{"report_id":"7826e50c-ef3c-4642-a568-9a67da25a569","version":0,"status":"done","tags":[],"date":"2026-08-16T20:41:52Z","url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"title":"Get Roblox Free Robux | BloxPan","dom":{"size":219040,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39349)","md5":"18567d10845a80a6d0e30cdfe2c763a7","sha1":"80213e7532a29c0d1d6db3b67a4242cda408712e","sha256":"e11bc1838054844effa39b7cb8b83380e557c266132d0d641c10148b61c0fe9a","sha512":"3e7c3e3c001b7274b5a80a1fb4dda768e076e3710af1d968df726f01334d94d37b44653714639f1b0119b24f13430f9f8d9e42b2e44181b619db260cb4c3b25f","ssdeep":"3072:Ni+hyLwEyn2DIFF3Zv0ofCA6J3Zv0ofCA629d7D:Ni+hyLJIFTsv/sv2","tlshash":"1e24092125b0103b2dd340f5f296af19b67ea283cf07d9fdb59c91102f89db5ca9b690","dom_hash":"domhash774aca0562d8940976cd6f1be918d3ee","first_seen":"2026-08-16T20:41:56.432614Z","last_seen":"2026-08-16T20:41:56.432614Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T20:41:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-09T22:45:53.985835Z","alert_count":0,"request_count":3,"received_data":363136,"sent_data":1761,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-08-10T09:00:58.423729Z","alert_count":0,"request_count":2,"received_data":408698,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":9204,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-10T08:03:00.460584Z","alert_count":0,"request_count":8,"received_data":60240,"sent_data":4464,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":5,"received_data":140245,"sent_data":2925,"comment":"","tags":null,"fingerprints":null},{"fqdn":"robux.bloxpan.com","ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-08-16T20:40:57.075258Z","last_seen":"2026-08-16T20:40:57.075258Z","alert_count":38,"request_count":19,"received_data":175600,"sent_data":12234,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"bloxpan.com","ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2026-05-08","domain_rank":0,"first_seen":"2026-06-08T21:43:43.620834Z","last_seen":"2026-08-16T15:24:39.223791Z","alert_count":34,"request_count":17,"received_data":4573330,"sent_data":9696,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce372f55869fb07843180d5fe923988e","sha1":"487fe57a2e7103b4b93be62cf85dd67057dc8470","sha256":"e18984e8b8b5e318e2f78242b56ffe4fde5522c2d05e3cb2e1e0543e6dee12f8","sha512":"ef3cd3df9ce2f57f5971857020b724402bd27b4187c1c70a40d61123a38e45fe162e47336708c7913c006ab290b468c8c5289cb113c1ae013546e9cc5205967b","ssdeep":"","tlshash":"150127c699b20e6bc10b55aac2cb0459316da1935c3b6c26fbdc10058f9c08c5bed31d","size":779,"data":"","first_seen":"2026-08-16T20:40:59.622666Z","last_seen":"2026-08-16T20:43:17.64083Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"09d04f5cf53970adb46b87bfadec4196","sha1":"3094013d627a0385a2cdc181dd35f601fcef178a","sha256":"e760e6071695b76dd29b4597d9c93dbaf284cf5b1590ab5b2024a24ba348543b","sha512":"15f4da2274a399fdef812049b3ed08d0c3d49ed4b4e0f853047ca7b1e7563008a9a0b2f75a48c86243c28ad3a1eefd406c8d539dee78c4d72fc73729e1f0cf69","ssdeep":"","tlshash":"4e51fe3276a2103444ab5f9673cb978c732490c76554ca5a3a3dca8f0fc2a1828fd7e5","size":2623,"data":"","first_seen":"2026-08-16T20:40:59.624103Z","last_seen":"2026-08-16T20:43:17.64155Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"204e68bac6bf70515bf57c2e784b7ae8","sha1":"3a106cab319f416fe411d0b5957e4cdcbc5d7d8c","sha256":"3db35c435c4c8b0fe3f0306260cf5881efb9d41549e250ff8c3b02efc1c139e2","sha512":"7a1284c05d98141c667e949db7bbd7bdfbb325a4bc4fd73c357d60660782e3c42dc398c35d6732b4f3b795bfd4181bc60a266cebd48511d844423723e961e6ef","ssdeep":"384:/2Bd393U3LBF/inM2umzzdNoGIpkHCXgv5qi:m9+b+M09No5Xgxqi","tlshash":"74d2a72a3573083049fb11af63d7978c36626043b886d95dbe6ccb011f66e42da73bd9","size":30315,"data":"","first_seen":"2026-08-16T20:40:59.625451Z","last_seen":"2026-08-16T20:41:56.456332Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"eval","is_inline":false,"md5":"b5ba071d974346d7da0bb59ef9e10768","sha1":"1d2b2c5f6be68c5200182034565153703a33f003","sha256":"ab55b92f2f75d649a2600049f40313ae52b1af78a69a201847f684840816962c","sha512":"7f7ff11a3c29393204c2b45eaf91beeb46eac6727a86dc771b612c36f4688fcb2e6725a23ca0392736d0bb890e340152a6699a2368ee93a4009b870400997f10","ssdeep":"384:m/MExmZXauYwDffsZ35dv9KPiJ4pWeIVSeO:W1hVE","tlshash":"5252c80475b2502201c32069ff9756071428b243d946d8edfadd96607fabd98c9ffbd8","size":13870,"data":"","first_seen":"2026-08-16T20:40:59.626883Z","last_seen":"2026-08-16T20:41:56.456987Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-16T23:56:40.168603Z","times_seen":49559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/kr.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:27.367Z","timestamp":1786912887367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/kr.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:27 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c3428a093ab4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 739953\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:27 GMT\r\nlast-modified: Sat, 08 Aug 2026 07:08:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:emzVtR0OKEHti3mxFHrYpmzzwJ9jRNSmO15EE/+l0Vs=:\r\nfly-request-id: 01KV74ZJCK64QZXCYZ3Q9FNM5C-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1061,"size_decoded":1355,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a183310b78d3d4fe57f88abcc491fcd","sha1":"a134d8392d41c775ee42fe2a0dba2cd5c043117b","sha256":"7a6cd5b51d0e2841ed8b79b1147ad8a66cf3c09f6344d4a63b5e4413ffa5d15b","sha512":"a8cc5d87f2c1b2ad3b68a81caa47e09621433ecb20e264c8584e5067c09f0d8ba11b1d290007d59ba308deb81c73c8bc19f76bb2063698ac2b03044156fe6bd7","ssdeep":"","tlshash":"9f11ceb020fd942c8b7dc302ebed64c89b1f70e7174206c6755c29b46f204979ac35ca","first_seen":"2024-05-09T16:52:27Z","last_seen":"2026-08-16T20:41:56.434073Z","times_seen":1092,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.772Z","timestamp":1786912882772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://robux.bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305241\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-16T23:44:02.064571Z","times_seen":20446,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":28,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/design_6a231f56d2e850.08501683-image_2026-06-05_211117415.png","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.753Z","timestamp":1786912882753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/design_6a231f56d2e850.08501683-image_2026-06-05_211117415.png HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 271\r\nlocation: https://bloxpan.com/asset/design_6a231f56d2e850.08501683-image_2026-06-05_211117415.png\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.948Z","timestamp":1786912882948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://robux.bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305241\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-16T23:44:02.064571Z","times_seen":20446,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/design_6a231f56d2e850.08501683-image_2026-06-05_211117415.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.125Z","timestamp":1786912883125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/design_6a231f56d2e850.08501683-image_2026-06-05_211117415.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3660043\r\nlast-modified: Fri, 05 Jun 2026 19:11:18 GMT\r\netag: \"6a231f56-37d90b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660043,"size_decoded":3660393,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"d9a9b851888ce8124132d8c773427790","sha1":"3fd3146108a95454525b4a6044f07377416acf54","sha256":"1b4939f42777b9d121529e05cd381fdfb1f91ebea3f5b9d80eb302fdb862be9e","sha512":"03fc118ca83bdee9b948cec47684a3b9f8e7f8d2a70a64874e8bfb938c775182e440ee36bbbcf6f8a0ecb6b867d16edf375393569f4f821231d91e0c22113864","ssdeep":"24576:s1vFpQo1177PaU4gqhVTPEFw5+5Dt5RAG6pD9evSc5Hk:YvHn1177iPPBPEztNAG6ZwvV5Hk","tlshash":"a8252399e5c107f78563262b467f1e1212dd323c27d922dd5e37ed49206afa32a01eec","first_seen":"2026-06-08T21:43:49.168382Z","last_seen":"2026-08-16T20:43:17.613849Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1031,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.356Z","timestamp":1786912883356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14 HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 297\r\nlocation: https://bloxpan.com/app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/au.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:41.252Z","timestamp":1786912901252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/au.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:41 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c342e0c88db4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 433243\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:41 GMT\r\nlast-modified: Tue, 11 Aug 2026 20:20:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:y7IgbF5Zol15IoMGr5c2ZqGR4WPwrjN2gfRHl35u2xg=:\r\nfly-request-id: 01KZCF4PWR5BEHD1X7YWEW6CHV-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":1514,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26b17d670b64aafb25fdaecf3b74e934","sha1":"630d3cc1a29b86023ab331836acd7ae3791aec07","sha256":"cbb2206c5e59a25d79228306af973666a191e163f0ae337681f447977e6edb18","sha512":"2355a48e7f8d67e3b999946d84dcf566ccb71292b848315692bac01a1dde840de237c4cd3f0faaa014fbeb411e9e9cfac01a44a5bcb2376e3f236e32e8596c87","ssdeep":"","tlshash":"5721d264d3eaa334ddc683a51b3c3ee0b85a52bd92d0e29d40b480f0b2b54e4d5cd9da","first_seen":"2024-02-29T10:33:06Z","last_seen":"2026-08-16T20:41:56.43649Z","times_seen":408,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/4.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.391Z","timestamp":1786912883391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/4.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/4.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/5.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.500Z","timestamp":1786912883500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/5.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5182\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-143e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5182,"size_decoded":5528,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"487bcf034dee49e4e88a8997555ab518","sha1":"53087e660f552b133e399a9d48a247f55a16ebdc","sha256":"f52f5c8b87f71f82437e95bfbdefcaa89a73fea72024396d3374f707c34f7e56","sha512":"5b4dd5be659866b7d7b486e7748be9bdf9c81869ef8534e91add846fe58879e0db0dc5ceb8bdc54a3322fd9ba3bbed328f68ce81cd04dd020731b42d1a67a8f7","ssdeep":"96:tz6rNQCYTEACyfqDIM0azaz8lqAwZqYwCQS0I1/wjbO8jJTxKXfhzR7ErKLc:56rNQCYTEAFiDI3a2Ub+wCF0I1/wjb1T","tlshash":"67b19ea39434a28457083ab8ec478e783225c8f22edb4196fd21e0544f92725f1dd7f3","first_seen":"2026-08-16T20:40:59.585806Z","last_seen":"2026-08-16T20:43:17.612703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.428Z","timestamp":1786912882428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcMNTSZMsFhwCawZx5aERakf6KBcF73BIvJsT9nZpoZB355BcQem32w3zNmadL4iy7lrZOTLpOwqq0jO3D%2BrCaDFHHGFs3RYZpK1I2JNiZI6c6hucWUCTifbYcnRWrJyWrS6u04y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a2c3426b49a90afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102025,"size_decoded":19739,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-17T00:01:17.794839Z","times_seen":60042,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/6a2526e81d59d-image_2026-06-07_100708245.png","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.441Z","timestamp":1786912882441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/6a2526e81d59d-image_2026-06-07_100708245.png HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 254\r\nlocation: https://bloxpan.com/asset/6a2526e81d59d-image_2026-06-07_100708245.png\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/5.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.394Z","timestamp":1786912883394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/5.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/5.