"1997-06-27","domain_rank":5674,"first_seen":"2012-05-21T11:06:35Z","last_seen":"2026-02-12T01:05:20.448131Z","alert_count":0,"request_count":1,"received_data":17287,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bux.fund/","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"ip":{"addr":"204.11.58.205","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"29fe4fa9af234af715abfdbf1cb31c6f","sha1":"eeac1f223b9111fad562b39bab3a4c6c2f7de3bc","sha256":"1bb8738d242e83a54b525c9bd7167054acc6eaad5b84e9e831b3ea4561099ad9","sha512":"acb1b56b363f9ad9713f9d548b80a77ee590ab612efb5fd3a90d0edc139a2e797bc6d77ac794699c2f8694e7015be881c68aa2ad37f569990fe2cf4434423a77","ssdeep":"","tlshash":"58f05c9bbc5328700b5f242f303f47443cb0c5031c00d14278ac85a25f61f929e2eadd","size":498,"data":"","first_seen":"2024-06-21T17:57:10Z","last_seen":"2026-05-16T06:30:34.062324Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lockedapp.org/cl/i/pq28x2","fqdn":"lockedapp.org","domain":"lockedapp.org","tld":"org"},"ip":{"addr":"23.22.126.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1a9ce86d43d71e232878df12bcb4c2c","sha1":"e5d49ec7af739550b4994547e7e55f3eb7148106","sha256":"bc133fe3f8a6fdd553ad12c10672f4b6fa172cd6f465b0a37a7dbf2d3d0309f1","sha512":"976fdfae9f61bbc165c73276913fbf6d2bdc4259500fbbf0cc5d92e62d24634667cc785a740285162bd5be963cdcf5509d7fcc8f162539187ae9e06dd4d5585e","ssdeep":"","tlshash":"7b519bef6cb3a651256ba47d0bef810d30b484673505c530bc7c95c81fe1e10aa99bed","size":2963,"data":"","first_seen":"2026-02-12T22:22:38.763193Z","last_seen":"2026-02-13T22:19:41.231181Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lockedapp.org/cl/i/pq28x2","fqdn":"lockedapp.org","domain":"lockedapp.org","tld":"org"},"ip":{"addr":"23.22.126.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08bf26933e1f3ef93a808f1c04f780a3","sha1":"e00f4f250f3c6229a7be2973741e8987eaf83cef","sha256":"91b74e8a70d31ffe61a5028a63b5039ce11513d4c5ace7b80b93258dbd2509bb","sha512":"e8c703fbfe5c219758c696be4fb7b65e12434b2174737836cae164a55ce484fa2204454e9e7215bd51e0adda1a6bf353ac9d06a23734af779dee611d71ae1960","ssdeep":"","tlshash":"7931be58dcb3d0a0663622bf8fbfd01a42816123d588d905370dda582f6977ed876bf8","size":1600,"data":"","first_seen":"2026-02-13T22:19:41.232145Z","last_seen":"2026-02-13T22:19:41.232145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lockedapp.org/cl/i/pq28x2","fqdn":"lockedapp.org","domain":"lockedapp.org","tld":"org"},"ip":{"addr":"23.22.126.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3efb09ec77c3a231062809a480fb5f39","sha1":"450cfc55f68ce4a9f90e1325b0b4ff53e2801d2f","sha256":"5ef23ca8c9c36f4aae8dd8c1bd37c7bdf68d64e905b7a011af816caceb81d133","sha512":"4a11a9587b0d8df1394ccad8b3126face0276ef835ef82376c716fbcc6d4e5ef604abc9714f06c3408f5e6d02aa21527fc3397cf46fbb8d7a13d53998b0a9480","ssdeep":"","tlshash":"50f0229ce8e1102242a3b638108de8683633c347c15017807e8cd304efc8628caa9abc","size":606,"data":"","first_seen":"2026-02-12T22:22:38.767233Z","last_seen":"2026-02-13T22:19:41.234172Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.lockertools.ai/chat.js","fqdn":"sdk.lockertools.ai","domain":"lockertools.ai","tld":"ai"},"ip":{"addr":"54.240.174.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56d5a1d9c7adf544a14cee78d65c4862","sha1":"0e1664cf3adc99ca6f08a97961ce758f92a17791","sha256":"3394fa10dfa2b4a3d0e3f157bad69958bd8c369c7f4cf90cc5a7c76e94d63bfc","sha512":"b09ae3b4073f323d8bf7ae0fdc7be9e0423040a792633ac6f730a9eb5821a0d656d78850c6fd0a3363b1f5151c92fbab9f135c5d5a4360980ca991f1f280c7f8","ssdeep":"384:lLEj/i0qeCnpDQoz83cdT1bqtKkAB3JYjr0TTE29TegRQ1wpRMCWSv9hfhlUpJb4:loel0qbqtKHgr0TTZRQipRtWSv9Jq4","tlshash":"cf925a314778712ca57f43eaf2b5a56831270c22b721e8b8f94ddc25048eda175a3bbd","size":20701,"data":"","first_seen":"2024-09-17T21:51:51Z","last_seen":"2026-04-18T08:40:28.701273Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lockedapp.org/js/cl/desktop.js?id=WhDcRR","fqdn":"cdn.lockedapp.org","domain":"lockedapp.org","tld":"org"},"ip":{"addr":"52.84.50.