{"report_id":"ab740012-5537-4102-9015-27d867df1607","version":6,"status":"done","tags":[],"date":"2026-05-23T11:39:34Z","url":{"schema":"http","addr":"robloxhelper.app/cl/v/4orqm5","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"104.21.33.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"robloxhelper.app/cl/v/4orqm5","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"title":"robloxhelper.app/cl/v/4orqm5","dom":{"size":27948,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6415)","md5":"4692f4fe97a62e305bbdc624969213e8","sha1":"1c7ea62b8715a9922d23255adbcc65b044f59eeb","sha256":"bb4b47468aff9bafb78c665f0696231f13b9dbeed431543355b15e049ce4ff93","sha512":"cc5ebc91c5b1d5c4369518b2642b94b8f11092d91eae6e8d90afd6e1bcee06425f527623d05f0be82b3c61ae99e34831938f0d5c4f0804ed1663d2aaccebc1b2","ssdeep":"768:2r2Akb1Y5ceuyr831TD31EA314rMW25njn4aDpkod+aepkodiaopkodGFXHu:Prw3CpbOpbkpbGFXHu","tlshash":"70c2083185f5201ef0578369fba0b65e6179c403db23196cb26c9a5dcfcfe8b4522278","dom_hash":"domhash2622c427e5b16208573846598e1ea50a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"robloxhelper.app/cl/v/4orqm5","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"104.21.33.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-27T11:39:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":3,"received_data":55781,"sent_data":1516,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"robloxhelper.app","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-13T14:10:07.438651Z","last_seen":"2026-05-12T14:42:39.778911Z","alert_count":16,"request_count":8,"received_data":339177,"sent_data":8771,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bootstrap:2.2.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":6,"received_data":130554,"sent_data":3272,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ws-mt1.pusher.com","ip":{"addr":"3.231.17.226","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1997-06-03","domain_rank":33232,"first_seen":"2016-01-27T14:04:54Z","last_seen":"2026-05-19T13:26:58.489956Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":628,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-17T22:41:40.561616Z","alert_count":0,"request_count":2,"received_data":484078,"sent_data":949,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sdk.lockertools.ai","ip":{"addr":"65.9.62.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-03-23","domain_rank":3318358,"first_seen":"2023-05-25T04:58:14Z","last_seen":"2026-05-15T22:35:37.036006Z","alert_count":0,"request_count":1,"received_data":22048,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"robloxhelper.app/cl/v/4orqm5","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fd6fcf032a48f87875cf43a391fea4f","sha1":"f49de49feb08790bfdfb1f2f2f6017f2597a5d32","sha256":"485ce56862a9741580f70cbadf1a1758e4167ec8bf15c6d1857aabbb151b5666","sha512":"eb62fbb1a868d6a4b5c31a7c7b42e88005b3d29ee212f34fec0681e5019b8bab50ce13f2c212017f407444ac13c31865cbac07ed230340d12e8f621ded331987","ssdeep":"","tlshash":"0d2103a8acb3c0a03526229fcf7ff01a419555230548d9093b0cea6c3f6977e99226fc","size":1339,"data":"","first_seen":"2026-05-23T11:39:38.068764Z","last_seen":"2026-05-23T11:39:38.068764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cl/v/4orqm5","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1d7366b9bacc79012c1a27078248f14","sha1":"f099446c0b77df2e7f0e62a43f99869eceb5812c","sha256":"a1ab5de8421f7b034c18f0a26fb09e731cbc114e4556cf2ae31ef74cd219fcc8","sha512":"17663ac2da85f73f930823426d40b88921879da81937f8955baa1eccffa311f243d0e2243de38a98c39baa7e8c9c4bbb5d6a70b5e4e2f1d0db870ebe97244104","ssdeep":"96:bPJ5Ee74afL33wwrMdod6GaOyEr4af233wwrMdodT2OgK4afA33wwrMdod6aOX7:bhGeMafL35rMdodPl8af235rMdodN0at","tlshash":"5e91ba5499ff0e0fb1481178de5924b69364d0e30e0264a1b39cb15fdf5a767dc