{"report_id":"e27908f9-2c8f-4ba8-823d-befebf8e7646","version":6,"status":"done","tags":[],"date":"2026-01-25T02:16:13Z","url":{"schema":"https","addr":"rbxclaim.net/","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"rbxclaim.net/","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"title":"Roblox Event Info","dom":{"size":5739,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"17f11157ea4303b0fbfa2fe39e24fdc4","sha1":"be79446cd54789b2f6047e74843f4ebf81fc4fdc","sha256":"0cc9552c63c386e79dcde718a70b0a57c03f3c7e5138c5713dea5602b69a3c56","sha512":"6718103a9fbbb15ab7e9837cc2f1c15f7cbbc6ae40de052443f8868674df183ea8ddb2013b600be825ead8ad0a594dcfbf2f306a6637e3fe3ea0ec9f9ae93bfe","ssdeep":"96:nC5+jxUtduKr/4P3Myt649159P8IacI5P9I5PRI5PhiRuRnAGIMj:/jxUtduKr/4PR91cIDI5lI5JI5oRuRnx","tlshash":"e7c1b57622f3043729db60e356ab535e2d604003eb43c5c8b7bc87a44f98e86d6a75dc","dom_hash":"domhash8fd4f1ce58c2829aaca089479e85f645","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rbxclaim.net/","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-01T02:16:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rbxclaim.net","ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2025-12-26","domain_rank":0,"first_seen":"2026-01-08T08:58:00.106626Z","last_seen":"2026-01-24T20:05:29.530667Z","alert_count":10,"request_count":5,"received_data":93189,"sent_data":2215,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}]},{"fqdn":"www.roblox.com","ip":{"addr":"128.116.21.3","port":443,"asn":22697,"as":"ROBLOX-PRODUCTION","country":"The Netherlands","country_code":"NL"},"domain_registered":"2004-01-30","domain_rank":1776,"first_seen":"2012-05-24T19:56:53Z","last_seen":"2026-01-21T23:33:38.16886Z","alert_count":0,"request_count":2,"received_data":6338,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rbxclaim.net/","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"introduction_type":"eventHandler","is_inline":false,"md5":"ca47538621e85e9f977b5723181cbbc1","sha1":"5d4b2a75fb973d3d0c41c5f450704167f6d0b352","sha256":"a7041db96c57dc29bb94b6d0980a2cee7ef744b3f842bb020c57a39ac05d67bf","sha512":"3e557940e46be32dc3cbf7bef5329367fe5ae09154979576146e83d2cbb6fe023727976b989d24f27afdcacef317875bb349a6384c110cc4bee2d561aaa1a345","ssdeep":"","tlshash":"2f700082280a82080288802000a00b22202a200c0ac0a20c8c2000a0820a8a820300b0","size":25,"data":"","first_seen":"2023-04-11T08:24:11Z","last_seen":"2026-06-08T10:05:38.269663Z","times_seen":1956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxclaim.net/","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"f258294d8c06e4d9dd05e38831ec0e27","sha1":"2f927dec245f57626849e2377cf52113caa73150","sha256":"b10d914ff552699de864b7a8a33f2d3d2b65f64fddcd65cc370e58a0e73c15dc","sha512":"f71e1b84911394f9054e98c760b4b1e6c02ef53f58957738f147984560de452536f278c54ecff4dae39266ea57b8e38587a17e361596c22b4b0ae86e16aef1e5","ssdeep":"","tlshash":"c051407b33b32861a98f30b7576753a8602491036943c5c87b6c87504f28b89d2bf7ce","size":2954,"data":"","first_seen":"2026-01-24T20:05:29.932889Z","last_seen":"2026-01-25T02:16:14.695007Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rbxclaim.net/","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T02:15:52.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rbxclaim.