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/1.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.503Z","timestamp":1786912883503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/1.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5542\r\nlast-modified: Sun, 07 Jun 2026 07:50:25 GMT\r\netag: \"6a2522c1-15a6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5542,"size_decoded":5888,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"345bf3b096d0d97d22c1f85f88c65998","sha1":"3c0c72722531aec7046f3b3c1d10d9a9ed8ec000","sha256":"006a4cc842a2cb4f6385cb078b7dc95b24438079a60bc8f0431c3d12b0cd2f73","sha512":"e7974454cfbd66a639cb3136c1a8329121a5fd2b337f14f0a7dfda1eb7d3eb19164761b4b1a8d28c1ea765390e61b9d13095adbba08fc78d11005da478c7d056","ssdeep":"96:+julMJv5Omw5MvTm+cQYKaZBZjRSK2qPLmDEmu/iIEusp6EPkA5122W8tWHWPNFZ:OugvVwia+cQdUBvSKwUI6akAHWAMWVFZ","tlshash":"3fb1affe6a8134096a3401ccba2d3702514eccc2de5d020d77ac75e5ac1982a1efbadb","first_seen":"2026-08-16T20:40:59.604143Z","last_seen":"2026-08-16T20:43:17.61515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:24.282Z","timestamp":1786912884282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14 HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:24 GMT\r\ncontent-type: image/png\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4621,"size_decoded":4817,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a83c9c929d72c3797808e281482a7079","sha1":"afdedb917c0a7b6cb4b53c700dee66336c2af065","sha256":"4ec6b5fe6074bb2a82a3ff915c279ad623b3abb0059435060d48846a97e728c6","sha512":"17abf96f8ad12bca9b2fc4ac5a22868716990f9650ef6482aad55e6290bcaded9742164508d8dcb0ef0703aeae2cc5e65487cd988219ad427d510156de415f78","ssdeep":"96:DTc35OOay9PUkdlenZTtIIwtof3PqU6XLnfdrSaRSBVXXrEl:3qTiol0ZJIIhHPORSagBVX2","tlshash":"0d918e91729cdebff18e696d865c3ce8664ee10542d2490dfc70fa687600c439176acb","first_seen":"2026-08-16T20:40:59.611754Z","last_seen":"2026-08-16T20:41:56.439022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/7.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:33.069Z","timestamp":1786912893069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/7.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4666\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-123a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4666,"size_decoded":5012,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30d7e954ea5bde18aeb5d8b7144c70b6","sha1":"3a6357a404976e60e689bef76bd4e8f7596ae896","sha256":"86853a644bd3ceb4203aef556be8db727b380bc8ef98a3c570b6fb4d99a67d28","sha512":"b3e8c0407e7e1f8df844d823a3237aa04b7d93176ae73cad52a814113537ed537ecd1da32592b1dd833e8a7860a7d684b22ffc490d0376049f0246decfbd90fb","ssdeep":"96:VQSeDyJvsIPtaC4gqe37gy/I21hrRdj3bVy2pc5OUAN3GSINLsIghAr:VgyJU2qigy/ICtjj354YHoyS","tlshash":"36a16e205b782278409bef78db372034f1b981b9b0c6b5c61149bd6e3516b2969346ff","first_seen":"2026-08-16T20:40:59.598898Z","last_seen":"2026-08-16T20:43:17.628634Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/7.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:32.990Z","timestamp":1786912892990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/7.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:33 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/7.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/design_6a23e8e6934032.45750963-bloxpan-logo.png","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.438Z","timestamp":1786912882438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/design_6a23e8e6934032.45750963-bloxpan-logo.png HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 257\r\nlocation: https://bloxpan.com/asset/design_6a23e8e6934032.45750963-bloxpan-logo.png\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/us.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.395Z","timestamp":1786912883395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/us.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c342713b5cb4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 907354\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:23 GMT\r\nlast-modified: Thu, 06 Aug 2026 08:38:48 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:575CQM9XmHkmZzcI8JIzvhq2vfNazHuGvTKiY/GXoqc=:\r\nfly-request-id: 01KYJ0SQHC2WE5M67FTBFX4ASE-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":1192,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-16T23:02:07.626387Z","times_seen":4464,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/4.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.499Z","timestamp":1786912883499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/4.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6672\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-1a10\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6672,"size_decoded":7018,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6387380b45682e33b85abf789e5b528","sha1":"653fd5251da9b6ff9f293dadcf83b2eaf310ff61","sha256":"910181bcf5a8b093650a332e9f92914ab48fbb5db127df91850e9b19278bcba4","sha512":"189d9fe1ba2bf0a474dfbac2bce46b980debaf9deeece0582dad8a104552cb1dbb2dd6a504e932f0c5d96d4eb1900451c88fe509a1c5474a09b9b5ae0fc684e3","ssdeep":"192:8/KqJ17k51E2w7VkIXJA+8OurM5GVbc0oTgcfxQo7lY251:8/KKw22+u3+kr1bHoTveSlYk","tlshash":"abd1aee2a8d70580c9f19972a0056b7f4a70a3ecd04a5b471aafd3eb3474599bb04392","first_seen":"2026-08-16T20:40:59.616924Z","last_seen":"2026-08-16T20:43:17.6362Z","times_seen":3,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.769Z","timestamp":1786912882769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://robux.bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305241\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-16T23:44:02.064571Z","times_seen":20446,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":22,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.945Z","timestamp":1786912882945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://robux.bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 