34264","size":4302,"data":"","first_seen":"2026-05-23T11:39:38.071872Z","last_seen":"2026-05-23T11:39:38.071872Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cdn/js/cl/desktop.js?id=0AsO2E","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b28fc261af408c3ee62d1c73f3419e4","sha1":"94b337f0adcb707427a9c2350f6033d9c5b9586b","sha256":"c5e4b720180f312ec5a6ff6e4db82d2e014fbcc33fb8b58d1de47cc2db29390b","sha512":"578493fee2d1302e1fd4d03f5c92912d79ab39c147342532cae0515295d8dbc4e419d3daa140ae4370a13a7a8f4efd894710fde3498873b4535dca2130cccf3e","ssdeep":"3072:pQ1ROtcCkYjHrX41gE/txzORiglh/UhVgc3+h:pQfPCkYbT41gE/txzOR5j/UhVgz","tlshash":"6ff31ad9b6c2b02247e77076047f510bf23529a8684dc018b638d9e5fc74a8da23bf78","size":168690,"data":"","first_seen":"2026-04-07T02:00:49.501001Z","last_seen":"2026-07-23T13:54:31.025321Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.lockertools.ai/chat.js","fqdn":"sdk.lockertools.ai","domain":"lockertools.ai","tld":"ai"},"ip":{"addr":"65.9.62.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbfe1c8741c2c4e93c3e65a4798a6d3c","sha1":"131e73ef0bbc3d98526bfce15b855f197af0ce8b","sha256":"4033413f45978984a08d2f22a6b632e0e38f00a1f6cfbb52b4a293532ca43cc0","sha512":"6f3d3014aa532adf0fff7833c7d9cb0d02f56a525104122ac068bab4ace3f399788f8c800b60f7972488e324969481a682ed240a35799dc22bcc34a305fc2bee","ssdeep":"384:lREj2i0peCnfDavapaPaYDaHIa3saVz8lwTwbWQikAqsjYjr0TTE29TegRQlZh2w:li5ceB5bWQiHWr0TTZRQ3hLWSvW94p","tlshash":"02a25b314778752ca57f03eaf2b5a66d313b0c22b721a8b8f54cdc24494ed5166a3bbc","size":21535,"data":"","first_seen":"2026-04-23T22:47:19.075456Z","last_seen":"2026-07-23T13:54:31.027565Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 May 2026 11:39:12 GMT\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-07-24T10:01:20.949166Z","times_seen":48387,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":124,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cdn/img/offer/69372","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /cdn/img/offer/69372 HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/cl/v/4orqm5\r\nCookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1315\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 08:32:42 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\netag: \"69ab2742e3266a98d846d9fa0bad2efb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9c13d38452f2017c92d65c8904408686.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: IAD55-P2\r\nx-amz-cf-id: P4FX6Qs_2eDOI6USXLVS1klAHapwbh2F5BVg93GRxcylPQaL_slTiA==\r\nage: 60369\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvre1xl%2FMktV%2Bs8Ajn6f6j8JulCrdRenL48R5VgOiYoXu7LQ0ca860cK3RSHm%2FCaedSUCPYjKiO7MhTic05yDhmBSbU5lSd5GcLHI1RMqtqbdSBTbTvBT6qnfPzn6glyvOXA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a003c75a5cebb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 100x95, components 3","md5":"69ab2742e3266a98d846d9fa0bad2efb","sha1":"cdb79108c2cfd6ccfeff2cc996a07e5985d8d8f4","sha256":"1729f954e76090df7fbb637a1829513ec060436bb5947ee7a7194ad4a0c6126a","sha512":"5fe46bd1ec9952d127e9418cebbc7149b5292ed0338a21ec0039e19d0ad10f0baef7101ab90441ed3c722b94733adbdbbc3a5bf13a167d8ae2dfc9d2a608fb89","ssdeep":"","tlshash":"cc21771ba6ab8057eb074234cd4532a8c346655394010bf7ba401e7fe97fefd29e7124","first_seen":"2025-11-26T13:06:53.525169Z","last_seen":"2026-07-23T13:54:31.018568Z","times_seen":89,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxhelper.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:03:53 GMT\r\nexpires: Sun, 16 May 2027 15:03:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592519\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-24T09:48:12.887779Z","times_seen":382228,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":189,"dns":1,"connect":26,"send":0,"wait":9,"receive":1,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxhelper.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 14:48:25 GMT\r\nexpires: Sun, 16 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 593447\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T09:51:50.676101Z","times_seen":242154,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws-mt1.pusher.com/app/2a1ddc1f29b22896b26c?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false","fqdn":"ws-mt1.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"3.231.17.226","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:13.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 28 Mar 2026 00:00:00 GMT","end":"Sun, 11 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"68:C1:28:73:BB:EB:2E:A1:44:08:BF:FF:AF:37:B4:D8:22:07:49:6F","sha256":"C9:B8:8C:91:57:C2:A5:88:42:7C:A2:99:3D:20:69:9B:60:5B:EA:A7:C3:F7:E0:4E:4E:BA:C7:35:63:7E:C9:E8"}}},"request":{"raw":"GET /app/2a1ddc1f29b22896b26c?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false HTTP/1.1\r\nHost: ws-mt1.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://robloxhelper.app\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sSACFI901fZd+nTdRdmPFw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 23 May 2026 11:39:13 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: gfA4mcW1EiB8k/RRa9lQO4e384I=\r\nSec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T09:50:53.836889Z","times_seen":17498896,"resource_available":true,"data":null}},"time_used":967,"timings":{"blocked":0,"dns":292,"connect":384,"send":0,"wait":94,"receive":0,"ssl":487},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/fastbootstrap@2.2.0/dist/css/fastbootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/fastbootstrap@2.2.0/dist/css/fastbootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 2.2.0\r\nx-jsd-version-type: version\r\netag: W/\"60d66-EyXm0uczMUV4O8/4B3gikIF910I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1586986\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\nx-served-by: cache-fra-etou8220157-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 52449\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396646,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"87c242d5b51a5e87d5627370dfa51ea5","sha1":"1325e6d2e7333145783bcff807782290817dd742","sha256":"57a96ef8e75834a4ca4ec54506e42cc889438915a23a6b42f1543c2f3766da2e","sha512":"393c8c6e01782874995064f0c0d916557133ef1e30bec9e60494c6b90d705a1030a23c5c6a6815b578a5a2b32b7a75674e3a09100aaa54961282fb9f6fcc6903","ssdeep":"1536:Px0QMzQOMjnlCwX9rfydkAvs5wlP7XbrQz8frE9jW4D1wAQzTfFOhMT5gMuFYtow:Nnl9rfYfFAMdgMuFSopaay1UmGoysX","tlshash":"168451daf6c1303cd8a785559294bffd4a6f6845cb011eaaf01377a807c6bd71a229cc","first_seen":"2024-12-12T10:16:34.884272Z","last_seen":"2026-07-23T13:54:31.024701Z","times_seen":86,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":33,"dns":0,"connect":15,"send":0,"wait":14,"receive":13,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.49.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"14f73-BDozLk9VXMC/015FG+lVtLk5ZqA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\nage: 2196092\r\nx-served-by: cache-fra-etou8220072-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85875,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65354)","md5":"5605c44f8b24ea5de37a959955b71eb6","sha1":"043a332e4f555cc0bfd35e451be955b4b93966a0","sha256":"f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62","sha512":"74f5d8703b9bfda79bd3c73ade346afe4e8668a71c976e7a250cbf0273aaec2027119f45cd22fdc126dc664329e11dbabc1b0c2c5607e2443aeff6db57c5da09","ssdeep":"768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz","tlshash":"9383fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-01-11T04:35:50Z","last_seen":"2026-07-24T07:52:02.376717Z","times_seen":9739,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":29,"dns":1,"connect":13,"send":0,"wait":14,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Source+Sans+Pro:400,700,300,200","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css?family=Source+Sans+Pro:400,700,300,200 