{"report_id":"88245d30-cf90-43ab-9a59-2dfe101949b7","version":0,"status":"done","tags":[],"date":"2026-08-24T16:08:24Z","url":{"schema":"http","addr":"roblox-exc.com/","fqdn":"roblox-exc.com","domain":"roblox-exc.com","tld":"com"},"ip":{"addr":"172.67.183.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"roblox-exc.net/","fqdn":"roblox-exc.net","domain":"roblox-exc.net","tld":"net"},"title":"Next Generation Script Exploits","dom":{"size":16521,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"4d7ddce5dc0c8970f864d6b2a0f3f1a4","sha1":"191c863dd548086a5c7359a227104072dd7269dc","sha256":"9e0e2c957b9e169c6fd7e09443bd61420aa0729656cc375f6139248c1db7df42","sha512":"fc042ca5a9ffa962f22a1f3ea28e4db30822e7f8235330f673248266e68e3020b2c7d511848d5c16283e71de2cbfa02c603f6a36a16fa9757590b5daa7286696","ssdeep":"192:38RcvOOI5QlBSCy0p7P89AOmD2VKQB7M7ox+eh+/GvOunBajasqrVuSAIy:MRcvOObBcVfth+NooC6","tlshash":"2b72a52de9f05173015380d2eae693676fead117c5520094f2ec23ac2fd2d8e964b7ad","dom_hash":"domhash7f94b26bb8996be9d92162986b79023f","first_seen":"2026-08-24T16:02:31.122864Z","last_seen":"2026-08-24T16:08:25.541246Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roblox-exc.com/","fqdn":"roblox-exc.com","domain":"roblox-exc.com","tld":"com"},"ip":{"addr":"172.67.183.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-28T16:08:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"roblox-exc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"roblox-exc.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"roblox-exc.com","ip":{"addr":"104.21.51.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-24T16:02:27.736174Z","last_seen":"2026-08-24T16:02:27.736174Z","alert_count":1,"request_count":1,"received_data":581,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"roblox-exc.net","ip":{"addr":"104.21.63.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-18T09:29:04.802833Z","last_seen":"2026-08-18T09:29:04.802833Z","alert_count":4,"request_count":4,"received_data":35957,"sent_data":1860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"roblox-exc.net/","fqdn":"roblox-exc.net","domain":"roblox-exc.net","tld":"net"},"ip":{"addr":"104.21.63.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3232e37b626882e26ca8fde4efcd0b1","sha1":"153d5bb5a2fb706c65686b837b41680a6bdbdeb5","sha256":"a667ee4d2aa37e99ebd15a7546bde67410ad1ae492e01b294e28ac05c19a5d34","sha512":"4fe3c578a8056c179f695f703372f013324c089227517d2dc4d1fa697a5525e68ba2d868066a0b51389dc5fbfbcc16397e1d532ae8a2e99082a973e868bd975d","ssdeep":"","tlshash":"9fe02e3c57b3862082331212da3ba780e8a200332401c021f98e864cff20e83a0c3a89","size":323,"data":"","first_seen":"2026-08-24T16:02:31.135504Z","last_seen":"2026-08-24T16:08:25.546733Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblox-exc.net/script.js","fqdn":"roblox-exc.net","domain":"roblox-exc.net","tld":"net"},"ip":{"addr":"104.21.63.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2174430e97194b6a42e4b42ec59831e","sha1":"68128d80b952dc8a22d7f526d97d432468bd8360","sha256":"95ff84ebd0e05d241d3c8e6bd21910976bbf380ad2dffe56bd585118d6c81b67","sha512":"75fa4a0ec418505221ef4ed7d833d94ab8b20fadee440a01669845db73a1df134afed5ba8e7a61b2958d372fb9bd24890ecc8e0b4eb60fbdfd680a1778bd8434","ssdeep":"","tlshash":"e051bd2b12b2203580a7716a93df8b887a3a104b7406cd563f5c4b4e1fe1da569f3ee5","size":2712,"data":"","first_seen":"2026-03-27T14:56:41.775218Z","last_seen":"2026-08-24T16:08:25.544369Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"roblox-exc.com/","fqdn":"roblox-exc.com","domain":"roblox-exc.com","tld":"com"},"ip":{"addr":"104.21.51.