108020\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ab2Pm5AokQk%2B3ARejMQfW4YPCZcoVmhUO%2FB5p3HLv9PWly6ZXZg%2FkajubY9kULXp%2BEmIWQsJ79Ojnp7CAvrRfYwzKijrS2rdFtpnWEDqR5qm3CyfLkVwYzAcGq%2BeAu5ibQC5YGMe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a2c3426e68deb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108020,"size_decoded":109010,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-16T23:20:33.547064Z","times_seen":24501,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/6a2526e81d64c-cover-image_2026-06-07_100753774.png","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.044Z","timestamp":1786912883044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/6a2526e81d64c-cover-image_2026-06-07_100753774.png HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 260\r\nlocation: https://bloxpan.com/asset/6a2526e81d64c-cover-image_2026-06-07_100753774.png\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/6a2526e81d64c-cover-image_2026-06-07_100753774.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.127Z","timestamp":1786912883127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/6a2526e81d64c-cover-image_2026-06-07_100753774.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 398460\r\nlast-modified: Sun, 07 Jun 2026 08:08:07 GMT\r\netag: \"6a2526e7-6147c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":398460,"size_decoded":398808,"mime_type":"image/png","magic":"PNG image data, 690 x 313, 8-bit/color RGB, non-interlaced","md5":"154a96459cc8ff3d4bae262b7b41ba71","sha1":"1fc5ede4b41525960457a4e837012e710a66573d","sha256":"755dfad072f6f0adac58237afde6bcfb22e78df18a106b8236630639b7167d43","sha512":"1aab30b3e84b2c26fad8d857f619c4d703c60c53425e021f0035a6b4f968d1a52fa2f0ea3e40367ef73b4d25a54620941cebd11d2d69a81566db5540a62e4120","ssdeep":"12288:rrQRNhHDrr4bOn4MVQPatDmoLw+FgjB5R4a7:wvEyn4MoqDm0rKjR4a7","tlshash":"fe842308258d693bdf222ca11ce966c17555d243b3c8578ce8f0dffd1aae755830ee8a","first_seen":"2026-08-16T20:40:59.591723Z","last_seen":"2026-08-16T20:41:56.441967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":1024,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/hr.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.381Z","timestamp":1786912883381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/hr.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c342713b5ab4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 5327340\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:23 GMT\r\nlast-modified: Tue, 16 Jun 2026 04:52:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:lp1PR7Z2KzH6+dzMQJ9vPt+xn1D7WY2NuAJHVM0zA8I=:\r\nfly-request-id: 01KTG77CZYQGZ6MSCVPD557PRW-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":41177,"size_decoded":16849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba47c14c2e26d64c704e3291fe023470","sha1":"242b5b0ae548deced0d675124fd21bf0dd0a2332","sha256":"969d4f47b6762b31faf9dccc409f6f3edfb19f50fb598d8db8024754cd3303c2","sha512":"6a7791d0c3e08b43303a4681abe93f7a65c8673756674d0a70df6ea9f4097fdc05b27d1e8c9d20aa78f03e8889587cb1037edfc112d790d03272bec49bf58af2","ssdeep":"768:KzAMBw1DFYf/tkB1AcRWyh+XcnLdPL6Iiti1gnGWkxm:KLwwlE1AcRWyhUcLdT7Ii1gnvkA","tlshash":"6003e07c8a6c93ec596be3ac9736d464670de1b6707bc3124eadc3b005c38dae657881","first_seen":"2024-05-09T16:52:27Z","last_seen":"2026-08-16T20:43:17.634945Z","times_seen":109,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/2.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.495Z","timestamp":1786912883495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/2.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5118\r\nlast-modified: Sun, 07 Jun 2026 07:50:25 GMT\r\netag: \"6a2522c1-13fe\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5118,"size_decoded":5464,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86031ada0b7b1fb0c761d6c438363a7d","sha1":"68f872f1b4e2962682636cf78ffff2538a55a314","sha256":"20a52c7c2e0b39bc4ac60107f22773060886aec2d3dcf80aeaceab9b15cfe634","sha512":"35e8d26a8849b7771b8f9e06468ba3261a231a26d923a8415ba019ea5470f2dd5f2d7b1320d50ef437e050fb8a585a402ec8a026e988d202abbe9f3ba2986fcd","ssdeep":"96:Sx2JLli7H2RBtvjst/XIBbjWKAdxza/bwd1XLKu9xqQmVptFuN5e9xmGxh4OBW8V:62JLobm76/XIWnPG/b0GQ+toN5ImGUAd","tlshash":"35b17d0ea4d6390bb0573f89307745f4103815a1b9eed768a4f14ac08a7a3a31fea11e","first_seen":"2026-08-16T20:40:59.597426Z","last_seen":"2026-08-16T20:43:17.62515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/9.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:41.313Z","timestamp":1786912901313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/9.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4846\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-12ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4846,"size_decoded":5192,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"839c111a136c5dc09bdef7f73524912b","sha1":"d3c202c5855a6d859aa3d77231cb80aa13741bff","sha256":"a6e7a11c30dd2f179dd7c49bca5657a161e56af46764e9b3cbf413410d71b782","sha512":"e1d6fe3dcdafee23e2bb41f83d18fe7ef14d2a694317e83efc4ce12e4e254c5af4c362c99afd2099b20153d92c8c45fee06e3e55ec9b0186a379ee6ba2d7f51e","ssdeep":"96:MOp2SWDtMWGdJNY603kMXWJacGjE1U0PCHtP5vO8vEOpPeEAFd/WBOhC://GWWGdJ+603VWJ8jEq0KhFO8vEOZeEV","tlshash":"78a1afbb2947f22ba00549f564f0ad1eb24356b56f42005a50b1e04c9cfb642cdfdf24","first_seen":"2026-08-16T20:40:59.581117Z","last_seen":"2026-08-16T20:43:17.625771Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/design_6a23e8e6934032.45750963-bloxpan-logo.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.552Z","timestamp":1786912882552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/design_6a23e8e6934032.45750963-bloxpan-logo.