{"report_id":"63fe30c4-a793-4465-b0a4-0b665503e8f5","version":6,"status":"done","tags":[],"date":"2026-03-24T02:36:57Z","url":{"schema":"https","addr":"robloxai.site/","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"robloxai.site/","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"title":"RobloxAI Builder - Build Roblox Games Using AI","dom":{"size":34444,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17282)","md5":"6c4016f9b02db8f18d7fae198045cbe2","sha1":"c17588d1027162a5f5f54bfbded9ff15e61131e0","sha256":"51ff0e233675d23bb3a9d6ef191a0a7945efc6a75887a1f77ada30597ad339cc","sha512":"d778f3d0912d4802fc479fd6084a8fdeb0301a3331cda90d335e608df217b87f2c265e1abd96071c43e64ba22cabd3c42da1b00203dbbb90fffd6adea7701673","ssdeep":"768:txIn+MzhMsnB7cxksc64Jysq7vBNZWgTPcgcucpclcfmcrgTmgE:tFXx/c64Jysq7vPRNfGWsmS","tlshash":"5af2b725610c133c692b87a8fbd4b33c9129f142eea7441af14d006ae6c3fe568b6bd4","dom_hash":"domhash83fb7f93cdb92d7d7463ce52216db8b6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"robloxai.site/","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T02:36:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"robloxai.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"robloxai.site","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-01-23","domain_rank":0,"first_seen":"2026-03-24T02:35:11.395358Z","last_seen":"2026-03-24T02:35:11.395358Z","alert_count":6,"request_count":6,"received_data":840614,"sent_data":3867,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":2,"received_data":23388,"sent_data":1018,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":32117,"sent_data":1075,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"robloxai.site/","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"490186ae5113b68199f8658ceabb86f9","sha1":"135c3d055ccff656b28b319449f495132441ca7d","sha256":"80df4f8b42805f6a9fdcbaa7ef2693902dedffec7e60217c2450e9ca556a2084","sha512":"b3ca9d19ae77db1fe0717d9de0ef3ea513dfa8aa9b6de1282eb2612c38a7b14f03a6e14100e58a86948887e3a7ce90a4e229addb6860911748616ce9a476cb86","ssdeep":"","tlshash":"049002702040443905a9154cb0658bc43d340c40a0463010806cc5890121dd210109c9","size":47,"data":"","first_seen":"2025-10-10T03:44:49.048953Z","last_seen":"2026-06-01T00:52:34.532246Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxai.site/assets/index-CxUEVcqK.js","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b16d75570984cdf1676475216f0139db","sha1":"8e265df53c7ba56da22f16ca833190330b781956","sha256":"6e708eee11e77b0b462161457a0edd8f3e7f1d71340eef8cabf192aebd2b125c","sha512":"6d54dea978fc6d5a97051ba4794be6f01e1a6f372931de59663824722d98addcc4eba38a9afd994dba248b9b1b80c0bd0df76e160de7c9b603999d24d2b29659","ssdeep":"12288:NZupFXrj4Q+QL8kc5vkwb8ddwh+VZ71nxjC0wIekhCzMsXCTRW:NZupRAj/b8ddwh+VZ71nJVwIaF","tlshash":"6ff46cc872a5716647e285e1903f0203b3393915780e80a8f13d9def7b65909a67bf7d","size":732729,"data":"","first_seen":"2026-03-24T02:35:14.122293Z","last_seen":"2026-03-26T07:05:55.026585Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxai.site/~flock.js","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-13T20:27:56.949459Z","times_seen":10607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"robloxai.site/","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T02:36:35.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxai.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 20:02:04 GMT","end":"Sun, 21 Jun 2026 21:01:57 GMT"},"fingerprint":{"sha1":"BC:02:3C:51:7B:E8:8F:68:10:50:46:26:40:20:D6:AD:AB:59:93:DF","sha256":"F5:1A:E6:05:22:B6:08:0F:F1:04:14:70:0F:35:83:3C:D5:94:73:C2:76:E5:98:CB:E3:D3:4F:20:4C:59:14:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robloxai.