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 May 2026 11:39:12 GMT\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9744,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4f6f248b90cd0ced0bac2d8123cc3130","sha1":"d5df28443b5f501d6f3c4945aa9538b0c7ddf0f3","sha256":"d5516230a62013798e81305ea288a272f3b53b8106011f62c9968b387e24951a","sha512":"856bfcd44e50b8865f595eab7593a482aeb34bfbec0b0529f4ce1e27af617fb196819c7b5e34f9f6aefc8af42b270f2fc1b5f56f3ec4196a7bac8a89d35ff4cf","ssdeep":"192:igywZR3LUHE1n1Cb63gYIv3q0eb83JLXC2H52fa3EcoLq:HZHfPkXjr","tlshash":"d712bef2411ae44897a31cc623de3e769d8f60207185c16adffd5858aca6c3a43b4f6d","first_seen":"2025-09-20T22:06:02.160196Z","last_seen":"2026-07-23T13:54:31.018032Z","times_seen":400,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":118,"dns":0,"connect":9,"send":0,"wait":18,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cdn/img/offer/70834","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /cdn/img/offer/70834 HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/cl/v/4orqm5\r\nCookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1305\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 05 Feb 2026 20:41:25 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\netag: \"3fd352d5ccceaf22fd70ddbc98f8ff23\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 aadc36bc93844687d7ba70137223bc20.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: IAD55-P2\r\nx-amz-cf-id: 2P4MAJZswxpMknMzX_W0Eh0F-9oKHXc-ajXrY4BdbTv9m6BW-z8R1w==\r\nage: 5943\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SlWrDPVQSARsEKyxg%2Fdn%2FcKdnrgoukfk2CH9J67vp%2BSGVc3%2FHn1ZW5SJ2hwqmUcZLQohpBG97M%2BTrSvzEmzkupYf6EVJlNnNuc3t7ZoLkiUWwqP2I9W2JsJHtjlUITiwDvPY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a003c75a5ceab4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 100x100, components 3","md5":"3fd352d5ccceaf22fd70ddbc98f8ff23","sha1":"54b53291b9b327b47b97733e03bad74d23935c20","sha256":"d5a4b498a4dca2303c3a28515e05cba8292d7d0cb1f2583ac20b401382cb6796","sha512":"cab6d72475c1d0c980af508f114f547ceac6d92918d558ae702e00543f4c341edda098458a380c1292f2ccb1f558b5c5998feaddf1fda50f19a774f15fda1ba8","ssdeep":"","tlshash":"5521842b4f856843ef856070476f61ea370d1565b87a8ebe0bc39909443bcf4a822256","first_seen":"2025-05-17T17:51:56.336121Z","last_seen":"2026-07-23T13:54:31.021545Z","times_seen":53,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiGyp8kv8JHgFVrJJLucHtA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/poppins/v24/pxiGyp8kv8JHgFVrJJLucHtA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxhelper.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8668\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:06:47 GMT\r\nexpires: Sun, 16 May 2027 15:06:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 592345\r\nlast-modified: Mon, 15 Sep 2025 16:34:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8668, version 1.0","md5":"a242ba0df3a128a2cab929a8c45d5056","sha1":"d70e2c70b21cbb66cd883ae56e2dedacefd81c7c","sha256":"50d0c1742d80ac71f4cde20e8c04d41a24806af342831f479938b527fbff0972","sha512":"fc85567dd0270a60d684f9e7fe8788006b2a4985a683334294c5b2b8e1dd9d268a787c232c91087fa25d8fbf81c73894c3846e3d4deb97a1722575cc9c93b541","ssdeep":"192:mnQ9l6zvmoW1McErCT/IHf11y41NSUVZVdH9aTbMlcE:mQ9l6CoW4+rIH7y41QUVZXcT9E","tlshash":"e102af8a951b1eced41769b184abc61fd78894199bf2708fe05d34c15dfbcacc707421","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-24T10:03:34.486975Z","times_seen":29972,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":68,"dns":0,"connect":10,"send":0,"wait":26,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cdn/js/cl/desktop.js?id=0AsO2E","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /cdn/js/cl/desktop.js?id=0AsO2E HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/cl/v/4orqm5\r\nCookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 11:39:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 30 Mar 2026 12:51:36 GMT\r\netag: W/\"5b28fc261af408c3ee62d1c73f3419e4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=2628000\r\nexpires: Sun, 30 Mar 2031 12:51:35 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 f338f1f5c997eee01a37834445ee4740.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: IAD55-P2\r\nx-amz-cf-id: 9x4PLZH4qVELksLf0y_U4YPUo_T77dWANRlDev6zpRCxru5q3IRLrA==\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFaHGn4VTyzKYjJGV802AXM4cLAoH2O%2FzT9dgzRSvFu%2FfEvoIfmE7ZqxRJMI9Y71vL8MIGSxcR62aGoK2JSguTXp1UKj5H9%2BZ6GTsu7ooKB6OqaNJtvv96TeZFzZE5Dy52LJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a003c75c8ec3b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168690,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"5b28fc261af408c3ee62d1c73f3419e4","sha1":"94b337f0adcb707427a9c2350f6033d9c5b9586b","sha256":"c5e4b720180f312ec5a6ff6e4db82d2e014fbcc33fb8b58d1de47cc2db29390b","sha512":"578493fee2d1302e1fd4d03f5c92912d79ab39c147342532cae0515295d8dbc4e419d3daa140ae4370a13a7a8f4efd894710fde3498873b4535dca2130cccf3e","ssdeep":"3072:pQ1ROtcCkYjHrX41gE/txzORiglh/UhVgc3+h:pQfPCkYbT41gE/txzOR5j/UhVgz","tlshash":"6ff31ad9b6c2b02247e77076047f510bf23529a8684dc018b638d9e5fc74a8da23bf78","first_seen":"2026-04-07T02:00:49.501001Z","last_seen":"2026-07-23T13:54:31.025321Z","times_seen":54,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/favicon.ico","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:13.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/cl/v/4orqm5\r\nCookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 11:39:13 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nserver: cloudflare\r\nlast-modified: Tue, 19 May 2026 15:18:57 GMT\r\npriority: u=6,i=?0\r\netag: \"6a0c7f61-0\"\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 3395\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2y9S78zaOOxlSo1DslHbv1rrY8IxaMjQ1QPTjae9Bix7PG9y4IMYE%2Byi%2Faa7sG5yvcpvD3TqQExh11SBEIspuP7cLYQYlUb6aDFoNca7O%2Byhff4aAeOp7Ogs2j8XbvfZZ0Gn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a003c75f2934b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T09:50:53.836889Z","times_seen":17498896,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cl/v/4orqm5","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-23T11:39:11.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /cl/v/4orqm5 HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: DENY, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-robots-tag: none\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; expires=Sun, 24 May 2026 07:39:12 GMT; Max-Age=72000; path=/; secure; samesite=lax\nogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D; expires=Sun, 24 May 2026 07:39:12 GMT; Max-Age=72000; path=/; secure; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mq29HTu2ZM%2FoyhfAL6nNaIhpqQf0lIO%2BvwyYrLznBPPL586hDcmoe269UmYPIspVhW1KmzcfjTJHwPH%2BXtJ7h4W2xxRZXdPuLzfRi%2F04kUxnG7GAqDaYK4NMbjEO6tcTiB35\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a003c755fa3b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:2.2.