{"report_id":"6fa64073-71d7-417c-9a1e-afe08e3ba863","version":6,"status":"done","tags":[],"date":"2026-04-17T14:23:15Z","url":{"schema":"https","addr":"rbxtools.digital","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rbxtools.digital/","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"title":"RbxTools — Roblox Tools Hub","dom":{"size":26738,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (340)","md5":"7bcd6ef20596a18e54aa3b6848c4aeb4","sha1":"8d8f3570f06071a69cd9eccaf79c8f97071cf5dd","sha256":"cd58825ae0d8aeb9e9890925adc02b52add9acc73441e542cfaff52a516f8776","sha512":"0719dd63420127934d0c5488abfc4dee974b6fe2d396da6f28ee51ef3091be1dbf0bb2a1dc4150b9f17ca23771006223f0663a0030456991f26546da4c74c0f4","ssdeep":"192:u4eMiBtBCdaDI/WDLODIV5JfED4I+Ih53k3tjrl7R0RBmAqA17D3:3pWBCdeVLa6J43+453mRGBTqAV","tlshash":"dbc2023454f4143aa09746c9ae65b73f3ee2a143e90b5004b5be0ba44ffad86dc2397c","dom_hash":"domhash00b45e7cbeba16528d7a4e09c366962d","first_seen":"2026-04-17T14:23:19.749412Z","last_seen":"2026-04-17T14:23:19.749412Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rbxtools.digital","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T14:23:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rbxtools.digital","ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":10,"received_data":179442,"sent_data":4302,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":8,"received_data":111472,"sent_data":4312,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":7964,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rbxtools.digital/","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aafb78dfef383d0ccb145e12c56d972c","sha1":"32ea4e229c6f386116847c1e4b9da2f07584c5ac","sha256":"fb940bb34894430d358e483628dfc4910b30def799ab5511589b839c031bdf93","sha512":"585be3b13e05e374d2c5d9f4a17aaaba3d7fdf87acbabc3420647ebc2ae81942cd2db72118cfb60a880b3149e575e6c3d64a9cc33296066bcb8b9b6e4299d269","ssdeep":"","tlshash":"8d116dadb8b37070657778b54befe9086133588b4408d048b96c48483fe2c049927e6c","size":906,"data":"","first_seen":"2026-04-17T14:23:19.765959Z","last_seen":"2026-04-17T14:23:19.765959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/script.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbfb8aa440a963d5c61b5b401dba1e36","sha1":"5a9ee21fac34e2a5eace6bfc564a1e241122e6b8","sha256":"e506a750863568a6902c5ed9ea0f3f2408929574e085baeb87ede0acb1b53dfc","sha512":"d7183f447477a73ba6f2ad7806fb174029f5529ab3b77bf5c55df21791c568022e73d08a19cb17c12e61be4a903bb097da603dc049aa227844ff1a511994831e","ssdeep":"384:wBhFbE2Kwlh3Zj/xufzuMkqWVHwLsKHgh8/6C5TXHDVCO3R/bTwLsKHgI48/IakZ:2lFOSFIXE3m/","tlshash":"b6c2515aa029566bc9f67739abe77508ff36040304429225be7c90c26ff5c8981b6fcd","size":26566,"data":"","first_seen":"2026-04-17T14:23:19.756593Z","last_seen":"2026-04-17T14:23:19.756593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/config.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eecf6f50ce1248c6130f02ee1d06343c","sha1":"187518e39ec8a9f17779c09366f3ba632732bb41","sha256":"ac16ac15449d28a3a6bd7113a1460c55101b34d47759114937d0fd73f6e2b988","sha512":"b636625a4efac892427a6423985b37be3e111cffb79af51f9fe8f6b745887f7c8ccbb43378298238ec6817a47d725043187977055fac946c3e5f173c844cd98f","ssdeep":"","tlshash":"65517e8a4956422e8572d3eafa2c6a45fd54036f0205d42b78fc33052f742797cdaef4","size":2448,"data":"","first_seen":"2026-04-17T14:20:48.509867Z","last_seen":"2026-04-17T14:23:19.761963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/brand-updater.