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8121aaf3f72d60089bb8901c9c434833","sha1":"76d702ae90fea0772cae9d061ceefcae3ed5b99a","sha256":"21366e1e7f1d6275986a014280ad09691d49d555192731404dfbcadbe8786184","sha512":"81dbb710306395b929c8746c476cd447c8ed4644c70356b8bc7b471dd20a18b810388662af4ec80772323fa866659807e8d6ec10edb1adc650e82da03c74ce24","ssdeep":"3072:rgE/txzORiglh/UhkQ1ROtcCkYjHrX4Qgc3+h:rgE/txzOR5j/UhkQfPCkYbT4Qgz","tlshash":"8ef31ad9b6c2b06247e77076047f510bf23529a8684dc018b639d9e5fc74a8da23bf78","size":168700,"data":"","first_seen":"2026-01-12T20:27:35.929125Z","last_seen":"2026-03-28T20:08:38.711964Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"7fd5e77c30b8b3eb63a39395e78d0b1e","sha1":"f32a2b0b7ce71e05484cfbe5a18a112730a5b83e","sha256":"9338031b242fa3c9b875a6f3b2f2b8e3840388b53a393e39cad72e97232913af","sha512":"7156abfd2e9b31d89cda351b554a879462eabc5443783439e0e481eef48ce5521fe116ef3275e2862f1c1bcab5ea2868c4fd0984fa5939d84170639d10a895b2","ssdeep":"384:V/Db/EBzuYsA0A9A1xg29A1Tg+9A1Kg89A1wgIMW20aMHTXa6ps4aXpsB2Ia/psS:Vrb/2zuYL0wA1xVA1TPA1KJA1wbMW20S","tlshash":"9e920937ccf64646b03b9574afea445da364800347034a98b7dcaa5ccfba7ae653231c","size":20633,"data":"","first_seen":"2026-02-13T22:19:41.235146Z","last_seen":"2026-02-13T22:19:41.235146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lockedapp.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:51 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 68906\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T12:08:43.673199Z","times_seen":870775,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bux.fund/logo.png","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"ip":{"addr":"204.11.58.205","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bux.fund","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:56:18 GMT","end":"Mon, 30 Mar 2026 08:56:17 GMT"},"fingerprint":{"sha1":"B6:C0:CE:E4:5E:4A:70:B4:1E:A1:42:F1:E2:30:3D:9F:13:09:6B:2F","sha256":"FB:51:DE:AA:49:51:07:0F:9E:40:A0:E3:B8:B5:BE:AA:49:5C:7F:EA:17:A3:CD:C8:34:D5:D1:41:5A:34:E3:DC"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: bux.fund\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bux.fund/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 30 Dec 2025 09:34:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40365\r\ncontent-type: image/png\r\ndate: Fri, 13 Feb 2026 22:19:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40365,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 647 x 647, 8-bit/color RGBA, non-interlaced","md5":"8561922f719f0dcc072b2b43165fcb8b","sha1":"8cd564d60387cf23fc67c0e058d9088a310ce698","sha256":"ec5bcd8c2addcccbefbf09a6354b7c655be5f5cd65478cca1070c4ac7413d037","sha512":"a3e11786e0f3bbf0777c44fbb8c8050a047e3112945ef5169a35af9ab688f976e54fa4aa94f515d1f23f11f1dd39405dbb904108e0840b88584337915abc6b80","ssdeep":"768:1Pb1G+O6ncGOk47C6t8MvohZVLOoLlQgo5iTNEW/+PjupzSWB0:1nncGOrC6t8MvoPxLii/ojupa","tlshash":"4b03f21706847479d32f08ab9da188af9273083436edc49fcea4e4889c7505d6f57f97","first_seen":"2025-10-26T13:49:36.69356Z","last_seen":"2026-03-01T04:22:15.767805Z","times_seen":12,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.rbxcdn.com/a19e4c27a0694a1d0fd5ceb17c978a7a-marketing_bg_05222025.jpg","fqdn":"images.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /a19e4c27a0694a1d0fd5ceb17c978a7a-marketing_bg_05222025.jpg HTTP/1.1\r\nHost: images.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bux.fund/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 379858\r\ndate: Wed, 11 Jun 2025 20:59:41 GMT\r\nlast-modified: Tue, 27 May 2025 16:47:23 GMT\r\netag: \"a19e4c27a0694a1d0fd5ceb17c978a7a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: 51dKySeVG2PoA_tszjnf9OlbSoZrROqO\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: wg-KOHXBC6P14tYHcZl6Fdn-DYDYLKGkuvfPC1h2wtdcpcDfhXSAeQ==\r\nage: 21345576\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"wg-KOHXBC6P14tYHcZl6Fdn-DYDYLKGkuvfPC1h2wtdcpcDfhXSAeQ==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":379858,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"a19e4c27a0694a1d0fd5ceb17c978a7a","sha1":"284a00c6ca6a9292dadf0617f88663d1f4bd412a","sha256":"bdf8a622fc5c1c7f937fe25bf5f642df7cda52080f4a77178cd9be49c533aa2a","sha512":"22de0080c37367439ec5f7b24929871f41ec28234869338a3db3bad957542a131d743475619997b99240d9727e76227d0b4e524011102a1ee7e3c6a16783bd31","ssdeep":"6144:l7N6IM671SeNAtdN324RZBBsTpk62wDqay2NJaYESvt5OWUTJF48+3QN652e:le6geNs9PDjsVkHwDdyjYEKZhC652e","tlshash":"8b84f113dc1d9a83a01d83e4bf470ead3b156b1ce9523aff44255edbae245221c5f22e","first_seen":"2025-08-04T14:29:33.07152Z","last_seen":"2026-06-06T01:40:47.783643Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":187,"dns":174,"connect":3,"send":0,"wait":1,"receive":12,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lockedapp.org/js/cl/desktop.js?id=WhDcRR","fqdn":"cdn.lockedapp.org","domain":"lockedapp.org","tld":"org"},"ip":{"addr":"52.84.50.