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 399471\r\nlast-modified: Sat, 06 Jun 2026 09:31:18 GMT\r\netag: \"6a23e8e6-6186f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":399471,"size_decoded":399819,"mime_type":"image/png","magic":"PNG image data, 1767 x 376, 8-bit/color RGBA, non-interlaced","md5":"5af353be4c575c7280e7b41f76a399e3","sha1":"3281fd4bbd4368303b6ff4935641810ebbe08a81","sha256":"9b0076e59a13644fb75f7318f40f1ac8571aaad75985bd674398d1ab3c4df833","sha512":"45bedefd8cc3e21ef717abf9743c96551b141c8cd800bdc54439f65b2beda0452fc3a1f2e5a24280a500d63b5502490143550f90e34bb308c333a04c0e19807b","ssdeep":"6144:+WuX8qacN1aBfmg9EpL3EiqkV+l3F17gTPoEg+jA+ScHhfFEiUlxqbYXqpvIE:R08fC8f7EtEiqThzynBvzUbqZpvIE","tlshash":"068423b864d0e30d899bccbe9871df5b32aba265d8d4102589344d9e38a7fe250c4ff1","first_seen":"2026-06-08T21:43:49.145016Z","last_seen":"2026-08-16T20:43:17.613306Z","times_seen":8,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":3,"connect":56,"send":0,"wait":52,"receive":262,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.766Z","timestamp":1786912882766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://robux.bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305241\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-16T23:44:02.064571Z","times_seen":20446,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":17,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/11.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:47.902Z","timestamp":1786912907902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/11.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:47 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 224\r\nlocation: https://bloxpan.com/asset/avatar/11.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/br.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.390Z","timestamp":1786912883390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/br.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c342713b63b4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 5653440\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:23 GMT\r\nlast-modified: Fri, 12 Jun 2026 10:17:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:RVMd4+Kz6Kf221P4AhuhhIIXZgC9XPZuVHs+f8iqmeo=:\r\nfly-request-id: 01KTK47MS6835DBRTNNSVWT8ZG-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8096,"size_decoded":3626,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5fc3717384cd954040873edb3061a68","sha1":"17969b5ac0cd72452c5863d34e00f0f5dec1c6cf","sha256":"45531de3e2b3e8a7f6db53f8021ba18482176600bd5cf66e547b3e7fc8aa99ea","sha512":"8d13cd413061736f506d580b37924aa472c3cc472df3961cf5777e73b670db829359980ebf3f4f1090f2ab023a793a40790916e78649a348dfa8913dd236c92a","ssdeep":"96:0GRMoBsOat6xhf5W2JGRU7edrp39bgWT00zmkJ14JVK8jWLJ3pkREYa:9RMoyOait5W2JGZXn9efTOpeEV","tlshash":"1ef189bc466cc2ec9ea696bc9f3ac0e0920de1eeb1e5c351a76cc17026935c9e14f456","first_seen":"2024-07-04T03:51:54Z","last_seen":"2026-08-16T20:41:56.445594Z","times_seen":126,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/8.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:38.614Z","timestamp":1786912898614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/8.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8534\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-2156\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8534,"size_decoded":8880,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fafbcabca44e3945d0eb2933a357de34","sha1":"8ab6a44415d1dc6c319a540454da634f4e3f0c44","sha256":"6819a9cfad86ac3c54149bdf350175d48544391950235a2e03f30d39d51802f1","sha512":"fa3813c33b908302881727a62eefd0d2b1042e89b8727332e08b55b76d67143f34a56bb191be977c0939872d8ddbdca6127c04fae7a8c6fa0cd6fa1aa8c3c98b","ssdeep":"192:2jXonGcO/kkclc2IeyIM25P/j3HIakenl9rwHtW:2LkGcOYlDIdgjTl9rwHtW","tlshash":"fb02b06438f3a56aea899c6435fc41805c72c272759bc42e5bb39946b233f00ef51fc9","first_seen":"2026-08-16T20:40:59.621176Z","last_seen":"2026-08-16T20:43:17.638043Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.344Z","timestamp":1786912883344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14 HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 297\r\nlocation: https://bloxpan.com/app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.375Z","timestamp":1786912883375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://robux.bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 305242\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-16T23:44:02.064571Z","times_seen":20446,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/3.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.497Z","timestamp":1786912883497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/3.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6704\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-1a30\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6704,"size_decoded":7050,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc0239e53a8f839543e173d87d8a718d","sha1":"e6155d01cd34cf39f7f74459a16b1de9f105a69e","sha256":"31fa4bff01bc9ccea0c801fb6f3cc439af074c6dab3f46ca7b7dde551f7a6025","sha512":"2bfa299925778483715401d5fef1b704a6f1c729a9b78e000812de09ac4bf0e39501c5f1dd6feaf9052238cba027be7d739561b1d2fde2fffc03b76e0a4c2c21","ssdeep":"96:1qDeD6MVUgCGAPAbMiM259BpcjrPkkSAt7VEPoEtF69IeJsFXfPJvWPFeg5:zVCGOAbMiM9jAkxlOoSF65JyBme0","tlshash":"e9d19db411b919e46ecb3da24e58bf20457acf6d9d9342107325a0d1d820bfd52c8ed6","first_seen":"2026-08-16T20:40:59.610437Z","last_seen":"2026-08-16T20:43:17.611534Z","times_seen":3,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/nl.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:32.994Z","timestamp":1786912892994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/nl.