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c0ef0e5cd99080a25a013a37f57e493","sha1":"6720bdcebcfc2b56da2be579ceaf3f3aab227ef4","sha256":"a2afeb7282563099deb101c3cd8f242454ce64dd8f4ceee21dfea1c1e57585f5","sha512":"6a12d60227324709c74404378de93130b6e81431cbd0ebc7362ae63e356e62f5f682cd6001e019aead1b0905853b39a783f1116be73866a17610b60eeb189680","ssdeep":"","tlshash":"f941bd2ed02a65b28537337887c7664dfeaa603775408506fddc414b1fb1818b9d2e9d","size":2097,"data":"","first_seen":"2026-04-17T14:20:48.515853Z","last_seen":"2026-04-17T14:23:19.755808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/telegram.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a8bd4457fda91b7eded297e0f9d00b9","sha1":"84ef81b602fdf7a5f16407daf0f4c661a5a444c2","sha256":"f47af9c657511598195e3e3a3605b21eecf9b5ea581cae155168b15ad2770d2e","sha512":"7a43e2f5ea3ee90e17c73f6a76e104f4ac0070dddcc33659511f78cbe081f4d4d8cdb3923e2c0662b78122a2cf53be7daaf9d8304a103d6d30fd3fa2775563a3","ssdeep":"192:H1BcUvlVcd2vERtbq2JP7maBe96GQFAxJSI0v:H1pv4UcP1BHFKJD0v","tlshash":"1bf163a30576053b8270a1b9bf73b949fa41a0b72a10ff8cf94d816d1fb9015e562e88","size":7785,"data":"","first_seen":"2026-04-17T14:20:48.510783Z","last_seen":"2026-04-17T14:23:19.753058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/loading.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66d523c9f1b8f2243543c8610da8565c","sha1":"97c6d35269a8de2fec90091086947cb33b9694f0","sha256":"ad4e1c1e1e28f9c339e1be1fd63bee4169417fb7fbd45231eb2139ae15977c59","sha512":"6f57db3f57e72ac3e837c8e79843ede86bfbcc125305bda6d0dadf6374f49802623214a604ebad8e441ffda776199da2be3ac83784ac1e2a3d04fb6b43d74b01","ssdeep":"192:IW/vPPKdNpsOFMF/HEc3HbH9qtjBwM+nrOte9qtjxlLtxdHMlV/VUmsdeE7Kv:H/HCdjsOFMF/HEc3HbHNM+nrbslLtxdc","tlshash":"8af1000aa62a0418a776513ddeaa250df735452b494f831cbd3c80d5aff4e6111b7ff8","size":7453,"data":"","first_seen":"2026-04-17T14:20:48.516638Z","last_seen":"2026-04-17T14:23:19.762628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86eec810a2612d2a742ed2d86128ab60","sha1":"fb940b27a725aaa6f513fe02e92705b115053898","sha256":"77ae1388e67b7ad45a06196abfcfcebd553cff73498d349477be8027498855c9","sha512":"14f964b0add88007ec36877b5563247298ae7510a7c4151616a6dfbed0b9bc17bec1cddda5f51364a35e84a68d61232f59e448a0155591a454194ca240b1f1f2","ssdeep":"","tlshash":"9041786ff5f214b095fb763a136ee74435b204431806dd013e2d8e651fa8ed409b9ac8","size":1883,"data":"","first_seen":"2026-04-17T14:23:19.767286Z","last_seen":"2026-04-17T14:23:19.767286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/review.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cf2bf5ad6a812196c037c5404d937ff","sha1":"562c0dda6f4d8bfe901c9fb97ffc037dc91d5efe","sha256":"3162b2d5d003f36fb4254f0293c57cd845a622cedf3fe0ee06fe16de3a75c114","sha512":"1ca62dcb52479ab89e13831e30666b7b1a15ec4e58731e7f59e26e5a3a4a41fee7ffe0f07534d486f4c79dbd7df948e316b5c7b5ed2e95567bbc4da128e3fcc9","ssdeep":"96:TAwO5DwnDGZ/Iz2kqewmv5p2aWT8MGi6qsqHOq6fNaR63nB4CFrYbCO46zkA0cCt:3owfR/iylB3n2CFrYbCOdCItIv","tlshash":"4a5251ca52fa40e51bb35b75bf10af5bf31c6303260084a7f56c23652fba836826795c","size":14192,"data":"","first_seen":"2026-04-17T14:20:48.514301Z","last_seen":"2026-04-17T14:23:19.763616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rbxtools.digital/rbx-logo.svg","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /rbx-logo.svg HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liV4RVR6QA1SYPgZM%2FFiqGCNlsVOAZM1xtccTlLi%2BGUlL9XLvYrp2C10BkYLjCwiODFXKQVlMwOM7f%2FfHGxdw46RKkeAbbKJMqq9oz4Dri6pPMYi65zpGn4hOmNO2kMTYK8j\"}]}\r\nlast-modified: Sat, 28 Mar 2026 22:11:24 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 12:31:20 