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.downloadlocked.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 23 Dec 2025 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DB:86:15:E8:B9:21:B4:9D:A8:BE:44:23:EF:FC:E7:D0:D1:A8:5B:8C","sha256":"6F:BB:F6:F7:A3:D1:E6:DE:B3:E2:45:4B:EE:D2:CC:E2:56:DE:69:B0:0E:63:21:F5:36:6C:0D:C0:AA:CA:47:C0"}}},"request":{"raw":"GET /js/cl/desktop.js?id=WhDcRR HTTP/1.1\r\nHost: cdn.lockedapp.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Fri, 13 Feb 2026 22:19:18 GMT\r\nlast-modified: Tue, 06 Jan 2026 12:12:10 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=2628000\r\nexpires: Mon, 06 Jan 2031 12:12:09 GMT\r\nserver: AmazonS3\r\netag: W/\"8121aaf3f72d60089bb8901c9c434833\"\r\nvary: accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: DJxtrisTeSMBSxPHfAN292hD6VDa3bM09jTG3YXc4BOYApSEz9vXOQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":168700,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8121aaf3f72d60089bb8901c9c434833","sha1":"76d702ae90fea0772cae9d061ceefcae3ed5b99a","sha256":"21366e1e7f1d6275986a014280ad09691d49d555192731404dfbcadbe8786184","sha512":"81dbb710306395b929c8746c476cd447c8ed4644c70356b8bc7b471dd20a18b810388662af4ec80772323fa866659807e8d6ec10edb1adc650e82da03c74ce24","ssdeep":"3072:rgE/txzORiglh/UhkQ1ROtcCkYjHrX4Qgc3+h:rgE/txzOR5j/UhkQfPCkYbT4Qgz","tlshash":"8ef31ad9b6c2b06247e77076047f510bf23529a8684dc018b639d9e5fc74a8da23bf78","first_seen":"2026-01-12T20:27:35.929125Z","last_seen":"2026-03-28T20:08:38.711964Z","times_seen":29,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":313,"dns":58,"connect":1,"send":0,"wait":167,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cdn.lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"cdn.lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stats.trafficinsights.info/script","fqdn":"stats.trafficinsights.info","domain":"trafficinsights.info","tld":"info"},"ip":{"addr":"3.92.60.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stats.trafficinsights.info","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 19:28:28 GMT","end":"Mon, 09 Mar 2026 19:28:27 GMT"},"fingerprint":{"sha1":"88:8C:A6:19:0C:F4:06:2E:E3:D1:B9:E6:41:02:F7:C2:50:3E:27:17","sha256":"C0:21:A6:47:69:C9:77:24:CF:A1:3A:72:5B:37:18:FF:46:7B:7D:EF:F2:96:E1:03:63:C0:0B:0D:61:2E:A7:C4"}}},"request":{"raw":"GET /script HTTP/1.1\r\nHost: stats.trafficinsights.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":448473,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (56964)","md5":"9a8aa59ea7b2593b3c5c42c759d9c6a2","sha1":"309ea257f0149f871f3932d041f3e04baa0f6baa","sha256":"197dbb9318dc8ec516453346483862861a14091a1d73b5e3a9e622919206d9f1","sha512":"05973e7c4c214681b4f2376e3397fcff519e4e182ea97a6929075906f41e9317d14b34ef906ff85c66bcf90b14aa7b6573046547b26bd682dcf7b83d3019409b","ssdeep":"3072:Y041WvG70iWlEHTNHiUVcSOHHy6xjHmFQBy+W2hY:Y04IlEz8iIxjHmFQBZW2hY","tlshash":"aa949c849ee2108292d32fea052b6350f9a006571df7bb427b1cb5ad5f49262c6d3fdc","first_seen":"2025-11-03T02:31:43.821666Z","last_seen":"2026-03-08T23:01:04.74318Z","times_seen":32,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":216,"dns":21,"connect":93,"send":0,"wait":186,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.rbxcdn.com/782b7fc18a24ee997efd9a7f02fa4bf9-bg_08072019.jg","fqdn":"images.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /782b7fc18a24ee997efd9a7f02fa4bf9-bg_08072019.jg HTTP/1.1\r\nHost: images.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/xml\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 22:19:17 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: aflHJO7zB83e4wD3BSGWASW64Qt_DpGJSk2kICf7RJB49iQzjuuTJw==\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lockedapp.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:08:36 GMT\r\nexpires: Sat, 13 Feb 2027 03:08:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:54 GMT\r\ncontent-type: font/woff2\r\nage: 69041\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14724, version 1.0","md5":"b8be966e335e865e3c73faa8cce0ed35","sha1":"d0cd995e87f5bfb0206759b83e5ef25676d0edd8","sha256":"06b675a649489d21b7fd33f19b1c6d37e8bd778ded07ecfec26bbc8f11e694f4","sha512":"2257e0a09a86666b280d44ae551a33d17a6072043a2c38f0bb905847b66217809870c8cd6ab3a6ebce3e04b2ff79bedd11f1b18c7d65c231f8c9f21ed8a26e5e","ssdeep":"384:wK2JDEZSzIQA8yHGXMXvQDxyrGCQYamlyFlGWD:zrB8y0zKmYasKh","tlshash":"f962c0d2c64154daea05b9b35f612538bc99bf462054fd0796cbe41df7230a8fe382e2","first_seen":"2025-09-11T17:07:37.682239Z","last_seen":"2026-06-06T11:57:50.992814Z","times_seen":41665,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws-mt1.pusher.com/app/2a1ddc1f29b22896b26c?