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:33 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c342ad3a28b4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 319261\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:33 GMT\r\nlast-modified: Thu, 13 Aug 2026 04:00:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:j2kfF/5wiUU3r46S8spHdh01Njmw3vwVy+Vh61A6sBA=:\r\nfly-request-id: 01KTBSKPJN8YKEX5B72SWRQ4TJ-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":1019,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c9bb5ae9234eb56f35372409f204c95","sha1":"c2e921ab5ae421e9fa26fbf464240e7b95a77825","sha256":"8f691f17fe70894537af8e92f2ca47761d353639b0defc15cbe561eb503ab010","sha512":"8ee4698862afdb49a7da7a6d3c4149aae8a866c5c1339835eaa8e212cecea3c3bcf2d433f9bfbe492d5c485c4634877517d154f51ba1862aab28a33388c88549","ssdeep":"","tlshash":"f7d0a798d22d7a048550c2210e3c71d2d1d870cfa00810cfd9715dac101d097dccfd95","first_seen":"2024-07-16T22:35:25Z","last_seen":"2026-08-16T20:41:56.447393Z","times_seen":1078,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.430Z","timestamp":1786912882430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::hp96v-1786912785593-1bcacc82b67c\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 96\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a42YR%2FH38CtSziUabYIDB%2FLYgga0WFk4d%2FgnpDh4rRjmt%2BwVySmboVVIyT6tz1haUuHL%2BZKg977WCaHEqEbTMd07mktOAgTO74bPWJdOov4k83gGTgtZjxS4Q1enGI9pycZ5Gkc%3D\"}]}\r\ncf-ray: a2c3426b4c45569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":12,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.768Z","timestamp":1786912882768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://robux.bloxpan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsWZ6iZqc2%2F%2FSGSGXSDDV0sPtnBbKGMVw4MW6NV68AcujXQTHgLM0Zcz7JtJADwcsCTtK1FAbNRjNZuRJlD%2BRy70TZNt%2Bp96RN6mYC250Jyg7cA4HWZS4%2FLOs3s4WFcM835Jliqm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a2c3426d5cb7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":151114,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-16T23:59:32.93348Z","times_seen":45452,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":45,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/1.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.379Z","timestamp":1786912883379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/1.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/1.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/3.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.388Z","timestamp":1786912883388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/3.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/3.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/de.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.392Z","timestamp":1786912883392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/de.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c342713b5eb4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 813277\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:23 GMT\r\nlast-modified: Fri, 07 Aug 2026 10:46:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:79SAr1oVSnZR8p2iPuDQnbyJJBD7QEGJjd+PrOM2xXU=:\r\nfly-request-id: 01KYJ0XXGVCQPS9Z8DB0B2DC2Z-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221,"size_decoded":1016,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e88d88604d655d0bd7059cf1fbd59ec2","sha1":"f46bdcf00fbd79c764b116ef8250e678e4b71c8b","sha256":"efd480af5a154a7651f29da23ee0d09dbc892410fb4041898ddf8face336c575","sha512":"b4cd0ac36c019b56dfa1cecdd694a12401639ed47eedb5981ba4df1bccbfbd84f86febf330c96a3e7d4a7cadc1b5c92d91c314622dc764cf8c546802f8b1f836","ssdeep":"","tlshash":"3ed012a9d22e7a05da44cb301e7c75d7d1dab0ca618811dfe8701dad206e4a7dccfea4","first_seen":"2024-02-03T16:27:29Z","last_seen":"2026-08-16T20:41:56.448748Z","times_seen":2410,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/6.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:27.362Z","timestamp":1786912887362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/6.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:27 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/6.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T20:41:21.628Z","timestamp":1786912881628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 26385\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; path=/\ntz_session=7a16fb3a8511a60ca2af; expires=Tue, 15 Sep 2026 20:41:21 GMT; Max-Age=2592000; path=/; domain=.bloxpan.com; secure; SameSite=Lax\nbp_dtrk_28014ae8ec62e0d5=1786912881; expires=Sun, 16 Aug 2026 21:11:21 GMT; Max-Age=1800; path=/; secure; SameSite=Lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"f9mfa8l4f86isnnjlbrs75tpv7","quoted":false,"path":"/","raw_expires":"","max_age":0,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; path=/"},{"name":"tz_session","value":"7a16fb3a8511a60ca2af","quoted":false,"path":"/","domain":".bloxpan.com","expires":"2026-09-15T20:41:21Z","raw_expires":"Tue, 15 Sep 2026 20:41:21 GMT","max_age":2592000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"tz_session=7a16fb3a8511a60ca2af; expires=Tue, 15 Sep 2026 20:41:21 GMT; Max-Age=2592000; path=/; domain=.bloxpan.com; secure; SameSite=Lax"},{"name":"bp_dtrk_28014ae8ec62e0d5","value":"1786912881","quoted":false,"path":"/","expires":"2026-08-16T21:11:21Z","raw_expires":"Sun, 16 Aug 2026 21:11:21 GMT","max_age":1800,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"bp_dtrk_28014ae8ec62e0d5=1786912881; expires=Sun, 16 Aug 2026 21:11:21 GMT; Max-Age=1800; path=/; secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154683,"size_decoded":27054,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1009), with CRLF, LF line terminators","md5":"d585c5fcdf871919a751a064541f33c8","sha1":"61613282e58adc6135e01f52395a41fdec60b3db","sha256":"ab589a9427a1c265140cbeab2b3b16b740c4d426f8300d10d09a9871f7bf6927","sha512":"83f29dae59c8c20066c3f62a65f70eb796b89d939b5adeeded5195ffde359750db6e698e78b866b460e90c2ed84923194df92fe4eb51d274086632110beae6d3","ssdeep":"1536:PjyRZiiV7U9X7/mz+0RCFiZJ1ZvHAM3ehS6w0bbZJ1ZvHAM3ehS6we4r9+b+R5qM:TiPrRCFq3ZvgM3eA6l3ZvgM3eA6+9dpn","tlshash":"c3e3182229b1153b11d341e1f293af087bbe9607c603d9b8756ca1652f4dca9c7ab3e4","first_seen":"2026-08-16T20:40:59.601433Z","last_seen":"2026-08-16T20:41:56.44926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":182,"connect":51,"send":0,"wait":94,"receive":51,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/app/activity_log.php?type=robux\u0026cat=robux\u0026slug=robux\u0026r1=Robux\u0026r2=Bonus\u0026r3=Items\u0026app=Robux\u0026cnt=1","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.048Z","timestamp":1786912883048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /app/activity_log.php?type=robux\u0026cat=robux\u0026slug=robux\u0026r1=Robux\u0026r2=Bonus\u0026r3=Items\u0026app=Robux\u0026cnt=1 HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3974\r\ncache-control: public, max-age=20, stale-while-revalidate=60\r\nx-bloxpan-cache-hint: activity-log-20s\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15370,"size_decoded":4318,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"69e838eb9d1b922efa633387051f7015","sha1":"faa0e1df10033371ae6ac30148118d146b123c02","sha256":"a2de3a376b32b08e94731782648dd7912020460ee9c2449d76762df499b22de1","sha512":"9ca1e13756fbe504a730c55ef1cca305da26afb215d4fca4c84e4b5e702b959abc99642f8ff8096b29930816fe7d85c2745649b82a39b8c4adaf56239a7554e7","ssdeep":"384:ZU/MExmZXauYwDffsZ35dv9KPiJ4pWeIVSeO:u1hV8","tlshash":"f262c60475b2502201c32169ff975a06142cb243da47e8bdf6dc92607fa6da8c9efbc4","first_seen":"2026-08-16T20:40:59.613933Z","last_seen":"2026-08-16T20:41:56.450235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/8.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:38.529Z","timestamp":1786912898529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/8.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:38 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/8.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/10.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:45.090Z","timestamp":1786912905090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/10.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:45 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 224\r\nlocation: https://bloxpan.com/asset/avatar/10.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/10.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:45.174Z","timestamp":1786912905174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/10.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5438\r\nlast-modified: Sun, 07 Jun 2026 07:50:24 GMT\r\netag: \"6a2522c0-153e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5438,"size_decoded":5784,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87bea7edfefd61bb3d01b8bf2530d2c1","sha1":"da304bbbf0006993add59aecb7140f1f7dda9d7d","sha256":"eaba7410e14c08bda6f2e57d9d0a982a654b7e37871409091f97c23e2933ca5c","sha512":"815ddb62d4e9e99a12e286789e3e400f2f1675dae4e5c5a2fdce1cc671f757123397708d48bd9f26030a734dff1d0975e5b8eb9f166b91959d1f9383d110b655","ssdeep":"96:D8R0JT2pilvK8bj4kbq2HIe+zK9jp16CFDnbX7ty47yzdIyo37MBFUo:w04mKA8YIojp1bDbByKD7kqo","tlshash":"b5b16ef8d4c2e7c8a83e43989b5b1d16573a337b45a69086f14955941c1fcb37c86bc4","first_seen":"2026-08-16T20:40:59.608343Z","last_seen":"2026-08-16T20:43:17.620515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.425Z","timestamp":1786912882425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 16 Aug 2026 20:41:22 GMT\r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8520,"size_decoded":1338,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"612eba4131c0b0f312afeec87ba75848","sha1":"8d8781f681d811fffe090ba3c12a3bc3160251fa","sha256":"2fe46206b69b1a3bd5ecd62dd2de57d1e0e0976f69b7c12a5894dbae17db856e","sha512":"bb07c109d08f88ced8fa3c2cf9764b633f7341604079f9a0d187f04adb3cba35eafea1e91cf54e520eff973d089394d4c4b66cd3617f943dce2108d3545f0d1f","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOXaCyOXauOXahJc+ueOXaCNuOxMaCyOxMauOxMF:ACFJRSdCmaRBUCj3Ro7CcQRvSC5VRed","tlshash":"2b02a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-26T18:34:54.70177Z","last_seen":"2026-08-16T23:44:02.063391Z","times_seen":1751,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/flag-icons@7.2.3/flags/4x3/ca.svg","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.386Z","timestamp":1786912883386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /flag-icons@7.2.3/flags/4x3/ca.svg HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a2c342713b60b4fd-OSL\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\naccess-control-allow-origin: *\r\nage: 718596\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 16 Aug 2027 20:41:23 GMT\r\nlast-modified: Sat, 08 Aug 2026 13:04:46 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:bxg3hBIAro1yVfduNfzMvp3ksI3If+AVDn3wuAYyfOQ=:\r\nfly-request-id: 01KZEZE9087V1R4RSH270ZCTJY-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":642,"size_decoded":1263,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2594215477ecbfa1d0f8d2dadb358a8","sha1":"166e97af30c344dcb918a0bca66325d875670bab","sha256":"6f1837841200ae8d7255f76e35fcccbe9de4b08dc87fe0150e7df0b806327ce4","sha512":"2d38a81ae660e6337fdfa48de6ad6ab666b53a5463ea2892c617ea8b0c9648ba3a6f315f1d92b4a74e2c222730adf9af2f965aae08c680c0a3840073fde96317","ssdeep":"","tlshash":"18f0d34c939d52b4be308b691a3424c4b84ea0ef51d053999554945837621c9adc94c7","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-16T20:43:17.635577Z","times_seen":155,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:24.283Z","timestamp":1786912884283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /app/favicon.php?src=%2Fasset%2F6a2526e81d59d-image_2026-06-07_100708245.png\u0026s=64\u0026r=14 HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:24 GMT\r\ncontent-type: image/png\r\ncache-control: public, max-age=86400\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4621,"size_decoded":4817,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a83c9c929d72c3797808e281482a7079","sha1":"afdedb917c0a7b6cb4b53c700dee66336c2af065","sha256":"4ec6b5fe6074bb2a82a3ff915c279ad623b3abb0059435060d48846a97e728c6","sha512":"17abf96f8ad12bca9b2fc4ac5a22868716990f9650ef6482aad55e6290bcaded9742164508d8dcb0ef0703aeae2cc5e65487cd988219ad427d510156de415f78","ssdeep":"96:DTc35OOay9PUkdlenZTtIIwtof3PqU6XLnfdrSaRSBVXXrEl:3qTiol0ZJIIhHPORSagBVX2","tlshash":"0d918e91729cdebff18e696d865c3ce8664ee10542d2490dfc70fa687600c439176acb","first_seen":"2026-08-16T20:40:59.611754Z","last_seen":"2026-08-16T20:41:56.439022Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/11.