WEBSITE ANALYSIS REPORT

http://www.scriptzroblox.eu/post/6d88afa9-769c-4270-8d32-0e5cecca8fe2

11 Sep 2026 · 22:03:13.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:02:33.346 GET 200 document 3.2 KB 164 ms —

22:02:33.721 GET 200 script 522.1 KB 97 ms —

22:02:33.722 GET 200 stylesheet 64.4 KB 105 ms —

22:02:34.015 GET 200 stylesheet 13.9 KB 83 ms —

22:02:34.146 GET 200 img 718.2 KB 105 ms —

22:02:34.148 GET 200 img 17.0 KB 32 ms —

22:02:34.159 GET 200 font 24.7 KB 76 ms —

22:02:34.161 GET 200 font 24.3 KB 50 ms —

22:02:34.163 GET 200 font 24.3 KB 71 ms —

22:02:34.164 GET 200 font 24.3 KB 72 ms —

22:02:34.167 GET 200 script 72 B 94 ms —

22:02:34.169 GET 200 script 72 B 92 ms —

22:02:34.171 GET 200 script 72 B 99 ms —

22:02:34.177 GET 200 fetch 23 B 179 ms —

22:02:34.178 GET 200 script 3.0 KB 29 ms —

22:02:34.184 GET 200 script 47.7 KB 599 ms 1 alerts

22:02:34.196 OPTIONS 200 fetch 0 B 133 ms —

22:02:34.262 POST 200 fetch 2 B 92 ms —

22:02:34.536 GET 200 img 18.6 KB 89 ms —

22:02:34.538 GET 200 img 1.4 KB 97 ms —

22:02:34.618 OPTIONS 200 fetch 0 B 54 ms —

22:02:34.622 GET 200 img 14.2 KB 88 ms —

22:02:34.657 GET 401 fetch 47 B 283 ms —

22:02:34.794 GET 200 script 4.6 KB 6464 ms —

22:02:34.806 GET 200 xhr 40 B 130 ms —

22:02:34.810 GET 200 script 47.7 KB 111 ms 1 alerts

22:02:34.933 GET 200 script 4.6 KB 61 ms —

22:02:34.938 GET 200 xhr 40 B 25 ms —

22:02:34.950 GET 200 script 47.7 KB 108 ms 1 alerts

22:02:34.953 GET 307 xhr 0 B 506 ms 3 alerts

22:02:34.969 GET 307 xhr 0 B 500 ms 2 alerts

22:02:35.072 GET 200 script 4.6 KB 48 ms —

22:02:35.078 GET 307 xhr 0 B 541 ms 2 alerts

22:02:35.464 GET 200 xhr 4.0 KB 118 ms 3 alerts

22:02:35.473 GET 200 xhr 4.0 KB 117 ms 2 alerts

22:02:35.624 GET 200 xhr 4.0 KB 120 ms 2 alerts

Transaction #09

Request / response

URL

GET HTTPS

https://spendsdetachment.com/watch.1469867234201.js?dev=e&fstu=01a0927e-72ac-734c-93d9-4a3d6767d281&key=facc0afa3e8cc2967d705371f7a33503&kw=%5B%22new%22%2C%22apocalypse%22%2C%22rising%22%2C%222%22%2C%22script%22%2C%222026%22%2C%22free%22%2C%22silent%22%2C%22aim%22%2C%22hitbox%22%2C%22expander%22%2C%22fly%22%2C%22more%22%2C%22scriptz%22%2C%22roblox%22%5D&ps1=1789164155&rb=e&refer=https%3A%2F%2Fwww.scriptzroblox.eu%2Fpost%2F6d88afa9-769c-4270-8d32-0e5cecca8fe2&res=14.1055&rmtc=t&sht=ALygFZoU4P5A5wFHfmc7W1L-b7RH_cGXyryfbF-w1zE&shv=2&st1=b02141c57eec9510c4eb03c5fcca02bf&tz=0&uuid=01a0927e-7045-7c9f-950f-68cf2f4b1ba7%3A3%3A1

IP / ASN

172.240.108.68

AS7979 · SERVERS-COM

Requested by: https://www.scriptzroblox.eu/post/6d88afa9-769c-4270-8d32-0e5cecca8fe2

Resource information

File type: JavaScript source, ASCII text, with very long lines (3187)
MIME type: text/html
First seen (UTC): 11 Sep 2026 · 22:03:22.009 UTC
Last seen (UTC): 11 Sep 2026 · 22:03:22.009 UTC
Times seen: 1

Size: 4.0 KB (4063 bytes)
MD5: d01224107bacbd755cebabe4a89f38fa
SHA1: 74d4e6b0abcb29b8dfcaf41a199268465abf4882
SHA256: 38bd8979aaab3456c4737b06a3b694076557a30e4e86958f6ee4da174d4bfe49