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 02:36:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __cf_bm=1ZOMvqFLA.lrWeQ9LBlgVXi2WNF2IVJTMYIcbhCKG7A-1774319795.5585148-1.0.1.1-vCRBlmaWGZ_PDQwu3I7H54IBoLgzHP2Lbg7bd6OPM8Zwosin3.jGAhh7kd42FbspCrfTO2bBqhOsG7D7EIA4RTa6fqBx07knftqzCy7B1MnuK8nDlx.WG0DBKGGJ7E_d; HttpOnly; Secure; Path=/; Domain=robloxai.site; Expires=Tue, 24 Mar 2026 03:06:35 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"7a82fa7eba0e2b95b8a484da0bb09c2c\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e124a023a41b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7664ebb0ee7b590d8d4a6b91d3df1447","sha1":"9a459cd5a4c4c460c9e31b90cdb8f415f1b75ece","sha256":"38834b2399a44ef9e2f92ec4c703fc7b702e2e99631644601c7149dcc47e3a93","sha512":"36d98a85ba36798d398275d3d50744955dc4fc0e5524af24c377b3ec0e69c5d97e6b9ed3b6e428d4a5e6844d7bd0ebc92e5fe46cb5673b1960382ca5d1f5364d","ssdeep":"","tlshash":"9d5130f3dea0c4467120827858d1fa49ee3e4a5b874d8c55f69c709e0fe6bc082bb5e5","first_seen":"2026-03-24T02:35:14.119486Z","last_seen":"2026-03-26T07:05:55.025712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":263,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"robloxai.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxai.site/assets/index-CxUEVcqK.js","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxai.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 20:02:04 GMT","end":"Sun, 21 Jun 2026 21:01:57 GMT"},"fingerprint":{"sha1":"BC:02:3C:51:7B:E8:8F:68:10:50:46:26:40:20:D6:AD:AB:59:93:DF","sha256":"F5:1A:E6:05:22:B6:08:0F:F1:04:14:70:0F:35:83:3C:D5:94:73:C2:76:E5:98:CB:E3:D3:4F:20:4C:59:14:D9"}}},"request":{"raw":"GET /assets/index-CxUEVcqK.js HTTP/1.1\r\nHost: robloxai.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxai.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=1ZOMvqFLA.lrWeQ9LBlgVXi2WNF2IVJTMYIcbhCKG7A-1774319795.5585148-1.0.1.1-vCRBlmaWGZ_PDQwu3I7H54IBoLgzHP2Lbg7bd6OPM8Zwosin3.jGAhh7kd42FbspCrfTO2bBqhOsG7D7EIA4RTa6fqBx07knftqzCy7B1MnuK8nDlx.WG0DBKGGJ7E_d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 02:36:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b16d75570984cdf1676475216f0139db\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e124a05096eb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":732729,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"b16d75570984cdf1676475216f0139db","sha1":"8e265df53c7ba56da22f16ca833190330b781956","sha256":"6e708eee11e77b0b462161457a0edd8f3e7f1d71340eef8cabf192aebd2b125c","sha512":"6d54dea978fc6d5a97051ba4794be6f01e1a6f372931de59663824722d98addcc4eba38a9afd994dba248b9b1b80c0bd0df76e160de7c9b603999d24d2b29659","ssdeep":"12288:NZupFXrj4Q+QL8kc5vkwb8ddwh+VZ71nxjC0wIekhCzMsXCTRW:NZupRAj/b8ddwh+VZ71nJVwIaF","tlshash":"6ff46cc872a5716647e285e1903f0203b3393915780e80a8f13d9def7b65909a67bf7d","first_seen":"2026-03-24T02:35:14.122293Z","last_seen":"2026-03-26T07:05:55.026585Z","times_seen":3,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"robloxai.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxai.site/~flock.js","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxai.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 20:02:04 GMT","end":"Sun, 21 Jun 2026 21:01:57 GMT"},"fingerprint":{"sha1":"BC:02:3C:51:7B:E8:8F:68:10:50:46:26:40:20:D6:AD:AB:59:93:DF","sha256":"F5:1A:E6:05:22:B6:08:0F:F1:04:14:70:0F:35:83:3C:D5:94:73:C2:76:E5:98:CB:E3:D3:4F:20:4C:59:14:D9"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: robloxai.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxai.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=1ZOMvqFLA.lrWeQ9LBlgVXi2WNF2IVJTMYIcbhCKG7A-1774319795.5585148-1.0.1.1-vCRBlmaWGZ_PDQwu3I7H54IBoLgzHP2Lbg7bd6OPM8Zwosin3.jGAhh7kd42FbspCrfTO2bBqhOsG7D7EIA4RTa6fqBx07knftqzCy7B1MnuK8nDlx.WG0DBKGGJ7E_d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 02:36:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e124a050972b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-13T20:27:56.949459Z","times_seen":10607,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"robloxai.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxai.site/assets/index-CZtQ28fv.css","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxai.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 20:02:04 GMT","end":"Sun, 21 Jun 2026 21:01:57 GMT"},"fingerprint":{"sha1":"BC:02:3C:51:7B:E8:8F:68:10:50:46:26:40:20:D6:AD:AB:59:93:DF","sha256":"F5:1A:E6:05:22:B6:08:0F:F1:04:14:70:0F:35:83:3C:D5:94:73:C2:76:E5:98:CB:E3:D3:4F:20:4C:59:14:D9"}}},"request":{"raw":"GET /assets/index-CZtQ28fv.css HTTP/1.1\r\nHost: robloxai.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxai.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=1ZOMvqFLA.lrWeQ9LBlgVXi2WNF2IVJTMYIcbhCKG7A-1774319795.5585148-1.0.1.1-vCRBlmaWGZ_PDQwu3I7H54IBoLgzHP2Lbg7bd6OPM8Zwosin3.jGAhh7kd42FbspCrfTO2bBqhOsG7D7EIA4RTa6fqBx07knftqzCy7B1MnuK8nDlx.WG0DBKGGJ7E_d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 02:36:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8af7d051643eb4d392865a49524b3420\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e124a050970b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72668,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8af7d051643eb4d392865a49524b3420","sha1":"a5f7acdc533320d881292ae7090b822674181cdd","sha256":"e0038c7963ba5866be17b73c5a9ca5b4f32d53b7582228e05b48eb3ab363c499","sha512":"2cd276e68ac26d0aa4b99d9c6adfa5e268d2727427283b54c0debeb0f5081ea825793e0740cf08852cc0efd2f03e0f40eb49924e3df31247f6a3dd9ff71718cd","ssdeep":"1536:juwAhH1RY2YDkYCUQdeFGwCr378VQZkt5FNCoSA:juwAhH1RYVk3UQdeFGwCr378VQZkt5F/","tlshash":"5363741ab919a17e3c2790e8c3ccb9ec6109f0c0de3b06b5be9a41216bd37f619b7554","first_seen":"2026-03-24T02:35:14.123646Z","last_seen":"2026-03-26T07:05:55.023969Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"robloxai.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026family=VT323\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026family=VT323\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxai.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Mar 2026 02:36:36 GMT\r\ndate: Tue, 24 Mar 2026 02:36:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3072,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4cb4861a0c64443e5fb5ec20d259cb80","sha1":"5e215b8bf16291ae8641f1c91036aba3f519ef0f","sha256":"35d10a53d76ef5221775cdd1d0ac2f465d1a6e16f7b2faf77a0d576c408bf1b5","sha512":"073e31bc5bb003b4dfb5252a39774057927e902a234cdaef4a7419a031fec1001c5b446925b49a7b025f10a800c3cc07b46b88b7eeec22767703301f11332b50","ssdeep":"","tlshash":"4651abe2052b9140db831cc273cf7e3ade0e61156881c6799ffe1888acbec660355b4e","first_seen":"2025-09-24T09:55:14.285389Z","last_seen":"2026-06-12T19:39:01.263503Z","times_seen":47,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":197,"dns":4,"connect":29,"send":0,"wait":46,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/vt323/v18/pxiKyp0ihIEF2isfFJU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/vt323/v18/pxiKyp0ihIEF2isfFJU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxai.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17936\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 18:04:50 GMT\r\nexpires: Mon, 22 Mar 2027 18:04:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:01:41 GMT\r\ncontent-type: font/woff2\r\nage: 117106\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17936,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17936, version 1.0","md5":"9cb03ff101745b695ab00581bfb7ceb8","sha1":"4f33d638cb5dc09acc0e940bd2ae4cab1d1c8744","sha256":"8ddbebcc1048154132e1d78eb9b1f7850bca1b7d857035ccf1cb4318ebc615b6","sha512":"4ba8007e98ce15a463e5e5ef35d96a221e143ab67a677950a6c1fa0a6f345c04fbcede718c0634471551acd9e6d77c0b449fecca484decba883210171021650d","ssdeep":"384:AfysgkGgulIZopWHKRQ0K3xjp+kgP3+GHJ+TG0nikv7T+mD8f2D057B:AfniRt2N1DGpIGAff3hDs","tlshash":"ec82e125d8f66852f1c4f8208315892c68594cc7a8c66fb76d493dd1453c27ccbba3bd","first_seen":"2025-09-17T11:01:07.297878Z","last_seen":"2026-06-13T10:34:11.340893Z","times_seen":916,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":134,"dns":1,"connect":21,"send":0,"wait":22,"receive":5,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pressstart2p/v16/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/pressstart2p/v16/e3t4euO8T-267oIAQAu6jDQyK3nVivM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxai.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12512\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 17:58:21 GMT\r\nexpires: Tue, 23 Mar 2027 17:58:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 31095\r\nlast-modified: Tue, 16 Sep 2025 03:41:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12512,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12512, version 1.0","md5":"5c7e04d0202b58d3df25dd6ed69ce9b2","sha1":"87ab8daaa6e2c9db3778cdb299670e5edf1db828","sha256":"afec86997fdaf54af1f59358fa2c1e2a0f1d04146edad18e5cd141d0384a7548","sha512":"d08a56ec3c4fe4ad1f7bfe2191d30ad810c660b62bde9ed3de5d2c8a9d3c87f75546ef839394f084cb798d1675a2c0ebace5220ab2d1ca28bec60e0fdba4ee11","ssdeep":"384:udJAGR6YO7fjJ0ApzehQKffM30rHn3e7WV:CRNOD7zehk30Ln3e7a","tlshash":"f842bf242856c0ff26b918b759bc1744a99be23613c28912f90698e7ecde4355c3d2d2","first_seen":"2025-09-17T02:54:26.586694Z","last_seen":"2026-06-13T11:32:20.906281Z","times_seen":806,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":227,"dns":1,"connect":21,"send":0,"wait":37,"receive":3,"ssl":200},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=JetBrains+Mono:wght@400;500\u0026family=Space+Grotesk:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:16 GMT","end":"Mon, 18 May 2026 18:21:15 GMT"},"fingerprint":{"sha1":"2E:3A:15:86:61:59:FB:5F:EB:37:7C:37:42:88:9E:94:DB:D6:5A:29","sha256":"A6:F5:D3:00:89:77:82:3F:87:E8:B2:B4:8F:EF:44:C7:21:C2:36:06:DE:BC:31:37:4F:BC:60:76:4D:05:AB:8A"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=JetBrains+Mono:wght@400;500\u0026family=Space+Grotesk:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxai.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 24 Mar 2026 02:36:36 GMT\r\ndate: Tue, 24 Mar 2026 02:36:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18944,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9a287213304e4337b001578f1d0175e6","sha1":"32177eaba9fe15d0254816786baf95e63a49bb90","sha256":"5ad7c4a9f758791b9905d967727893003685fe3aa1776e5c302e3629883b95e6","sha512":"3db9ff0ad5cb25c7bdddbf69547eb7caab69da68f157232b2768202c1d5aed1a3a6f7e3111007791e8d9aeae0c52fe9159275a393ce38a620716e0d729a2d088","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGgG+7p3ZAXYjG9Up3qnXF:vXuM0p2+QOGCDgRt","tlshash":"f882bb92002ba500eb971cc233cf7e3abd8e60496085d5b99ffe1c899ceec66536475d","first_seen":"2026-02-11T02:49:23.110756Z","last_seen":"2026-06-13T06:17:27.526719Z","times_seen":19,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":158,"dns":1,"connect":28,"send":0,"wait":48,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxai.site/~api/analytics","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxai.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 20:02:04 GMT","end":"Sun, 21 Jun 2026 21:01:57 GMT"},"fingerprint":{"sha1":"BC:02:3C:51:7B:E8:8F:68:10:50:46:26:40:20:D6:AD:AB:59:93:DF","sha256":"F5:1A:E6:05:22:B6:08:0F:F1:04:14:70:0F:35:83:3C:D5:94:73:C2:76:E5:98:CB:E3:D3:4F:20:4C:59:14:D9"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: robloxai.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxai.site/\r\nContent-Type: application/json\r\nContent-Length: 334\r\nOrigin: https://robloxai.site\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=1ZOMvqFLA.lrWeQ9LBlgVXi2WNF2IVJTMYIcbhCKG7A-1774319795.5585148-1.0.1.1-vCRBlmaWGZ_PDQwu3I7H54IBoLgzHP2Lbg7bd6OPM8Zwosin3.jGAhh7kd42FbspCrfTO2bBqhOsG7D7EIA4RTa6fqBx07knftqzCy7B1MnuK8nDlx.WG0DBKGGJ7E_d; session-id=9440837a-77fa-4ed4-acdb-0cae81eb808a\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":334,"data":"{\"timestamp\":\"2026-03-24T02:36:36.783Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"9440837a-77fa-4ed4-acdb-0cae81eb808a\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://robloxai.site/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 02:36:37 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e124a09ede5b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-13T20:27:56.954594Z","times_seen":10642,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":985,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"robloxai.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxai.site/favicon.png?v=2","fqdn":"robloxai.site","domain":"robloxai.site","tld":"site"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxai.site/","date":"2026-03-24T02:36:36.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxai.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 20:02:04 GMT","end":"Sun, 21 Jun 2026 21:01:57 GMT"},"fingerprint":{"sha1":"BC:02:3C:51:7B:E8:8F:68:10:50:46:26:40:20:D6:AD:AB:59:93:DF","sha256":"F5:1A:E6:05:22:B6:08:0F:F1:04:14:70:0F:35:83:3C:D5:94:73:C2:76:E5:98:CB:E3:D3:4F:20:4C:59:14:D9"}}},"request":{"raw":"GET /favicon.png?v=2 HTTP/1.1\r\nHost: robloxai.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://robloxai.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=1ZOMvqFLA.lrWeQ9LBlgVXi2WNF2IVJTMYIcbhCKG7A-1774319795.5585148-1.0.1.1-vCRBlmaWGZ_PDQwu3I7H54IBoLgzHP2Lbg7bd6OPM8Zwosin3.jGAhh7kd42FbspCrfTO2bBqhOsG7D7EIA4RTa6fqBx07knftqzCy7B1MnuK8nDlx.WG0DBKGGJ7E_d; session-id=9440837a-77fa-4ed4-acdb-0cae81eb808a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 02:36:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 8845\r\netag: \"80705092f83963696995d108727f329d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e124a0b08ecb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8845,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"80705092f83963696995d108727f329d","sha1":"3ed8614658ecf260d412a003413561a12f56eed4","sha256":"007db27dcb40cc9a92b906d673d5e14a8c5cd7fa7685bf9314358c1d62a3029a","sha512":"0055ab57f4e1f0990422c615eb23c2c414572bf8825a060c44aa21508589f8280a637510d2f1f1a69b2d779f62d804ae386a3858d203e14ca51b5766c65c0d20","ssdeep":"192:LSPqZGAuDh5E72wsHbILrPMqvivozDD3vqF6Epo:GiwDh5EZXrZv1/qgEpo","tlshash":"6302471388149b43a52593e8be070ead2f4a6a0ce9c236ff55274ddb7d607314c9e52e","first_seen":"2026-03-24T02:35:14.117371Z","last_seen":"2026-03-26T07:05:55.028604Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"robloxai.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}