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19763,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3921)","md5":"db3cc4f211f93321dc0dc14471feb079","sha1":"63d86399cd1b13e0babeb2952e8fce4d329e9b9b","sha256":"33dd9e3dd10f238933296b35e84a214f14024537b81840d4750ed962c3839238","sha512":"63597abc5d495d547f74c70be43d904e3c3873881159a68b7af81c9fad479c0abc4885e5ead978498f7b3721311fc5ef13bbf86407ce0c151eeea72168d0116b","ssdeep":"384:sraDAk41gN+0lf0931Tc931EB9314wMW25njnGVaDpgdodPl8aepgdodN0aopgd/:sr2Akb+0l831Ts31Ej314wMW25njn4ay","tlshash":"0792f73158f6041ff04791a5bfa5a56d96a8c043cb134a4d73aca79d8fc6f9b8833268","first_seen":"2026-05-23T11:39:38.030374Z","last_seen":"2026-05-23T11:39:38.030374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":531,"timings":{"blocked":37,"dns":20,"connect":1,"send":0,"wait":456,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cdn/cl/4orqm5/briefcase/logo-qU2P","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /cdn/cl/4orqm5/briefcase/logo-qU2P HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/cl/v/4orqm5\r\nCookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 90736\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 07 Apr 2026 20:39:09 GMT\r\netag: \"f71de44535e4ea30492c40810ba7fe74\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 640e1fde1214554c9f15c8cb85df826a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: IAD55-P2\r\nx-amz-cf-id: GIX4TsVzo0_kEIZ8faO_gWKft5ROGMfH0VIT0eSkB-OapZ4kv_T7Tg==\r\nage: 73870\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6gNOwnJLO6O6Gj6%2FnMmtHsvzMwS%2BXfrDZXeqeI1zmDyRur%2FfYkOldv8KlBvMquQUs9itwuDBdQuEBRhJOvMh0C1A2usS1vWSPD2IsyNzmJoD3YmjL27sWv0JkkDBarp0Upx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a003c75a5ce5b4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":90736,"size_decoded":0,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f71de44535e4ea30492c40810ba7fe74","sha1":"36ef77c967d5cc4b67bb827844a9733464d30709","sha256":"f05451e8e17066614e702b9f3c06ade61748e8d41ab16910cb8575418ed4bfb7","sha512":"238942242661beacfb6d0fa0d44ba91278e23cbf9118745b78da594d1e8abde53ed57c2237a2508286bff7aab2060f05bbb1faccc9ed0ac72a125252a41e3725","ssdeep":"1536:67k6Vs+OeDsOkahP5gdS0zWNDe5Zr9upOaddhYdaCOYlv3JjI+u7PY6i6h:EkWsC4zwPSddWNDkVaDqHlhUhniw","tlshash":"f793126f8a2af1bea0946f99bd967041dcee7610357435b9c083cfc05f4960147fa578","first_seen":"2026-05-03T23:25:14.829535Z","last_seen":"2026-05-23T11:39:38.033851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cdn/img/offer/65888","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /cdn/img/offer/65888 HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/cl/v/4orqm5\r\nCookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2410\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Jul 2025 13:32:34 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\netag: \"bcf95c7f8c87d8f981b173797bb65d18\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 adbbe30603ccc7a5f033a8550b47c84c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: IAD55-P2\r\nx-amz-cf-id: a-QJlUmIySb8S_eI2eyt24UlEWpLVJIIlc4EMdaFjyQhaQJmIUEaiA==\r\nage: 46478\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsMGbIA0FOMTqBRXQtSkimxM9FQJqrZoX%2FvkVNvy%2FdE86wdPtsPCAofGZt0GqjtmeVUiipQ2ZaHzA7Zzuzyeu%2FWEkZ1nIO8LVgGXbS0M3ggl4T7t7PYbOohFATvbmgHLMmTB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a003c75a5cecb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 100x100, components 3","md5":"bcf95c7f8c87d8f981b173797bb65d18","sha1":"337adb4938c9e8599df703c2fc548c075a673ae8","sha256":"0e9f76007142ac786f24c5bfbfc45d66b40e30c968d6b1987c0590c2e189da17","sha512":"3bc926b88455fe4f0dfeab660196bed205e39314a8e02556ebf7e4ed20cc91c12f2335efd971af298fbcbcb7a444e22be9e942cf8b87a0648a0aa312e79bcd45","ssdeep":"","tlshash":"df41eb5b63027e68cb080cb60a5aa954d30055d27e62973673c5b572f915ff1e4b7c08","first_seen":"2025-08-12T19:32:51.494094Z","last_seen":"2026-07-23T13:54:31.028547Z","times_seen":110,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sdk.lockertools.ai/chat.js","fqdn":"sdk.lockertools.ai","domain":"lockertools.ai","tld":"ai"},"ip":{"addr":"65.9.62.81","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sdk.lockertools.