{"report_id":"d9b17e64-2694-43d8-9b86-73edc4e7a602","version":6,"status":"done","tags":[],"date":"2026-03-05T14:16:24Z","url":{"schema":"https","addr":"robloxfund.com","fqdn":"robloxfund.com","domain":"robloxfund.com","tld":"com"},"ip":{"addr":"80.97.160.221","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"robloxfund.com/","fqdn":"robloxfund.com","domain":"robloxfund.com","tld":"com"},"title":"RobloxFund.com - Click Here","dom":{"size":8916,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (564)","md5":"e3afa332e84ba5e6cb837eae536a6a22","sha1":"8bc1c8377e2102597299c313e038aa48ee86b050","sha256":"38a4b787bd911f567c70d07d03551b069bb480f47ae39bff6115d806cacc2100","sha512":"676a0f0bb950d55f67ae5588e6dd7c5562df618f9e78a87d868b6b9c25dd587a587b62ca531ffd54f2d81101ddc546093d3e6ab11c8fac77a7107df85f89d4c6","ssdeep":"192:9Yic0hbhnf5JPaiX9t+Z7e5H2/RBbGCDkoQUXhS7ucpf1ogAyJGZtj:3qk3gZd","tlshash":"700284a72cd3011e160342662beba20961b6d40ba34addbd7fdd12c8cf95399d1e73c9","dom_hash":"domhash8a1f54457caf3d17dcab7601669b278d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"robloxfund.com","fqdn":"robloxfund.com","domain":"robloxfund.com","tld":"com"},"ip":{"addr":"80.97.160.221","port":0,"asn":0,"as":"","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T14:16:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"robloxfund.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":8449,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-03-02T06:49:07.571675Z","alert_count":0,"request_count":1,"received_data":26483,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":31261,"sent_data":1104,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.rbxcdn.com","ip":{"addr":"2.22.55.99","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2013-07-17","domain_rank":99657,"first_seen":"2013-08-19T11:03:07Z","last_seen":"2026-03-05T01:09:27.763983Z","alert_count":0,"request_count":1,"received_data":9562,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"robloxfund.com","ip":{"addr":"80.97.160.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2026-03-05T14:16:24.109489Z","last_seen":"2026-03-05T14:16:24.109489Z","alert_count":1,"request_count":1,"received_data":9534,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"robloxfund.com/","fqdn":"robloxfund.com","domain":"robloxfund.com","tld":"com"},"ip":{"addr":"80.97.160.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"a71f0ce76c4e09a62ae9fc1085fd022c","sha1":"be60c3f1cf8d5b309daca295648f2f1f04f1160e","sha256":"06d1e69eb2ec2226426d425fa851c1962a70241da48fdc22a593a967474df173","sha512":"2376153a3eb6aff9904554ea34c6f8d5b06c43e44afef6a0b215c7adccc1eaac1521546e963ce12d2898eafe1866a7b949e708bf58f171ba1ad1fd1053797240","ssdeep":"","tlshash":"f901f90630f32430196f207e436f2ac922226557260de82cfd9e8b481f51501633bbc3","size":752,"data":"","first_seen":"2026-03-05T14:16:26.36704Z","last_seen":"2026-03-05T14:38:15.735971Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"images.rbxcdn.com/7c5fe83dffa97250aaddd54178900ea7.png","fqdn":"images.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"2.22.55.99","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxfund.com/","date":"2026-03-05T14:16:03.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":"Roblox Corporation"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sat, 31 May 2025 00:00:00 GMT","end":"Tue, 02 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:F3:3C:07:AE:75:E2:C9:80:C9:AF:FA:E4:41:57:44:14:6C:32:3F","sha256":"43:35:4D:A1:F9:F2:6B:49:5B:18:D2:CC:0C:F3:4F:54:C9:F7:BB:35:2C:55:3E:68:70:05:54:92:62:D1:59:EF"}}},"request":{"raw":"GET /7c5fe83dffa97250aaddd54178900ea7.png HTTP/1.1\r\nHost: images.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxfund.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: qiH70RnW4pbGHnTN4/GfOIKGKZU9eJkvCawicOxyPOnrC7uWEqO/uPq9zDO+pFgzeN2ng56/vIgkZl1AbnWawQ==\r\nx-amz-request-id: HKF9K7JJ44SETG5X\r\nlast-modified: Tue, 25 Jun 2024 22:20:44 GMT\r\netag: \"7c5fe83dffa97250aaddd54178900ea7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: SXFOtkrG.KDci.hY3eoScEWVBObgFt62\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 8743\r\nserver: AmazonS3\r\ncache-control: public, max-age=11083379\r\ndate: Thu, 05 Mar 2026 14:16:03 GMT\r\nakamai-request-bc: [a=2.22.55.92,b=433841523,c=g,n=NO__OSLO,o=20940]\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05}\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nrbx-cdn-provider: ak\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 138, 8-bit/color RGBA, non-interlaced","md5":"7c5fe83dffa97250aaddd54178900ea7","sha1":"9898365b2ab676aa6ea360f7b5c2b1e60f54915e","sha256":"9fe741c1385e35b0da5b3cf15aad81e7714fac5bfb4cf535b2e04613c0a2b059","sha512":"3617ab1bd027739b97d63b9f408985725685ece4b239fb8e805720037f727712c3f9076eaa60110203e31b538f75cf3e07efd1178152f8c8912a5c465dd5b3a0","ssdeep":"192:SVUh1vZr8FWM8Y4gtjqQloFjRqwwR0Px8Qc5/jiLC38v1sRSguSZpAup:EEoFWMH5jqUoFjR3JPOQcFj4o8v1scgB","tlshash":"af02ae5a84e9bc48934a9d6cd7a3927e8d6307c77275c2ab655c1b0b5d3fc434e60388","first_seen":"2024-07-12T00:57:36Z","last_seen":"2026-06-08T17:34:31.064515Z","times_seen":13514,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":182,"connect":1,"send":0,"wait":2,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"robloxfund.com/","fqdn":"robloxfund.com","domain":"robloxfund.com","tld":"com"},"ip":{"addr":"80.97.160.221","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T14:16:02.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.robloxfund.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 20 Jan 2026 07:44:03 GMT","end":"Mon, 20 Apr 2026 07:44:02 GMT"},"fingerprint":{"sha1":"D0:6C:AA:85:F8:CD:AB:FC:D6:BE:BC:EA:A5:51:37:C9:AE:96:3B:D0","sha256":"71:32:54:68:E4:44:1E:22:72:21:75:CF:A4:84:DD:D7:28:9D:A5:11:48:CE:32:FF:69:2F:1B:C1:DB:DA:96:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: robloxfund.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Thu, 05 Mar 2026 14:16:02 GMT\r\nContent-Type: text/html\r\nLast-Modified: Sun, 25 Jan 2026 08:11:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6975d028-23f2\"\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9202,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (564), with CRLF line terminators","md5":"0269cacedea0b5b8fcdae94f124360dc","sha1":"7c739a1cf03ff2e26b5294a49020b35b89458e8a","sha256":"01c0ff983c2a870e28a603063e9210bd42eb3d0edfbd3a5278c0144fe55e70f6","sha512":"c0257d6f62ac023962ba1f7725437de39b6e699d9b3c05c0540dd311b918d2872ff35dd62c17562e2ca5e79adb2b6d790596dbae776eb485c1e0b5394f0066dd","ssdeep":"192:kmTZT007s8Tfh+5X9Yy88rPOSTd1o+N6HbOz:vizN67Oz","tlshash":"2b12a3662880610d023303669fe7a25dfbb7904b934225ed7bdc13ca4fb5398d1a7bd9","first_seen":"2026-03-05T14:16:26.358282Z","last_seen":"2026-03-05T14:38:15.735316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":172,"dns":57,"connect":55,"send":0,"wait":56,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"robloxfund.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Source+Sans+Pro:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://robloxfund.com/","date":"2026-03-05T14:16:03.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Source+Sans+Pro:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxfund.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 05 Mar 2026 14:16:03 GMT\r\ndate: Thu, 05 Mar 2026 14:16:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7763,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2eb6c398f69a541e2815c2f8e80f6984","sha1":"45f69a8257eea0a73b583d81880c9ba90562f2fe","sha256":"efd30199a540be2a8d93ad118a95901145c4868fa0d5e583b3b4d56dae60827d","sha512":"ac3a311f2a1fd70d9063bbc982bb7bfbb829ac953c464d0002acee31190645749b7ea23322a7e5fad862de4786c858b20c86a62f0f3991a7d028ae1c7cbf37e4","ssdeep":"192:Oq+cJ83LZXgrV05QU3tzGqGHbE9a3u2oZq:xW0MG1N","tlshash":"b3f1aff2411ae404dba31cc633de3f6aad4e50217155c1badffd5858acaac2a4364f1d","first_seen":"2025-09-11T23:38:45.671651Z","last_seen":"2026-06-08T17:30:25.309425Z","times_seen":1930,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":126,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/thumb/c/c7/Robux_2019_Logo_gold.svg/500px-Robux_2019_Logo_gold.svg.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://robloxfund.com/","date":"2026-03-05T14:16:03.