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 784293\r\ncf-cache-status: HIT\r\netag: W/\"69c8520c-557\"\r\ncf-ray: 9edc15a25c2b712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e5b5a3f658494b3b8991c99931b4f64","sha1":"fea28b40bc8d61c8488b4d59deb56f5783d0d58e","sha256":"f69592cf17d5046f0841c1bee4a48e61c676548ddb957b1b728b1a03edb31bc0","sha512":"5825d0860b473c05375ec4ae025f801e6dcedf717f4213c2d3e6816964779e434d72f6883e12768d818ae788e5994580bd8c0a2d612cffcc2e57bfb10f17e8e7","ssdeep":"","tlshash":"8121560415ca96350b78890ca7fe35d9c31ac107452e062a728c292bdbb795e657f3ec","first_seen":"2026-04-17T14:20:48.508824Z","last_seen":"2026-04-17T14:23:19.750881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/styles.css","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67hmlF63i22KeitrN3GxVQit3wtrMENgjnme1sXTkhZL5Rp5%2ByPHd%2BTY8rO1ioJ3S6IOTXs4O9xV%2FCrDAuUjarfiAoAjF8PHr%2FTTRgHZI3AFkXbLbQ%2Fw%2Bsi8UGkC1GcpjzDz\"}]}\r\nlast-modified: Sun, 12 Apr 2026 09:01:22 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 16 May 2026 14:42:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 85216\r\ncf-cache-status: HIT\r\netag: W/\"69db5f62-13f72\"\r\ncf-ray: 9edc159f9c0f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81778,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"dfc6f931c7df18cbb3dfbe3d41c058c0","sha1":"5189dcb8e15ddf90b456bbe49b1f9aa1a7805904","sha256":"296134b6fd52976baae4a417e0e1f5bd3cd2f052a8e62f36f04665b2efabab5b","sha512":"e59e72895bdebef1fbae78a20a24debe39d1fbf14cece246c299838082a309bc93a2521b9aad8e37d943b05a32aea172b4ee047808313ff24d21cc62a4773d73","ssdeep":"768:w06/gWtQ+XzUV/Tc4BaWoBxv8XBHdZMMWJvqT8SofTLBjzsYZ:r6/gWtQ+XzUV/Tc4sZ","tlshash":"0b83731d9a0414886937aba8ffe3875ae7996013d60681bcbfce21448ff527c9591fcc","first_seen":"2026-04-17T14:20:48.512292Z","last_seen":"2026-04-17T14:23:19.751932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/telegram.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /telegram.js HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEDAsmP%2FYR7ELkw30ZUforWXDvyCDnI1RV%2Fet5CGlpYYreC9mZeERflpdFivqS5i6BAh6XoI4Avg%2F1AHPT9K2C29hpXRvg9u3YR14wHeRq%2B2WrTYIPFGKzCypqv%2F21e9CRRa\"}]}\r\nlast-modified: Sun, 12 Apr 2026 09:01:21 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 16 May 2026 14:42:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 85216\r\ncf-cache-status: HIT\r\netag: W/\"69db5f61-1e6c\"\r\ncf-ray: 9edc159f9c13712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5a8bd4457fda91b7eded297e0f9d00b9","sha1":"84ef81b602fdf7a5f16407daf0f4c661a5a444c2","sha256":"f47af9c657511598195e3e3a3605b21eecf9b5ea581cae155168b15ad2770d2e","sha512":"7a43e2f5ea3ee90e17c73f6a76e104f4ac0070dddcc33659511f78cbe081f4d4d8cdb3923e2c0662b78122a2cf53be7daaf9d8304a103d6d30fd3fa2775563a3","ssdeep":"192:H1BcUvlVcd2vERtbq2JP7maBe96GQFAxJSI0v:H1pv4UcP1BHFKJD0v","tlshash":"1bf163a30576053b8270a1b9bf73b949fa41a0b72a10ff8cf94d816d1fb9015e562e88","first_seen":"2026-04-17T14:20:48.510783Z","last_seen":"2026-04-17T14:23:19.753058Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:34 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563119\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-08-06T02:26:21.504646Z","times_seen":8167,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":187,"dns":3,"connect":7,"send":0,"wait":9,"receive":1,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:34 