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T16:07:57.664Z","timestamp":1787587677664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-exc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:58:27 GMT","end":"Tue, 03 Nov 2026 20:57:16 GMT"},"fingerprint":{"sha1":"16:87:FB:51:AE:0F:4D:64:2F:AC:88:65:2F:8E:00:72:66:24:79:2C","sha256":"05:AC:3F:94:2C:D6:EB:D0:16:16:F0:DF:EC:DA:CB:60:E8:DC:8E:9C:08:F0:21:4A:76:2F:22:A4:4B:41:69:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roblox-exc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 16:07:57 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlocation: https://roblox-exc.net/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ujLJA6DPWypgnWPvz2yD4Jfi9jRjtHlSZUpVCEdUmHpmFEo7u8hPfJ3BWxZIHcPb3BIwqq%2FgDerZd1z7Ga6HLG1862Rfxb6alf4ZG2P8id5raSz6abDwPHrVg9IhPxjLHQ%3D%3D\"}]}\r\ncf-ray: a3039ce9ad65dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-24T19:40:43.278454Z","times_seen":18082372,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":16,"connect":22,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"roblox-exc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-exc.net/","fqdn":"roblox-exc.net","domain":"roblox-exc.net","tld":"net"},"ip":{"addr":"104.21.63.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-24T16:07:57.811Z","timestamp":1787587677811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-exc.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:57:26 GMT","end":"Tue, 03 Nov 2026 20:56:12 GMT"},"fingerprint":{"sha1":"7F:26:C7:6E:BA:C2:58:71:B5:FC:84:EF:EC:97:07:AC:1A:96:BB:99","sha256":"87:9F:06:B2:BE:71:51:61:A3:EF:FB:35:45:32:93:02:C1:5A:AD:B6:85:10:BF:C1:34:7A:B3:5A:52:45:C7:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roblox-exc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 16:07:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkabbjXMVWpW6myDJfYx8DYtUlL%2BVUX6%2F1ZFJaPfBuQ%2BJG2xGLvlItshAG4MW4w4v2bwBGeSU0Px%2BzWhiUnVXbnzksaJNl1jBLKWauMQ%2FGe7XBQhtbusNPQtlm%2FwfB7%2Byw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3039cea9e0d0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16525,"size_decoded":5167,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"889f97803e9a72666feb69a25712a62e","sha1":"965bc658b14134e5a7baa9db5469236f659ff594","sha256":"9f6bd9fd7ffa98bbf3ae7c60c9262b1333e84107a621aeb59d68915f0304ce24","sha512":"d484f063eece23e99554c020b121015ef5edce3460560c63fd08a2b133127a02cb71e6c86a6539e4f61063b7a9c4307a88c67c8af6775b75f5903ebf5e14fefc","ssdeep":"192:p8RcvOOI5QlBxCR0A7P8MPOmDdVZQByM7ox+eh+/GvOunBpjpTqiVFSPIM:aRcvOObij+4th+Noxl+","tlshash":"f872a52de9f05173005340d2eae693676faad113d5520054f2ec23ac6fd2e8ea64b7b9","first_seen":"2026-08-24T16:02:31.12863Z","last_seen":"2026-08-24T16:08:25.542985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":20,"connect":22,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"roblox-exc.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-exc.net/style.css","fqdn":"roblox-exc.net","domain":"roblox-exc.net","tld":"net"},"ip":{"addr":"104.21.63.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblox-exc.net/","date":"2026-08-24T16:07:58.231Z","timestamp":1787587678231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-exc.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:57:26 GMT","end":"Tue, 03 Nov 2026 20:56:12 GMT"},"fingerprint":{"sha1":"7F:26:C7:6E:BA:C2:58:71:B5:FC:84:EF:EC:97:07:AC:1A:96:BB:99","sha256":"87:9F:06:B2:BE:71:51:61:A3:EF:FB:35:45:32:93:02:C1:5A:AD:B6:85:10:BF:C1:34:7A:B3:5A:52:45:C7:F5"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: roblox-exc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblox-exc.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 16:07:58 GMT\r\ncontent-type: text/css\r\netag: W/\"6a857427-350c\"\r\nlast-modified: Wed, 19 Aug 2026 09:15:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aP3RN1MdcqcsAQUyt9XxOY8cpYW7MA2eBRFYPDr9uWHc1TvzeEJyeZ%2FRKgx7QxfldIZo%2B8%2FmgLtCCr%2BZag8RHQowO6ijaO7LGtGs6MEmamE2w%2BRFgvLE3W5Og3SxYy3ohQ%3D%3D\"}]}\r\nage: 359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3039cecee1a0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13580,"size_decoded":3812,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"7c16fa07fac41e7044e62de7f6cd9832","sha1":"84d48eded8476899cf72676b70eed6e5f36e1248","sha256":"f58f6bd1d36fb1fc489afead4f184ed12362615151b3624217f888b0482ebebf","sha512":"464f527a4a8136d7523ea780a1a79060e0d33f4aac928383060fa151b6ad5f8a5a776b304c2776492dc77910e167558ddc31acb6897c0d1655576e7c3c7c88dc","ssdeep":"192:dpEBj+eOKI3A3qFsxb0bWMDLs3ZCvB+h5h7LaLsp1qOehg4Il+O3xYA+MvzPULpX:d1Fsx9BEyAUA","tlshash":"4952345966a71999781f982517ff97c4739ca087cc0dce7e3acd21548f893b8a0a2f4c","first_seen":"2026-03-27T14:56:41.774198Z","last_seen":"2026-08-24T16:08:25.543771Z","times_seen":38,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"roblox-exc.