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 03 Feb 2026 00:00:00 GMT","end":"Thu, 04 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"74:FA:13:F3:7E:BA:A2:93:B2:3C:76:1C:99:39:57:05:53:73:2B:EB","sha256":"4C:C0:19:A0:3E:2A:B4:EA:E8:EF:A0:1D:08:42:C1:AA:CF:3F:E6:92:C5:AE:7C:F4:66:A2:7D:1B:CC:6D:5A:65"}}},"request":{"raw":"GET /chat.js HTTP/1.1\r\nHost: sdk.lockertools.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 10:10:36 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\ndate: Fri, 22 May 2026 12:37:00 GMT\r\netag: W/\"bbfe1c8741c2c4e93c3e65a4798a6d3c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4c0d9e74aed09e189a3b6e5f8274d52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: -jnxGugE50U_h7wadpTekieJyayTsVBft8tKgLiE5XJzB_0yf7CMWg==\r\nage: 82933\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21535,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20364), with no line terminators","md5":"bbfe1c8741c2c4e93c3e65a4798a6d3c","sha1":"131e73ef0bbc3d98526bfce15b855f197af0ce8b","sha256":"4033413f45978984a08d2f22a6b632e0e38f00a1f6cfbb52b4a293532ca43cc0","sha512":"6f3d3014aa532adf0fff7833c7d9cb0d02f56a525104122ac068bab4ace3f399788f8c800b60f7972488e324969481a682ed240a35799dc22bcc34a305fc2bee","ssdeep":"384:lREj2i0peCnfDavapaPaYDaHIa3saVz8lwTwbWQikAqsjYjr0TTE29TegRQlZh2w:li5ceB5bWQiHWr0TTZRQ3hLWSvW94p","tlshash":"02a25b314778752ca57f03eaf2b5a66d313b0c22b721a8b8f54cdc24494ed5166a3bbc","first_seen":"2026-04-23T22:47:19.075456Z","last_seen":"2026-07-23T13:54:31.027565Z","times_seen":45,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":233,"dns":62,"connect":8,"send":0,"wait":8,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxhelper.app/cdn/cl/4orqm5/briefcase/background_image-dClW","fqdn":"robloxhelper.app","domain":"robloxhelper.app","tld":"app"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"robloxhelper.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 11:31:41 GMT","end":"Tue, 07 Jul 2026 11:31:40 GMT"},"fingerprint":{"sha1":"15:4B:C4:12:6F:C3:63:FC:6E:E1:B0:60:B6:66:A0:FA:4B:FE:47:4D","sha256":"F6:0E:AF:B5:F4:8F:2F:17:A7:0D:59:94:82:7B:87:49:CE:DF:54:06:7E:1E:21:87:CD:B0:47:9D:E7:14:86:0A"}}},"request":{"raw":"GET /cdn/cl/4orqm5/briefcase/background_image-dClW HTTP/1.1\r\nHost: robloxhelper.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/cl/v/4orqm5\r\nCookie: XSRF-TOKEN=eyJpdiI6InQyMllMRjY0L2RSZ0YrS2hqT0FlVWc9PSIsInZhbHVlIjoiSHdzbGdaVzgxcHJKMTNyV3RtaG1zWDlGWG5VVW8zbmZDNmp2UHQ5OVBwZG0zRGlwRmtDbkk2TDU2TTEwQkNuOTdQa0w3Z3dNRmw2SjhLd3U0eVNJYXBrRXhUaGdIaEt2YWtSVzlqczh1YllkbGNFRmkrSGhraDNIaE9vaEdSY1AiLCJtYWMiOiI3MTVmN2ZhNjVkYzNlZjMzZTQ2NzA3NTRjZmMyYjlmZGNjMzE5MGJkNTk2MGQwMGI0ZDAxMDlkZWFiY2UwNTQzIiwidGFnIjoiIn0%3D; ogads_session=eyJpdiI6Im1sVk1IdDVPNk5mZmpBRm1USTVsMXc9PSIsInZhbHVlIjoibEpVenpKUDNkY0t2TnhLMXU2QlNWNkVmZlhPZjJldFM3bE1GMTc3MFZoT3B5d3h5Z25lSE1MVVFrb2NMODdBaVRyOGcyTEJncW9iOEJJeTRKTHJWdzZjbkxJdVIwOXlBRDU4a2lYYmQraEd4R1RwRG9LeFczVDU2SkZiY3BLd2QiLCJtYWMiOiIyZDU1ODM0NDc3ZWZjMDViMmRhZTdlNDMwYjM0MjMyMDZjYmM3MGE1ZDRkMjAxYmEzMGRhMDE0ZGEwNTA2MDIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46360\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 07 Apr 2026 20:39:09 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\netag: \"de0810f6482c99ed97148d7dc4c4fed4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bdf2aab533e801e16a7a135842a2ee18.