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563119\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-08-06T02:26:21.504646Z","times_seen":8167,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":181,"dns":3,"connect":7,"send":0,"wait":10,"receive":1,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@400;500;600;700;800;900\u0026family=Rajdhani:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@400;500;600;700;800;900\u0026family=Rajdhani:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Apr 2026 14:22:53 GMT\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7278,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fd7c4cbf0aecf08261444071843a1a3e","sha1":"92f8f2cd508d917faaa88426115887cf1df421bb","sha256":"a882544dbde2c2b34344d1c7ceae44089c12119b41348fd525c70fc0bd9ebeed","sha512":"26f36a56a580417516324d8047b08cc1e896bede87c85191aa558a6457a4a5289f9edfe4f7d764529a1a0bf506969b0ee3d50dfb0701a04d312f0834b48076e1","ssdeep":"96:OOEagONbOXagONbOxMagONbOpagONbOwhagONbObagON/OEamOEacJc+uqOEaoNh:pgwgpg6gTgMgFxoooi4vDOHSVeCBL","tlshash":"d9e1f3910827b900eb932cc153ce7e36ef0e62546855d938affe1cd8ad9ac265352b1d","first_seen":"2025-10-22T10:59:42.503084Z","last_seen":"2026-04-17T14:23:19.755004Z","times_seen":27,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":83,"dns":1,"connect":25,"send":0,"wait":34,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/brand-updater.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /brand-updater.js HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZX5AZMnD1baQiUr3Ge73LFqPlw80T3VwtjHXHh47aVNTjz1fUS6S4Pbu9Mav91wtIt%2Bgxau0QYmombNi%2B9rr7R3ieeNN1HHf2VHdODRj78KDKcb7H6GtoHLAeLa0yZBQD9He\"}]}\r\nlast-modified: Sun, 12 Apr 2026 09:01:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 13 May 2026 15:37:34 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 341118\r\ncf-cache-status: HIT\r\netag: W/\"69db5f63-831\"\r\ncf-ray: 9edc159f9c12712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2097,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"1c0ef0e5cd99080a25a013a37f57e493","sha1":"6720bdcebcfc2b56da2be579ceaf3f3aab227ef4","sha256":"a2afeb7282563099deb101c3cd8f242454ce64dd8f4ceee21dfea1c1e57585f5","sha512":"6a12d60227324709c74404378de93130b6e81431cbd0ebc7362ae63e356e62f5f682cd6001e019aead1b0905853b39a783f1116be73866a17610b60eeb189680","ssdeep":"","tlshash":"f941bd2ed02a65b28537337887c7664dfeaa603775408506fddc414b1fb1818b9d2e9d","first_seen":"2026-04-17T14:20:48.515853Z","last_seen":"2026-04-17T14:23:19.755808Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/script.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8UEphPrJk9z3POt%2Bi0qNQ7kgxYdNm%2FHUr6bBJtjnggUKopEdr4Yfb0rx0PphALywcxXCaJ%2BZBc46za7KnvlFChoAizd6v0aFNhirkPbWrwMQ0HvjK3l7xBqavVZju3DcAuE\"}]}\r\nlast-modified: Sun, 12 Apr 2026 09:01:21 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 16 May 2026 14:42:36 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 85216\r\ncf-cache-status: HIT\r\netag: W/\"69db5f61-67c6\"\r\ncf-ray: 9edc159f9c16712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"bbfb8aa440a963d5c61b5b401dba1e36","sha1":"5a9ee21fac34e2a5eace6bfc564a1e241122e6b8","sha256":"e506a750863568a6902c5ed9ea0f3f2408929574e085baeb87ede0acb1b53dfc","sha512":"d7183f447477a73ba6f2ad7806fb174029f5529ab3b77bf5c55df21791c568022e73d08a19cb17c12e61be4a903bb097da603dc049aa227844ff1a511994831e","ssdeep":"384:wBhFbE2Kwlh3Zj/xufzuMkqWVHwLsKHgh8/6C5TXHDVCO3R/bTwLsKHgI48/IakZ:2lFOSFIXE3m/","tlshash":"b6c2515aa029566bc9f67739abe77508ff36040304429225be7c90c26ff5c8981b6fcd","first_seen":"2026-04-17T14:23:19.756593Z","last_seen":"2026-04-17T14:23:19.756593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:34 