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/thumb/c/c7/Robux_2019_Logo_gold.svg/500px-Robux_2019_Logo_gold.svg.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://robloxfund.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-disposition: inline;filename*=UTF-8''Robux_2019_Logo_gold.svg.png\r\netag: 583058dbcceca7860fe97f5b170e762f\r\nlast-modified: Tue, 05 Jul 2022 21:12:48 GMT\r\ncontent-length: 25164\r\ndate: Wed, 04 Mar 2026 15:23:43 GMT\r\nserver: envoy\r\nage: 82341\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/6\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=is7bhR7NQTCWKqQGKeF7CwMaAAAAAFvdeXsvwDwJA3ob1THj0MahqUjHab-iBmD4;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Fri, 05 Mar 2027 00:00:00 GMT\r\nx-request-id: cbe8759c-0155-42b4-aaea-586e3c08bc86\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":25164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 542, 8-bit/color RGBA, non-interlaced","md5":"583058dbcceca7860fe97f5b170e762f","sha1":"6401b29eda0fcfdda1cd93e70ab710e7760fffca","sha256":"353372e9921301c7f4bf56ed7e1cff199544d02ffa6bff5ff5a6380ef71008c7","sha512":"bffc189ce7269916a56d553bf892e13c277658025eb35406b198f18cd31580b49d6a8773ee3f287b290e2f0973432811e314da7b4344cbcaf3ecdcdae708b40d","ssdeep":"384:KRttpmFRVrm2C35mFyZf4AE3gFL4VOrbMld3BCp7rQvXf7PCp+Gjhad:GfeVs3IuAZXwrbMLBq3iXfMPjI","tlshash":"f2b2d0e2ee32d7a09ae636180691e44e573c081dd74bcaeec759de20ec0788d506b85c","first_seen":"2026-03-05T14:16:26.362426Z","last_seen":"2026-03-05T14:38:15.732067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":130,"dns":69,"connect":24,"send":0,"wait":48,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxfund.com/","date":"2026-03-05T14:16:03.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxfund.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14868\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 23:47:45 GMT\r\nexpires: Thu, 04 Mar 2027 23:47:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:45 GMT\r\ncontent-type: font/woff2\r\nage: 52098\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14868,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14868, version 1.0","md5":"a870ee3703f35f3b772e1ea3aff0abea","sha1":"2f73bac27e4fca1630d90813a858d7b815faf5c2","sha256":"691491f1fc8badab623e1be56f92cc2d98c462b16617c67e1e288d6b061444bc","sha512":"eb7e106769da2737a2d128f7b5ffeb145c03ecb3e0d120ea8e48f66b54ccc92b3657c9ba44385b355643e344329318c3d4eddde64b060ef580b419ac09d48add","ssdeep":"384:mVyQfY5SLPyg3mKvJU/rtyXWtnpeb0qY9X3cCI1Ll62yQ:2YS7fWKvJ2tyqM0PXINl62yQ","tlshash":"7562e0e9d92843e74d2019387b4b78df360adbed631a4878e995c49b6014af79122c1e","first_seen":"2025-09-11T17:07:37.667838Z","last_seen":"2026-06-08T19:37:52.724764Z","times_seen":58883,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":147,"dns":0,"connect":21,"send":0,"wait":22,"receive":6,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://robloxfund.com/","date":"2026-03-05T14:16:03.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/sourcesanspro/v23/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://robloxfund.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14724\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Mar 2026 19:59:32 GMT\r\nexpires: Wed, 03 Mar 2027 19:59:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152191\r\nlast-modified: Wed, 10 Sep 2025 16:43:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14724, version 1.0","md5":"b8be966e335e865e3c73faa8cce0ed35","sha1":"d0cd995e87f5bfb0206759b83e5ef25676d0edd8","sha256":"06b675a649489d21b7fd33f19b1c6d37e8bd778ded07ecfec26bbc8f11e694f4","sha512":"2257e0a09a86666b280d44ae551a33d17a6072043a2c38f0bb905847b66217809870c8cd6ab3a6ebce3e04b2ff79bedd11f1b18c7d65c231f8c9f21ed8a26e5e","ssdeep":"384:wK2JDEZSzIQA8yHGXMXvQDxyrGCQYamlyFlGWD:zrB8y0zKmYasKh","tlshash":"f962c0d2c64154daea05b9b35f612538bc99bf462054fd0796cbe41df7230a8fe382e2","first_seen":"2025-09-11T17:07:37.682239Z","last_seen":"2026-06-08T19:51:45.304829Z","times_seen":42229,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":25,"receive":4,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}