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false","fqdn":"ws-mt1.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"18.232.48.33","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 26 Apr 2025 00:00:00 GMT","end":"Tue, 26 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A0:DE:9E:B2:F9:F5:73:2A:6E:2B:F5:19:BD:77:99:37:06:A0:23:A9","sha256":"16:4B:AC:61:45:72:01:1D:80:46:8B:63:53:83:7F:05:C3:50:77:3B:79:FD:88:14:1C:D0:AD:9F:47:EB:AB:53"}}},"request":{"raw":"GET /app/2a1ddc1f29b22896b26c?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false HTTP/1.1\r\nHost: ws-mt1.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://lockedapp.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: gujirKU+hvkMfeHg0z1wpA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 13 Feb 2026 22:19:18 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: S4elf2eV0oLJFf0+9sZbQ4ICj34=\r\nSec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T12:09:44.754124Z","times_seen":16177101,"resource_available":true,"data":null}},"time_used":954,"timings":{"blocked":0,"dns":287,"connect":379,"send":0,"wait":96,"receive":0,"ssl":479},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bux.fund/","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"ip":{"addr":"204.11.58.205","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:19:15.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bux.fund","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:56:18 GMT","end":"Mon, 30 Mar 2026 08:56:17 GMT"},"fingerprint":{"sha1":"B6:C0:CE:E4:5E:4A:70:B4:1E:A1:42:F1:E2:30:3D:9F:13:09:6B:2F","sha256":"FB:51:DE:AA:49:51:07:0F:9E:40:A0:E3:B8:B5:BE:AA:49:5C:7F:EA:17:A3:CD:C8:34:D5:D1:41:5A:34:E3:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bux.fund\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 31 Dec 2025 08:14:17 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 982\r\ncontent-type: text/html\r\ndate: Fri, 13 Feb 2026 22:19:15 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"93099cc9763344b2bf08f19d880aae58","sha1":"becce2c37be53db96b3b8e2e5346ba0b5b8f2e58","sha256":"cda4cf7db14b5a191aa12fde7b833a0f206705bb2f1c1033e0288d973d220cbd","sha512":"e5d4f6bb85b08fbc4bd5cecc55662860ac0b74522cc2d086448cae2e65ae039883efc304cc7673c237be44becaabe60b615d3bc508f68e40dd0bd3e9a4e0716f","ssdeep":"","tlshash":"4241347664835412037342aa6c666b4efe85c107db054d0175fc62b72bf6e81cdb7a8d","first_seen":"2026-02-12T22:22:38.751255Z","last_seen":"2026-02-13T22:19:41.218517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":483,"dns":181,"connect":150,"send":0,"wait":154,"receive":1,"ssl":155},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,300,200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro:400,700,300,200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:19:17 GMT\r\ndate: Fri, 13 Feb 2026 22:19:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9744,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4f6f248b90cd0ced0bac2d8123cc3130","sha1":"d5df28443b5f501d6f3c4945aa9538b0c7ddf0f3","sha256":"d5516230a62013798e81305ea288a272f3b53b8106011f62c9968b387e24951a","sha512":"856bfcd44e50b8865f595eab7593a482aeb34bfbec0b0529f4ce1e27af617fb196819c7b5e34f9f6aefc8af42b270f2fc1b5f56f3ec4196a7bac8a89d35ff4cf","ssdeep":"192:igywZR3LUHE1n1Cb63gYIv3q0eb83JLXC2H52fa3EcoLq:HZHfPkXjr","tlshash":"d712bef2411ae44897a31cc623de3e769d8f60207185c16adffd5858aca6c3a43b4f6d","first_seen":"2025-09-20T22:06:02.160196Z","last_seen":"2026-06-05T04:59:04.131117Z","times_seen":371,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.lockertools.ai/chat.js","fqdn":"sdk.lockertools.ai","domain":"lockertools.ai","tld":"ai"},"ip":{"addr":"54.240.174.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdk.lockertools.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Thu, 04 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"74:FA:13:F3:7E:BA:A2:93:B2:3C:76:1C:99:39:57:05:53:73:2B:EB","sha256":"4C:C0:19:A0:3E:2A:B4:EA:E8:EF:A0:1D:08:42:C1:AA:CF:3F:E6:92:C5:AE:7C:F4:66:A2:7D:1B:CC:6D:5A:65"}}},"request":{"raw":"GET /chat.js HTTP/1.1\r\nHost: sdk.lockertools.