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: IAD55-P2\r\nx-amz-cf-id: 3qpBVOxmlNcjmvBpah6i4Zs9kRvvVha-iITya9XcUZjX-ufzqiDyJg==\r\nage: 70536\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVDXjCEHikMDAK6oCTh2SCm0lHS3tLFmemmo%2B2vh5Choohho83JbZAQMqkfjBDaRKGdjp%2FGewk7XDNSUtatJ%2BCGHmA3RZPtqJjwFH%2F8B5%2Fh7eUgnGAaWMwwryvu8I%2Bxudlym\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a003c75c5e9fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46360,"size_decoded":0,"mime_type":"application/octet-stream","magic":"RIFF (little-endian) data, Web/P image","md5":"de0810f6482c99ed97148d7dc4c4fed4","sha1":"21a7cc114999d68abe67e6fc25dd1c9e1e201a87","sha256":"02d8cf1ffa1a1dbd7e55ea8b606bbefba4303093d8a0ebf61416d87d7cb60a37","sha512":"06f8f5402ef0f1182e8817cb195efbcd843423fa3f481303644d3508d819495d0cdbc3bf76a341a2ef0e78d3d31be7dfcffa417223782b68c146d83a0c6a5a48","ssdeep":"768:RaaAJ2oz5SjYot1tqw/n9rhU8J0RxCoQDDGLKS9/oqZwsPSjgjCCzmwqQkU0PaAf:AaYUNt7nJhG3CocGyqZws6izmD14IN0g","tlshash":"1523f1959f681e425c49b37745ea8e6785f3e80099c8d2b767bdcc720c9c0924de37e2","first_seen":"2026-05-03T23:25:14.823278Z","last_seen":"2026-05-23T11:39:38.048647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-23","alert":"Sinkholed","trigger":"robloxhelper.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxhelper.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 02:00:45 GMT\r\nexpires: Sun, 23 May 2027 02:00:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 34707\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-24T09:50:06.97657Z","times_seen":281766,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":187,"dns":1,"connect":26,"send":0,"wait":9,"receive":1,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxhelper.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 23 May 2026 11:39:12 GMT\r\ndate: Sat, 23 May 2026 11:39:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22340,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b9f037ad2bf34f0e66cb12a391456d5f","sha1":"9e5e9fa857e3ed7ef12535c8fac83846034bf4a5","sha256":"2d09d5a02335bea6714b8a21156de9506fdd34d43d597aea05792ff050a588a6","sha512":"a49ad933cd238b818c604b044fa200f2d6a40d24040be41584f0c535f948b2f7642b0d91cbb77b07f41f071d46e6738a0d9c3a2d9ea125f463329280fbfbd970","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/U:pDS99YURRuWDyjooYhREHPM5svvYaR78","tlshash":"86a210a1041744009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:50.873195Z","last_seen":"2026-07-24T08:12:27.209794Z","times_seen":5829,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxhelper.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 14:48:25 GMT\r\nexpires: Sun, 16 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 593447\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T09:51:50.676101Z","times_seen":242154,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":9,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxhelper.app/cl/v/4orqm5","date":"2026-05-23T11:39:12.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxhelper.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 19:54:09 GMT\r\nexpires: Sun, 16 May 2027 19:54:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575103\r\nlast-modified: Wed, 10 Sep 2025 16:43:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14724, version 1.0","md5":"b8be966e335e865e3c73faa8cce0ed35","sha1":"d0cd995e87f5bfb0206759b83e5ef25676d0edd8","sha256":"06b675a649489d21b7fd33f19b1c6d37e8bd778ded07ecfec26bbc8f11e694f4","sha512":"2257e0a09a86666b280d44ae551a33d17a6072043a2c38f0bb905847b66217809870c8cd6ab3a6ebce3e04b2ff79bedd11f1b18c7d65c231f8c9f21ed8a26e5e","ssdeep":"384:wK2JDEZSzIQA8yHGXMXvQDxyrGCQYamlyFlGWD:zrB8y0zKmYasKh","tlshash":"f962c0d2c64154daea05b9b35f612538bc99bf462054fd0796cbe41df7230a8fe382e2","first_seen":"2025-09-11T17:07:37.682239Z","last_seen":"2026-07-24T10:01:30.472084Z","times_seen":51013,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":71,"dns":1,"connect":9,"send":0,"wait":26,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}