Certificate information

Issuer: Let's Encrypt · YR2
Subject: spendsdetachment.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: EB:97:C4:8B:DE:F8:13:B1:55:C6:2E:E9:8C:5C:48:F7:1E:59:B1:F2
Valid from: Wed, 26 Aug 2026 04:27:12 GMT
Valid until: Tue, 24 Nov 2026 04:27:11 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.1469867234201.js?dev=e&fstu=01a0927e-72ac-734c-93d9-4a3d6767d281&key=facc0afa3e8cc2967d705371f7a33503&kw=%5B%22new%22%2C%22apocalypse%22%2C%22rising%22%2C%222%22%2C%22script%22%2C%222026%22%2C%22free%22%2C%22silent%22%2C%22aim%22%2C%22hitbox%22%2C%22expander%22%2C%22fly%22%2C%22more%22%2C%22scriptz%22%2C%22roblox%22%5D&ps1=1789164155&rb=e&refer=https%3A%2F%2Fwww.scriptzroblox.eu%2Fpost%2F6d88afa9-769c-4270-8d32-0e5cecca8fe2&res=14.1055&rmtc=t&sht=ALygFZoU4P5A5wFHfmc7W1L-b7RH_cGXyryfbF-w1zE&shv=2&st1=b02141c57eec9510c4eb03c5fcca02bf&tz=0&uuid=01a0927e-7045-7c9f-950f-68cf2f4b1ba7%3A3%3A1 HTTP/1.1
Host: spendsdetachment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://www.scriptzroblox.eu
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.scriptzroblox.eu/
Cookie: uid_id2=01a0927e-7045-7c9f-950f-68cf2f4b1ba7:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyOTM4ODcwOCwiayI6ImZhY2MwYWZhM2U4Y2MyOTY3ZDcwNTM3MWY3YTMzNTAzIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1NzkzMDcyLCJwaWQiOjMyMjY2MzYsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjo1LCJwdCI6NCwicGsiOiJ1M2VtamJjN3YiLCJjcGtzIjp7IjI4IjoiZjdiNjJkMGFiMWI5OGNjNTcxNTg1YTc3MjdlOWQ2YzYifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTQ2MjcwLCJuIjoiTWF1cmEifSwicmciOnsiaWQiOjMyNzEsIm4iOiJWaWtlbiJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy5zY3JpcHR6cm9ibG94LmV1L3Bvc3QvNmQ4OGFmYTktNzY5Yy00MjcwLThkMzItMGU1Y2VjY2E4ZmUyIiwidHoiOjIsImlkdWMiOjAsImFyIjpbXX19.QWmR_FB0KDR4MQEGNZMXtX64QmK0A1lY-5LjARckciQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Fri, 11 Sep 2026 22:02:35 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent
access-control-allow-credentials: true
access-control-allow-origin: https://www.scriptzroblox.eu
content-encoding: zstd
set-cookie: uid_id2=01a0927e-7045-7c9f-950f-68cf2f4b1ba7:3:1; Path=/; Expires=Fri, 18 Sep 2026 22:02:35 GMT; Secure; SameSite=None
pdhtkv=true; Path=/; Expires=Sat, 12 Sep 2026 22:02:35 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Sat, 12 Sep 2026 22:02:35 GMT; Secure; SameSite=None
pdhtkv5=true; Path=/; Expires=Sat, 12 Sep 2026 22:02:35 GMT; Secure; SameSite=None
uncs5=1; Path=/; Expires=Sat, 12 Sep 2026 22:02:35 GMT; Secure; SameSite=None
u_pl29388708=1; Path=/; Expires=Sat, 12 Sep 2026 22:02:35 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 12
Host: spendsdetachment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 236678cbfbf170b49f9c7ac49d670f4e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

22:02:35.645 GET 200 img 71.3 KB 134 ms —

22:02:35.646 GET 200 img 0 B 0 ms 3 alerts

22:02:35.707 GET 200 img 64.3 KB 86 ms —

22:02:35.708 GET 200 img 0 B 0 ms 2 alerts

22:02:35.799 GET 200 img 91.3 KB 28 ms —

22:02:35.800 GET 200 img 0 B 0 ms 2 alerts

22:02:35.811 POST 200 fetch 0 B 419 ms 3 alerts

22:02:35.977 POST 200 fetch 0 B 433 ms 2 alerts

22:02:36.082 POST 200 fetch 0 B 409 ms 2 alerts

http://www.scriptzroblox.eu/post/6d88afa9-769c-4270-8d32-0e5cecca8fe2

Domain graph

Hostnames

Connections