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Sep 2024 10:44:31 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Fri, 13 Feb 2026 05:41:54 GMT\r\netag: W/\"56d5a1d9c7adf544a14cee78d65c4862\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: rvuaslf8Dbqm5JuLbgXEY4ZOCFlgq8TluLxGNECw9VuNCqz5HLaJgw==\r\nage: 70913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":20701,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19530), with no line terminators","md5":"56d5a1d9c7adf544a14cee78d65c4862","sha1":"0e1664cf3adc99ca6f08a97961ce758f92a17791","sha256":"3394fa10dfa2b4a3d0e3f157bad69958bd8c369c7f4cf90cc5a7c76e94d63bfc","sha512":"b09ae3b4073f323d8bf7ae0fdc7be9e0423040a792633ac6f730a9eb5821a0d656d78850c6fd0a3363b1f5151c92fbab9f135c5d5a4360980ca991f1f280c7f8","ssdeep":"384:lLEj/i0qeCnpDQoz83cdT1bqtKkAB3JYjr0TTE29TegRQ1wpRMCWSv9hfhlUpJb4:loel0qbqtKHgr0TTZRQipRtWSv9Jq4","tlshash":"cf925a314778712ca57f43eaf2b5a56831270c22b721e8b8f94ddc25048eda175a3bbd","first_seen":"2024-09-17T21:51:51Z","last_seen":"2026-04-18T08:40:28.701273Z","times_seen":255,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":90,"dns":81,"connect":1,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lockedapp.org/cl/i/pq28x2","fqdn":"lockedapp.org","domain":"lockedapp.org","tld":"org"},"ip":{"addr":"23.22.126.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lockedapp.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 16:24:01 GMT","end":"Mon, 27 Apr 2026 16:24:00 GMT"},"fingerprint":{"sha1":"F6:37:B2:3F:48:02:25:3F:7C:5B:6C:A3:70:30:57:12:A2:8D:2F:88","sha256":"D7:BD:0C:1D:DD:44:57:54:E1:9B:A7:ED:E9:00:00:7F:58:B4:AB:23:63:A4:93:39:C2:2B:AA:2F:9B:68:5B:7B"}}},"request":{"raw":"GET /cl/i/pq28x2 HTTP/1.1\r\nHost: lockedapp.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 22:19:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: none\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkZXbTdud0hEV0s4TytnYjdWVzhmTUE9PSIsInZhbHVlIjoiSnlBRHJ2VGhWa3lPRVJMNjBiVFM4cUpobWhqNy9QSklhUGwwR3FjLzlZcXZhVkhEcUsrWnZhRkZLa3dYYk1nc3RScGUvUkZ0YzV2VytqQ0JxenBoTUdlK2JHRnJ5SEdCU3p2R0hsNnJGeUVFSGN4RzkwenRuaVdyaGxsZXRUdE4iLCJtYWMiOiI4MTUwMTQ3MTM5NGNjY2Q2MTdiZWNhNTdmNjMwZjFkYjk0NzcyYjI3ZjdjMWNkZmE5YTRkNjE2M2Y3ZTY4MWNlIiwidGFnIjoiIn0%3D; expires=Sat, 14 Feb 2026 18:19:16 GMT; Max-Age=72000; path=/; secure; samesite=lax\nogads_session=eyJpdiI6InRiNzFXckpZeHo4SlY1ZUtrWUdnVWc9PSIsInZhbHVlIjoiUy8xQnpkRmtVc1NzY3RNR2l0OFNKNzUwcTNVNnBNazlhUjN2bTFxbVlwN3Bqb3pRWEwrVTB4ckhxYnczRWh4WkRDNzRWVTQxQjhYL2JYbkcrY0hEVWhtWE9sc1BjSTd6Y2g5UXEvRzJjcHFYUlArT2E4elZyd3BEN1lsSTNYa0EiLCJtYWMiOiIxZTZlZDEwMDRjOWQyOTY4ZGEyZDZlYzcxM2I5NTA0NmU2MjMzMzA4YTY2ZjViNTUxZTc4OTVmOTFlMzJjOWE2IiwidGFnIjoiIn0%3D; expires=Sat, 14 Feb 2026 18:19:16 GMT; Max-Age=72000; path=/; secure; httponly; samesite=lax\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: DENY, nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3170,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"147d05d1f8fd4cf2b9b7de8a6f15a034","sha1":"82d27839af1cd397bbc7547cd814ede8f84ebf2a","sha256":"abb37222282aaca2b08c145e1c34fd0e11ee834037022c633f24545457c473a4","sha512":"680e965d3c4bf5af7a81f0ac72357eee36eb65f445eba24dcbb2319b4b626d7ce11a4064e2fb93663818fd6574033e78a1bc56604f99b70af750cdbb30b62dd2","ssdeep":"","tlshash":"d151cdef6cf3a651256ba47d0bef910d30b884673105c5307cac95d81fe0e10aa9abed","first_seen":"2026-02-12T22:22:38.760383Z","last_seen":"2026-02-13T22:19:41.220897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":229,"dns":38,"connect":93,"send":0,"wait":130,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bux.fund/style.css","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"ip":{"addr":"204.11.58.205","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bux.fund","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:56:18 GMT","end":"Mon, 30 Mar 2026 08:56:17 GMT"},"fingerprint":{"sha1":"B6:C0:CE:E4:5E:4A:70:B4:1E:A1:42:F1:E2:30:3D:9F:13:09:6B:2F","sha256":"FB:51:DE:AA:49:51:07:0F:9E:40:A0:E3:B8:B5:BE:AA:49:5C:7F:EA:17:A3:CD:C8:34:D5:D1:41:5A:34:E3:DC"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: bux.fund\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bux.fund/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 30 Dec 2025 09:34:29 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1809\r\ncontent-type: text/css\r\ndate: Fri, 13 Feb 2026 