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563119\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-08-06T02:26:21.504646Z","times_seen":8167,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":71,"dns":1,"connect":7,"send":0,"wait":13,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pb0EPOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pb0EPOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15084\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 17:37:45 GMT\r\nexpires: Sun, 11 Apr 2027 17:37:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 506708\r\nlast-modified: Tue, 16 Sep 2025 03:40:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15084,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15084, version 1.0","md5":"98d75ef6878aa0544049b77bed867541","sha1":"e7d0d08b1ced5e6c424aa7efb0ea5c11276e4cf5","sha256":"23afdb9b5b89b878fab04d80cc30bf41bb4f3f7e8be88e5f16a7cc7671cdb2dc","sha512":"360ace65f75039a94a33a835761442eeb1d67d612598766375ea0715d577f09cb09e1ffaee5d3553d3832c7ce1d0915e7b79c0b4eb1c00129cc2a4f4117a2c43","ssdeep":"384:gyo8YAic7O+qBHVNtW4lIS9PqRDGr3DwKmQ7s9:l9JiiO+M1NtW4lDwBGUW7k","tlshash":"ec62d09c5a2e96b0a90e7d34847b6102b0f11fa7f5541fc9c10205399a0fe780edd4ea","first_seen":"2023-05-01T20:08:41Z","last_seen":"2026-08-06T00:37:49.087937Z","times_seen":3719,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":62,"dns":2,"connect":12,"send":0,"wait":22,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T14:22:53.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 12 Apr 2026 09:01:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsDpSJjSHtrhEpeNqJLoS3CcrNxjs2xWXApKYBdw97B%2Bt76o09qfChBr9lRnWKlrsjqG1BxOV5945oEoE6c0q5AJxci7QfMXKgshbuaHgxAOCK8h1jVm%2BK1qZprEA4Husy%2FA\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9edc159d8d99b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26978,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (340), with CRLF, LF line terminators","md5":"438e5db5884afb9d8e6632bbb63a79df","sha1":"d1e247ab84fc1acbe7d7a44c9098655c72f99816","sha256":"94e1a52340929a7aeb4b9f5f3a379639246dc57a56319e124616cb022d89f50b","sha512":"a2a8454ac3ff78c2552b88a2bf9680bfbb01923e7af5e7021008cc3d46553c4e682434bc7b146ba1ed35d74b2c3a73df13b7f2b4e8c51204a77900f7280e0569","ssdeep":"192:9sSNaG48Yp5XDx51DqfDxW15K0DRvIhT0BHCotG4hWWRBxd9AX:upGYp5Txqbk57F4TIJcaBP9AX","tlshash":"e0c22f3894e4043a90b382999e24b77afde25143d70b9104b5fd1bab4ffad05dc239b4","first_seen":"2026-04-17T14:23:19.760788Z","last_seen":"2026-04-17T14:23:19.760788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":156,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/config.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GL2Jklj9azMajwqW7oMXf1KdBWFj7LOJYLW00nRcUUGBI8YqRIVGqlyJ%2F%2Bi0DQ7co0aOOym%2FJDUMhmlIas8v5PDZQylwGy3Ln8HYWVeDTZe6vpq4pN5UVyNCcFLkYJzRlTd8\"}]}\r\nlast-modified: Sat, 28 Mar 2026 22:11:22 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 09 May 2026 15:01:37 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 688876\r\ncf-cache-status: HIT\r\netag: W/\"69c8520a-990\"\r\ncf-ray: 9edc159f9c11712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"eecf6f50ce1248c6130f02ee1d06343c","sha1":"187518e39ec8a9f17779c09366f3ba632732bb41","sha256":"ac16ac15449d28a3a6bd7113a1460c55101b34d47759114937d0fd73f6e2b988","sha512":"b636625a4efac892427a6423985b37be3e111cffb79af51f9fe8f6b745887f7c8ccbb43378298238ec6817a47d725043187977055fac946c3e5f173c844cd98f","ssdeep":"","tlshash":"65517e8a4956422e8572d3eafa2c6a45fd54036f0205d42b78fc33052f742797cdaef4","first_seen":"2026-04-17T14:20:48.509867Z","last_seen":"2026-04-17T14:23:19.761963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/loading.