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-exc.net/script.js","fqdn":"roblox-exc.net","domain":"roblox-exc.net","tld":"net"},"ip":{"addr":"104.21.63.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblox-exc.net/","date":"2026-08-24T16:07:58.232Z","timestamp":1787587678232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-exc.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:57:26 GMT","end":"Tue, 03 Nov 2026 20:56:12 GMT"},"fingerprint":{"sha1":"7F:26:C7:6E:BA:C2:58:71:B5:FC:84:EF:EC:97:07:AC:1A:96:BB:99","sha256":"87:9F:06:B2:BE:71:51:61:A3:EF:FB:35:45:32:93:02:C1:5A:AD:B6:85:10:BF:C1:34:7A:B3:5A:52:45:C7:F5"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: roblox-exc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblox-exc.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 16:07:58 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a857427-a98\"\r\nlast-modified: Wed, 19 Aug 2026 09:15:19 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKSKPaX1g%2Fu0L%2FvdoGAA%2FtccLvsLX%2FKBrOWSyxf7ufRvkDIZkjm%2BR8n6%2BWHP%2FzV9VxiwcssZyn2L0WICf2TD0GLNU2Sfs9qy5CTu2pbpyh7RySyIuyu3aYm7GFAtJJF2HA%3D%3D\"}]}\r\nage: 359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3039cecee1b0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2712,"size_decoded":1599,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b2174430e97194b6a42e4b42ec59831e","sha1":"68128d80b952dc8a22d7f526d97d432468bd8360","sha256":"95ff84ebd0e05d241d3c8e6bd21910976bbf380ad2dffe56bd585118d6c81b67","sha512":"75fa4a0ec418505221ef4ed7d833d94ab8b20fadee440a01669845db73a1df134afed5ba8e7a61b2958d372fb9bd24890ecc8e0b4eb60fbdfd680a1778bd8434","ssdeep":"","tlshash":"e051bd2b12b2203580a7716a93df8b887a3a104b7406cd563f5c4b4e1fe1da569f3ee5","first_seen":"2026-03-27T14:56:41.775218Z","last_seen":"2026-08-24T16:08:25.544369Z","times_seen":38,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"roblox-exc.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblox-exc.net/favicon.svg","fqdn":"roblox-exc.net","domain":"roblox-exc.net","tld":"net"},"ip":{"addr":"104.21.63.232","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblox-exc.net/","date":"2026-08-24T16:07:58.336Z","timestamp":1787587678336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox-exc.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 19:57:26 GMT","end":"Tue, 03 Nov 2026 20:56:12 GMT"},"fingerprint":{"sha1":"7F:26:C7:6E:BA:C2:58:71:B5:FC:84:EF:EC:97:07:AC:1A:96:BB:99","sha256":"87:9F:06:B2:BE:71:51:61:A3:EF:FB:35:45:32:93:02:C1:5A:AD:B6:85:10:BF:C1:34:7A:B3:5A:52:45:C7:F5"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: roblox-exc.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblox-exc.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 24 Aug 2026 16:07:58 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a857427-1ba\"\r\nlast-modified: Wed, 19 Aug 2026 09:15:19 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SuHvQh6Jbg80ICTm8iIJqA1dpth4Z9zlfqdBi%2ByZAYtD%2FnCPTePeU9mpePN4UY734mQbumkMAqPnsK2rhiDoC9dBMVrtDlvDZ3YpAMmngvegNQcNZHEkTb2xjXUKHwBe%2FQ%3D%3D\"}]}\r\nage: 359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3039ced9e1c0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":977,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81c76c10bc20d8f88ab20b542025265b","sha1":"75aa3470706f1f27f2c4775825d31663318df2d6","sha256":"077df9e4e5c60fa9c75edee478f0e587ba4efda7deac4657dad93302142e7d66","sha512":"ac80021077f48f209d97888cacee5f96543a75d122b975b1bba873f23e9ce89634c45b539f4f33ca9ac77d44913ee2b0bdd738dada718ab11f606ee383fae8b3","ssdeep":"","tlshash":"e8f0e525d4e98423c128a381db64a8fa271dc1e392a58214b5ee3f183f5c4f668477a8","first_seen":"2026-03-27T14:56:41.776159Z","last_seen":"2026-08-24T16:08:25.54615Z","times_seen":38,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-24","alert":"Sinkholed","trigger":"roblox-exc.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}