22:19:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5240,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"447964d43ad5305b2ecd177bec760438","sha1":"89c260a41cb742b9dbbb4adcaf5a9a6295fa9c46","sha256":"3565da4467a6be5af7e0f95fc126deb09c07431cb1c735821deed56795aad4d3","sha512":"1344482a6c0302ee39181874a4d23c45993bedf3703e6479649e18e5a7bd6e7e186b9ca13cf804b9d1eeb6c4c8cb330741a832d78b6755b5032b866f2a144148","ssdeep":"96:M+1K9Hr6vaouZ1VbFWQvmFbgEVyCtmXIhZPho2Qpsi4:M19HmaoSY1NhZPmpN4","tlshash":"f6b12225ea54a045f036c7bc27b25b49eb6a400797038af97bdd7660dfb44ac46b0bcc","first_seen":"2025-10-26T13:49:36.717096Z","last_seen":"2026-02-13T22:19:41.221906Z","times_seen":6,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bux.fund\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:49:17 GMT\r\nexpires: Sat, 13 Feb 2027 00:49:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 77399\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-06T12:08:43.631268Z","times_seen":352150,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":67,"dns":4,"connect":20,"send":0,"wait":8,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bux.fund\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7632\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 01:04:57 GMT\r\nexpires: Sat, 13 Feb 2027 01:04:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:25 GMT\r\ncontent-type: font/woff2\r\nage: 76459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7632,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7632, version 1.0","md5":"5426bf50c8455aab7a3e89d1138eb969","sha1":"ec0cbbcb4600e691cb24a63451f758727f90a306","sha256":"17ea10196a490a8d3b8da162c7d4af9c301c5229f70af90dad6fa33eb951d83f","sha512":"c80e5e5d2b52b6ac9a67d62d37236fd791c2736d194ea0828b59fb35011d76fb180d76b3fe5789bf62ebc5c5092975bf6e678e619fdb6c1f28a9d692380729d3","ssdeep":"192:ARL1Yg/M1jL06srp5yOoNWxymcaLoNboeuTbEXFgePuCcDozD1:ARL1YgELorpsOKWJcaMduTbEXvP+Dq1","tlshash":"bff1afc30554054bc74daab7dce3bc60056ff49efc11260959e3adc9962a0fa46cb4d5","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-06-06T12:28:28.013586Z","times_seen":16812,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":62,"dns":1,"connect":7,"send":0,"wait":10,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bux.fund/favicon.ico","fqdn":"bux.fund","domain":"bux.fund","tld":"fund"},"ip":{"addr":"204.11.58.205","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bux.fund","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Dec 2025 08:56:18 GMT","end":"Mon, 30 Mar 2026 08:56:17 GMT"},"fingerprint":{"sha1":"B6:C0:CE:E4:5E:4A:70:B4:1E:A1:42:F1:E2:30:3D:9F:13:09:6B:2F","sha256":"FB:51:DE:AA:49:51:07:0F:9E:40:A0:E3:B8:B5:BE:AA:49:5C:7F:EA:17:A3:CD:C8:34:D5:D1:41:5A:34:E3:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bux.fund\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bux.fund/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nlast-modified: Fri, 30 May 2025 12:25:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 358\r\ncontent-type: text/html\r\ndate: Fri, 13 Feb 2026 22:19:16 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"51618ac2b7cf5c4937213e965c00f20a","sha1":"7e704e57162ed18743bef9f95e2dea558954751b","sha256":"0b41f69e6564b9c89b1b344744c5b06eb4adc0e584028909286d2b936e1afed5","sha512":"d07af4309bf8156644d604676eec62cf78128dae1cd1808e865e02bf7302b3dea5b1eda42eecd6e8687c84b85a6a52c07bd45b120b8fe5940d8d80586a2d0fb0","ssdeep":"","tlshash":"0df0e1671c61c4437421c64a33e1de6c54583213d109e969b6de511ccb89bdc88d3a25","first_seen":"2023-03-12T18:04:12Z","last_seen":"2026-06-06T12:18:10.596985Z","times_seen":12975,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bux.fund","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lockedapp.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14792\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:49:13 GMT\r\nexpires: Sat, 13 Feb 2027 00:49:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:45 GMT\r\ncontent-type: font/woff2\r\nage: 77404\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14792, version 1.0","md5":"c37aa11e5024b0f8908f3742c9a0d9b9","sha1":"b2ccee72f93c83b0be62da9e8bfa77943c481500","sha256":"46d6a0984aa795b764141232671160e61bdcc49e900de67ca6b35bae25b1ebdd","sha512":"dc3f2e177666b9666b0e51399f4e6600246f56865c92ce8a204c2407818b3fa038abb794341cb9d16781451db487aabc1a84e5262619fad90e6886e11fa3e699","ssdeep":"384:XZs0UC5sLGL2sZJCnfayiBoJdSpMzgZqO46EegOHBKagapO:X2C5sLsBmfqSJgMzgUPegOHBRnO","tlshash":"4d62d07198885687b0f5b7348e2f2a6f66f3514028685312acc3fc6cdb5bd4670279ca","first_seen":"2025-09-11T20:37:14.108754Z","last_seen":"2026-06-06T12:04:09.953711Z","times_seen":24058,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:19:17 