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:47.967Z","timestamp":1786912907967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/11.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9060\r\nlast-modified: Sun, 07 Jun 2026 07:50:24 GMT\r\netag: \"6a2522c0-2364\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9060,"size_decoded":9406,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec33967efd5c4d7e1154e3bd8708830f","sha1":"77e4b87b78e10b734dcb4270066ebd2cd91dab2b","sha256":"46249181f202e6abecb4def9f2dc24d6034f023558989ea01d2d995ee6f404db","sha512":"f6e7932d68bd0c97a2c2b7f78ab4456952e1a29c2bda15cbfc5f2144929ce2b2207880942e8c1083be7815898f9ac4a40996313e905791955f0184b4ae66dc9f","ssdeep":"192:692Fx8aYuyuAu/J3wbqMOTgRjuhMmw6U2e6YV53s1cBbM:M2F/eJ6JtTgYB1YV5xB4","tlshash":"9412b04b17ec5ac5dfec2e50f91c28b0d931dac4e9126a2a691f0075c2357d1eca36d9","first_seen":"2026-08-16T20:40:59.594427Z","last_seen":"2026-08-16T20:43:17.626948Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/6a2526e81d59d-image_2026-06-07_100708245.png","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.551Z","timestamp":1786912882551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/6a2526e81d59d-image_2026-06-07_100708245.png HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 34252\r\nlast-modified: Sun, 07 Jun 2026 08:08:07 GMT\r\netag: \"6a2526e7-85cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34252,"size_decoded":34598,"mime_type":"image/png","magic":"PNG image data, 296 x 320, 8-bit/color RGBA, non-interlaced","md5":"76e22a154973ef31b06e20a222709c99","sha1":"ffed5855e225eb9b1416843e3ed1d728315ab29f","sha256":"bb250ca957656b6ac5beccdb360ff4fdbe7f2724f34db5e314e4e8b5d4b7b6bd","sha512":"112624b07b163c95d3fcd71f40e4d9b2f19d8acbe719d5b2f120c60896312b4b3985eca4177128d9d6cc17c1abfed371b321bb08fe45be25d165f6a78eba8df5","ssdeep":"768:99OkTDc7uP1HUn99Dr3VZTNjL9SLbfnzsQvBExP2f:99OZC099vVZ5dCQQSxP2f","tlshash":"c7f2f13f62551ca9e681309d4ce12042dbf0b41c77e77d42a65bcea2c57f6c81196d2e","first_seen":"2026-06-08T21:43:49.157886Z","last_seen":"2026-08-16T20:41:56.453398Z","times_seen":4,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":4,"connect":54,"send":0,"wait":206,"receive":52,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:22.468Z","timestamp":1786912882468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 16 Aug 2026 20:41:22 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::kcph7-1785159739950-b8e36432cd95\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1753141\r\nlast-modified: Thu, 30 Jul 2026 09:47:27 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98AhcEUzduoAwrHkWKDZAbFlUM7ppAcuwZAF7f3I9cVrRF77C4Yz4I8zIowb2Tuvbx7R1UdThpEhii0yPo6ae87FAtLYzBagCjljAXoPItAqflfAZtvmtJTTKQ55UYqJwqT5p1k%3D\"}]}\r\ncf-ray: a2c3426b6c66569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127114,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-16T23:56:40.168603Z","times_seen":49559,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/2.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:23.383Z","timestamp":1786912883383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/2.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:23 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/2.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bloxpan.com/asset/avatar/6.webp","fqdn":"bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:27.444Z","timestamp":1786912887444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:35:15 GMT","end":"Mon, 02 Nov 2026 00:35:14 GMT"},"fingerprint":{"sha1":"A8:40:A7:F0:2C:EA:E5:85:C6:86:C3:71:73:22:73:C4:4C:27:27:93","sha256":"58:FA:5C:0E:6F:9C:30:3F:8A:58:77:32:60:14:B7:2F:83:DC:13:6B:7D:E8:28:F2:38:35:B8:D6:3B:67:55:45"}}},"request":{"raw":"GET /asset/avatar/6.webp HTTP/1.1\r\nHost: bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://robux.bloxpan.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: tz_session=7a16fb3a8511a60ca2af\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4510\r\nlast-modified: Sun, 07 Jun 2026 07:50:23 GMT\r\netag: \"6a2522bf-119e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4510,"size_decoded":4856,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6cc7744b6aa33767f93bf479b7872ae7","sha1":"74014bbc4883e8516c76d9e2b1dee5a252a9f0d2","sha256":"44d64b14363ca8fface30a0ed62b133f0204c06c7d4c4ddcc99c62f9114d68c3","sha512":"802c818bc6262fb9d3e4d114a6984c005b2ae81a7ced65740a82a73b1d4e1c27759c590e133c8a0c3a0a8ee85b8ddde7625aa57e8ab3a9501cf77e52f4bb9789","ssdeep":"96:M31ZI7b9KPRk6sgrcOOuKM5NBC1HiZkkhFwEmq1mV:m1m9Ak6VcOOuvIY+kfUEmV","tlshash":"06917f2a4d3c8de5d92ff0708111791dd6466632844ddb729adee124ac4edb32d9ecc4","first_seen":"2026-08-16T20:40:59.619696Z","last_seen":"2026-08-16T20:43:17.637298Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robux.bloxpan.com/asset/avatar/9.webp","fqdn":"robux.bloxpan.com","domain":"bloxpan.com","tld":"com"},"ip":{"addr":"85.122.114.2","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://robux.bloxpan.com/","date":"2026-08-16T20:41:41.249Z","timestamp":1786912901249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robux.bloxpan.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 09:38:13 GMT","end":"Sat, 07 Nov 2026 09:38:12 GMT"},"fingerprint":{"sha1":"D9:38:E6:DA:0B:47:56:81:5F:2C:53:01:83:AA:5E:75:44:2E:68:DA","sha256":"AD:6F:C9:F6:1E:80:9D:94:EF:9B:33:20:E2:5C:08:8F:BA:C6:76:79:60:43:E5:23:7D:54:F5:06:3A:51:DA:F0"}}},"request":{"raw":"GET /asset/avatar/9.webp HTTP/1.1\r\nHost: robux.bloxpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://robux.bloxpan.com/\r\nCookie: PHPSESSID=f9mfa8l4f86isnnjlbrs75tpv7; tz_session=7a16fb3a8511a60ca2af; bp_dtrk_28014ae8ec62e0d5=1786912881\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Sun, 16 Aug 2026 20:41:41 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 223\r\nlocation: https://bloxpan.com/asset/avatar/9.webp\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T00:11:31.489385Z","times_seen":17927033,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"robux.bloxpan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}