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /loading.js HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nlIBKcimtNdzwmm1HHz62mDVYpJGiHjc0OTtwEiAfsCy%2BVaNd3xFSOKA8K0aHoijN%2FzU3vdc5bMWfN9iL1%2B8AZqUsFFxXpg%2FOdJ5LNWK%2FFwRNjyArgQiDqXPd7cTQGDT3MN\"}]}\r\nlast-modified: Sun, 12 Apr 2026 09:01:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 13 May 2026 15:37:34 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 341118\r\ncf-cache-status: HIT\r\netag: W/\"69db5f63-1d1d\"\r\ncf-ray: 9edc159f9c14712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7453,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"66d523c9f1b8f2243543c8610da8565c","sha1":"97c6d35269a8de2fec90091086947cb33b9694f0","sha256":"ad4e1c1e1e28f9c339e1be1fd63bee4169417fb7fbd45231eb2139ae15977c59","sha512":"6f57db3f57e72ac3e837c8e79843ede86bfbcc125305bda6d0dadf6374f49802623214a604ebad8e441ffda776199da2be3ac83784ac1e2a3d04fb6b43d74b01","ssdeep":"192:IW/vPPKdNpsOFMF/HEc3HbH9qtjBwM+nrOte9qtjxlLtxdHMlV/VUmsdeE7Kv:H/HCdjsOFMF/HEc3HbHNM+nrbslLtxdc","tlshash":"8af1000aa62a0418a776513ddeaa250df735452b494f831cbd3c80d5aff4e6111b7ff8","first_seen":"2026-04-17T14:20:48.516638Z","last_seen":"2026-04-17T14:23:19.762628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/review.js","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /review.js HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z05IRMldEKNAivbOWEjpzW%2FSwOO7NLpIxqsInyLpvb%2BaIlgna0FPjN85cKxpnx5I1c7qKW8lK0Yn88Od6XpW0sOPvpbW30FFqnNLjMPc%2Fy9jVMhL1V4GtdaStfixEgPQYrr0\"}]}\r\nlast-modified: Sun, 12 Apr 2026 09:01:22 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 13 May 2026 15:37:34 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 341118\r\ncf-cache-status: HIT\r\netag: W/\"69db5f62-3770\"\r\ncf-ray: 9edc159f9c15712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14192,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"1cf2bf5ad6a812196c037c5404d937ff","sha1":"562c0dda6f4d8bfe901c9fb97ffc037dc91d5efe","sha256":"3162b2d5d003f36fb4254f0293c57cd845a622cedf3fe0ee06fe16de3a75c114","sha512":"1ca62dcb52479ab89e13831e30666b7b1a15ec4e58731e7f59e26e5a3a4a41fee7ffe0f07534d486f4c79dbd7df948e316b5c7b5ed2e95567bbc4da128e3fcc9","ssdeep":"96:TAwO5DwnDGZ/Iz2kqewmv5p2aWT8MGi6qsqHOq6fNaR63nB4CFrYbCO46zkA0cCt:3owfR/iylB3n2CFrYbCOdCItIv","tlshash":"4a5251ca52fa40e51bb35b75bf10af5bf31c6303260084a7f56c23652fba836826795c","first_seen":"2026-04-17T14:20:48.514301Z","last_seen":"2026-04-17T14:23:19.763616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:34 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563119\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-08-06T02:26:21.504646Z","times_seen":8167,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxtools.digital/rbx-logo.svg","fqdn":"rbxtools.digital","domain":"rbxtools.digital","tld":"digital"},"ip":{"addr":"104.21.68.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxtools.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 16:23:14 GMT","end":"Mon, 08 Jun 2026 16:23:13 GMT"},"fingerprint":{"sha1":"10:B5:25:AE:E0:AA:82:3C:EE:5F:81:E6:D9:04:E9:81:58:F6:E1:AD","sha256":"DD:9E:CA:4B:7D:F3:E1:28:39:DB:88:8C:2A:CD:2B:B5:A3:41:D9:77:C2:66:7A:77:DA:DF:FF:01:33:FD:9A:5B"}}},"request":{"raw":"GET /rbx-logo.svg HTTP/1.1\r\nHost: rbxtools.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxtools.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEf9ly%2Bm3ZM2%2FLMt8rSg4stax49bPNnV7v9IybnFyjeoB876x4j0capyCs1CpTDudHKVXOTF9m98n9Gv1emo43c%2F5exzm4v%2FKvVtFlFcNJ9TX3kuGi4B7CrEgs8s0p0fQbOC\"}]}\r\nlast-modified: Sat, 28 Mar 2026 22:11:24 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 08 May 2026 12:31:20 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\nage: 784293\r\ncf-cache-status: HIT\r\netag: W/\"69c8520c-557\"\r\ncf-ray: 9edc159f9c10712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e5b5a3f658494b3b8991c99931b4f64","sha1":"fea28b40bc8d61c8488b4d59deb56f5783d0d58e","sha256":"f69592cf17d5046f0841c1bee4a48e61c676548ddb957b1b728b1a03edb31bc0","sha512":"5825d0860b473c05375ec4ae025f801e6dcedf717f4213c2d3e6816964779e434d72f6883e12768d818ae788e5994580bd8c0a2d612cffcc2e57bfb10f17e8e7","ssdeep":"","tlshash":"8121560415ca96350b78890ca7fe35d9c31ac107452e062a728c292bdbb795e657f3ec","first_seen":"2026-04-17T14:20:48.508824Z","last_seen":"2026-04-17T14:23:19.750881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"rbxtools.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:34 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 563119\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-08-06T02:26:21.504646Z","times_seen":8167,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":84,"dns":0,"connect":7,"send":0,"wait":8,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pbYF_Oreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pbYF_Oreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 00:02:53 GMT\r\nexpires: Mon, 12 Apr 2027 00:02:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:40:27 GMT\r\ncontent-type: font/woff2\r\nage: 483600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15732, version 1.0","md5":"ad9c55ecf03998391f7149c29543452a","sha1":"dcd4cf87ae721dd01a6ee29be033c7d70f9c198d","sha256":"433a7007e4747a02a790167a6efa2625855f013970ba49b9b739a5d3db8b2601","sha512":"4ba4dd00ea6cfdc3510f0a8b20427e095661bc253ef17533618373ec361af2fe5b1d912e02369a2a33c523dae7068aa0d56a2a233413f1041a029c4cbdeee27f","ssdeep":"384:Fjf7x9pcxpE5/f4Px/hIzqNLXpivowtuhkDRKn24IJEE:pf3peE9qDIzmWowqkFC249E","tlshash":"7262d06ec41ec5c2e414e175d753f4684a679b392c042144a2ed9f93cf7a0b0fea81f2","first_seen":"2023-04-11T11:42:32Z","last_seen":"2026-08-06T00:27:54.123487Z","times_seen":4208,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":179,"dns":2,"connect":7,"send":0,"wait":12,"receive":1,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDIxapCSOBg7S-QT7p4HM-Y.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxtools.digital/","date":"2026-04-17T14:22:53.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/rajdhani/v17/LDIxapCSOBg7S-QT7p4HM-Y.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rbxtools.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14976\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Apr 2026 22:34:16 GMT\r\nexpires: Thu, 15 Apr 2027 22:34:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:40:47 GMT\r\ncontent-type: font/woff2\r\nage: 143317\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14976, version 1.0","md5":"cac31f26b77ee8053a76a54ce2f8ce48","sha1":"c92bcfc9121164049c1b30655db9481d0e454464","sha256":"759a9000e47b028799d7a4ca602634a7ac7adf415775df070a335d18d9b66f38","sha512":"175e68a3fa2978ab4a89c5bd92eebe5c0f034ccbd6004dd708c243b561102ac7e15e267b90edb86d03c312c1849b157b544ae8045209b0c2e2b27d1b480b7783","ssdeep":"384:ekfg3HBbG7EsSXbNSX0FgF1o56xCKSEdVkSKMOk5:bI3hEEJJSXExAwEKI5","tlshash":"7b62cfb8b1b6d40fb06e4de74cb0d2e11d78b155ad6a8ee4109bef197668063852fe30","first_seen":"2023-04-26T23:36:20Z","last_seen":"2026-08-06T00:27:54.119148Z","times_seen":4384,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}