GMT\r\ndate: Fri, 13 Feb 2026 22:19:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2056f58463ef1ae5de1eb25701dea875","sha1":"2ca916563e184d51c8b7c246778d141a1ca9def5","sha256":"d72044187146182f03039474a4fa2c2d98c5ba399880afdcc97cb69cfdbe7877","sha512":"a0d0fa36cee3bad27b59f1baf241663570e726ef3650f118d304af5200d999a6da56d1c517e4915b5f4a0f7cc7acc5d36830cfa5b671ce41f77788ded4b570d2","ssdeep":"384:pKf5KgKPKrKyUK/qY4+K4KYKpKfMK1KWK6KyhK/qY4XKNKtKiKfDKOKdKBKyaK/2:pCJmwBUiRDfMTcfFBhiEymDcTYeBai7e","tlshash":"caa200a1041750009b834ce223cebf35fe1f52517142d0b5abfdab6b9dcbc66526939d","first_seen":"2025-11-19T00:43:54.727724Z","last_seen":"2026-02-19T21:27:07.841031Z","times_seen":4212,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lockedapp.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:51 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 68906\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-06T12:08:43.673199Z","times_seen":870775,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;400;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;400;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bux.fund/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 22:19:16 GMT\r\ndate: Fri, 13 Feb 2026 22:19:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76eab9c06cc151ad78624fe62b3cec01","sha1":"7e9cb71ec148fd7ee05de1d40f9841c3a0f45681","sha256":"888fbd6e210784832bb8b8993c128e32d6bcb76042bfa7f42aeb155d6ed7d1ac","sha512":"7415af19e6f18c9376338f05f314f573f5bce93e54347851ee3a69837ba8a224799107ec2f7c9a29cc809933249a36596857bbc432b325501be7500c2302d60a","ssdeep":"96:SOS0a4OS0aeJc+ukOS0a8N3O6aKO6ayJc+ukO6aVN3OEanOEaCJc+ukOEauN3ObR:+pspOlpXHaeQgKQAiazk","tlshash":"5ca1add1087be114ab835cc123ce6d36ee0e9155b850e5796ffe0c98adabc254372b2d","first_seen":"2025-10-26T13:49:36.704291Z","last_seen":"2026-05-16T06:30:34.045445Z","times_seen":21,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":78,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.rbxcdn.com/78413c0d5e05d6c36720ecc0c3013cbc-vignette.png","fqdn":"images.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"52.84.50.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bux.fund/","date":"2026-02-13T22:19:16.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /78413c0d5e05d6c36720ecc0c3013cbc-vignette.png HTTP/1.1\r\nHost: images.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bux.fund/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 65388\r\ndate: Mon, 01 Dec 2025 14:12:53 GMT\r\nlast-modified: Fri, 23 Aug 2019 01:04:24 GMT\r\netag: \"78413c0d5e05d6c36720ecc0c3013cbc\"\r\ncache-control: public, max-age=31536000\r\nx-amz-version-id: 2s_5QTTJx0MnM76wly4Rkuni3lfVvJlc\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: QhJ4WGj2WaF3dm0jHSQq2eQ5Eiy5kaYkWSgUtH_yYKXiMb2Ci4wUlg==\r\nage: 6422784\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"QhJ4WGj2WaF3dm0jHSQq2eQ5Eiy5kaYkWSgUtH_yYKXiMb2Ci4wUlg==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":65388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1251 x 708, 8-bit/color RGBA, non-interlaced","md5":"78413c0d5e05d6c36720ecc0c3013cbc","sha1":"4ea7f7a04d11a77a9aff562788ac57374607c329","sha256":"4238a86271d25bf5f8f4ae9e2e911200e54618164a67e1b624ee497563af74ee","sha512":"0835b56d178ca0b3fe555b43e3e265c2f847da9fbb6167b52385085a1bde981000153f65f2026d45352b783d155f3d3edce5ab9576b9333e1c31d8f7afa4bcde","ssdeep":"768:Oz6ga1DI6dfJAncJxlBj/92bfaKd8zeZAcqQson5dbj/AdWhIjxIyiEdCyF:Ozba1DunE4yLiZUQsonHj/AWIyyzJ","tlshash":"39534ba4dba5517fb29b2424b4a254a725a52c333d8acd0152c3761f23fbf740c78eb9","first_seen":"2023-05-04T09:20:51Z","last_seen":"2026-06-04T13:41:58.598519Z","times_seen":854,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":188,"dns":175,"connect":1,"send":0,"wait":2,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lockedapp.org/cl/v/pq28x2","fqdn":"lockedapp.org","domain":"lockedapp.org","tld":"org"},"ip":{"addr":"23.22.126.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:16.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lockedapp.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 27 Jan 2026 16:24:01 GMT","end":"Mon, 27 Apr 2026 16:24:00 GMT"},"fingerprint":{"sha1":"F6:37:B2:3F:48:02:25:3F:7C:5B:6C:A3:70:30:57:12:A2:8D:2F:88","sha256":"D7:BD:0C:1D:DD:44:57:54:E1:9B:A7:ED:E9:00:00:7F:58:B4:AB:23:63:A4:93:39:C2:2B:AA:2F:9B:68:5B:7B"}}},"request":{"raw":"GET /cl/v/pq28x2 HTTP/1.1\r\nHost: lockedapp.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/cl/i/pq28x2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 13 Feb 2026 22:19:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: none\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik5MUHJqbU1kY3Z1SXFWT3dsNkpLZHc9PSIsInZhbHVlIjoid25EaHNqSFhMV1hSR0xJT0JUUGF4bm5kbkdkR1pQdU5jU3k5cHcxeWpMMFlpem9oT2lOMEp1VGIxOER3elVDeUJWV3BDVzRzcGhBdEtQSWM2Sm4yeXlHNUZqeHVob2NyYko2eHQ0UmFOOTdIaGlpbEcyUVZSZWR0NGZUZnpndDMiLCJtYWMiOiI1NWQ5MzNiODUyYzk0M2RmZDFlYjczNzBmYjcyODk0NTY5ZWI5NjU0MjU5NTA3NjFhNTU2NjkzNDI0Y2U0OTNiIiwidGFnIjoiIn0%3D; expires=Sat, 14 Feb 2026 18:19:16 GMT; Max-Age=72000; path=/; secure; samesite=lax\nogads_session=eyJpdiI6ImhyekVLR2ZGVm11d09sS3U0NW81M1E9PSIsInZhbHVlIjoiclFzZ2crYloweUc2WDdxMTVIS3QvSzdzZitRM3lWM2RQelZ6bVloTlJaUGxVUFVieXNrR1FpbElnc0NOY0FOdFVNeTlOTEE2dnhxdFI1Tnl4TW8vUkNvK3Q5MG96czE4ZHVDWHlkYy9saU93Q2NySXRQdmlDUjhFenkzb0pwTWgiLCJtYWMiOiI4NzM1ODVlYmQ1NjA2NDZmYTJmNmMzMTI2ZGIxMzllOGNmNDY1NWE4ODY2MmZkNjRjNGU1YmZhMzU2NDdkMGNmIiwidGFnIjoiIn0%3D; expires=Sat, 14 Feb 2026 18:19:16 GMT; Max-Age=72000; path=/; secure; httponly; samesite=lax\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-content-type-options: DENY, nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20631,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3331), with CRLF, LF line terminators","md5":"355a967bc61808cf9d7b530d1343a7d6","sha1":"63dc21c45434d991625e5014f9abccf84b772c00","sha256":"2197441ad28ff8d705f20ceedb3a8eaf5bd1cbe28b12aec269c87a7e4ce8671c","sha512":"6e52cb80a466f16ee5e18c62dd8b8f337a3f8b97ab264ccd4f2247a7acf25b760fdd5728da7c64a4cbb55282c1f023fc78d63e00c95b131b990d4d0afd8ef62c","ssdeep":"384:V/Db/EBzuYsA0A9A1xg29A1Tg09A1Kg89A1wgIMW20aMHTXa6ps4aXpsB2Ia/psS:Vrb/2zuYL0wA1xVA1TRA1KJA1wbMW20S","tlshash":"9a921937ccf64646b0379574afea445da364800347034a98b7dcaa6ccfba7ae657231c","first_seen":"2026-02-13T22:19:41.229017Z","last_seen":"2026-02-13T22:19:41.229017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"lockedapp.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wallpapers.com/images/hd/blank-white-background-xbsfzsltjksfompa.jpg","fqdn":"wallpapers.com","domain":"wallpapers.com","tld":"com"},"ip":{"addr":"195.181.166.158","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lockedapp.org/cl/i/pq28x2","date":"2026-02-13T22:19:17.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallpapers.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 11:03:19 GMT","end":"Sun, 10 May 2026 11:03:18 GMT"},"fingerprint":{"sha1":"A6:95:28:6F:D9:4A:BD:C5:B1:BF:35:C9:2C:43:BE:8A:4F:85:94:20","sha256":"61:F2:77:C3:D7:7C:8C:C7:78:32:79:75:37:06:57:C6:9A:9D:54:44:FC:D8:CF:7B:B4:DB:FC:F9:11:88:8F:D6"}}},"request":{"raw":"GET /images/hd/blank-white-background-xbsfzsltjksfompa.jpg HTTP/1.1\r\nHost: wallpapers.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lockedapp.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:19:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16143\r\nserver: BunnyCDN-SE1-725\r\ncdn-pullzone: 4439379\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=15552000\r\netag: \"355de85f93700e914777547eb5da3a84\"\r\nlast-modified: Wed, 09 Jul 2025 06:47:01 GMT\r\ncdn-cachedat: 09/08/2025 08:14:24\r\nx-amz-id-2: IIHzkVZ6cFdrb0EPlrEZ/6cNThQ7/C9bjk3wNtf3SC3f/5Xar7alcYUKdYoGHgi4wwhhP6rB1fJV\r\nx-amz-request-id: E22369D77C963CED:A\r\nx-wasabi-cm-reference-id: 1757319154451 38.27.106.129 ConID:2099563402/EngineConID:20151688/Core:30\r\ncdn-proxyver: 1.34\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 3662180367662dd2d0314340cfd532b3\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16143,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x1124, components 3","md5":"355de85f93700e914777547eb5da3a84","sha1":"d02fad3a0f76c3311eb938fc3b24ea3d3ca46b45","sha256":"4e4b01a5b1fef521140049b9c3acc7e58539b734fb43421e74fcffbd04c708a5","sha512":"c36afd5fa85db6880861e032434b2f0c3d1ba7ce52752d7b4c3544da5815ba99591f1e71fde3b887efbd4fe0a970144194d210b79423ecda2eea24273927a961","ssdeep":"96:8jrmV/+bJQnQdk6vmRke9TFN3yjEtadtY7v6K7SfPtua5HoNOJz8j:kCke6vMFN8sade70fPtua5i8e","tlshash":"c972a36b6f18824fd4f54376c04b13253f366b39f24454abca8126b07a733856c7a9d4","first_seen":"2023-11-17T16:19:37Z","last_seen":"2026-05-19T23:12:18.31598Z","times_seen":28,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":40,"dns":22,"connect":7,"send":0,"wait":11,"receive":6,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}