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:2A:80:40:5E:55:92:BB:86:0A:3B:47:5B:E0:89:B1:D9:A9:EE:17","sha256":"74:12:2F:49:F4:A4:92:16:9B:AD:A8:FE:C1:DC:65:06:4E:17:23:09:F5:FD:FD:DC:D7:63:79:07:B9:32:EA:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rbxclaim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 02:15:52 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 12 Jan 2026 19:42:07 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":5734,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"49a8cd187690a06933984937af4d8e7f","sha1":"466dda3bd62ea3a3bea956b93a05ba7a5f9b7842","sha256":"564890f857e5467d8cbb877126cb87680be31556dfd7a1c14bfbfe6e36cd04bf","sha512":"30d83c27bb6355eea5b99238918dfde6c17ddf07278cc53e9aff2e5b14f2dcaec2bbefbe5e264f7b65fee3b630b9dca09947a1e30fa4ab3484fa58f3bfad2243","ssdeep":"96:uo9jW3S3YW8QPgaRu+/8OfI9cI5PAI5P4I5PC9bAgA:1jW3S3YW8QPQ+xI6I5oI5QI5GbAgA","tlshash":"67c1823a21e2182759bb90f79a67579dfe644103ab034288b3fd93ab0f74d40c567adc","first_seen":"2026-01-24T20:05:29.923958Z","last_seen":"2026-01-25T02:16:14.690862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":423,"dns":75,"connect":59,"send":0,"wait":76,"receive":0,"ssl":290},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxclaim.net/styles.css","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbxclaim.net/","date":"2026-01-25T02:15:52.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rbxclaim.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:2A:80:40:5E:55:92:BB:86:0A:3B:47:5B:E0:89:B1:D9:A9:EE:17","sha256":"74:12:2F:49:F4:A4:92:16:9B:AD:A8:FE:C1:DC:65:06:4E:17:23:09:F5:FD:FD:DC:D7:63:79:07:B9:32:EA:39"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: rbxclaim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxclaim.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 02:15:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 08 Jan 2026 03:28:47 GMT\r\nexpires: Tue, 24 Feb 2026 02:15:52 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":4533,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"694c36fe6167a093b9a783b5580680ad","sha1":"b76fb95caf4353f105db9786a30b43788a5ed019","sha256":"ad577967c079dfc1d784de62c5d9086639b8f12eea3707326600bf06c7715180","sha512":"42a81aed1f8cbf79b2b7d5184b12a0aca3cc47b23de3f2033db61bbb7e26e46b7e4a95f6ee170836eda45010ec09c8e76e8b3338a0bf18e83e3a99cc2a62f31e","ssdeep":"96:roGnOtph6UDLwYjqaMuWEX5oUMzK0a8yTf9KXKO3:roGncph6UDLLjqaMuWaMzK0a8yTf9cKk","tlshash":"4a91741521252104b377e7a0fffbcb4ad26c8593e60386be39d51085cbce2b84279b9c","first_seen":"2026-01-08T08:58:04.196514Z","last_seen":"2026-03-01T04:22:15.766544Z","times_seen":4,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxclaim.net/images/logo.png","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxclaim.net/","date":"2026-01-25T02:15:52.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rbxclaim.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:2A:80:40:5E:55:92:BB:86:0A:3B:47:5B:E0:89:B1:D9:A9:EE:17","sha256":"74:12:2F:49:F4:A4:92:16:9B:AD:A8:FE:C1:DC:65:06:4E:17:23:09:F5:FD:FD:DC:D7:63:79:07:B9:32:EA:39"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: rbxclaim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxclaim.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 02:15:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 40365\r\nlast-modified: Thu, 08 Jan 2026 03:26:38 GMT\r\nexpires: Thu, 26 Mar 2026 02:15:52 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":40365,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 647 x 647, 8-bit/color RGBA, non-interlaced","md5":"8561922f719f0dcc072b2b43165fcb8b","sha1":"8cd564d60387cf23fc67c0e058d9088a310ce698","sha256":"ec5bcd8c2addcccbefbf09a6354b7c655be5f5cd65478cca1070c4ac7413d037","sha512":"a3e11786e0f3bbf0777c44fbb8c8050a047e3112945ef5169a35af9ab688f976e54fa4aa94f515d1f23f11f1dd39405dbb904108e0840b88584337915abc6b80","ssdeep":"768:1Pb1G+O6ncGOk47C6t8MvohZVLOoLlQgo5iTNEW/+PjupzSWB0:1nncGOrC6t8MvoPxLii/ojupa","tlshash":"4b03f21706847479d32f08ab9da188af9273083436edc49fcea4e4889c7505d6f57f97","first_seen":"2025-10-26T13:49:36.69356Z","last_seen":"2026-03-01T04:22:15.767805Z","times_seen":12,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxclaim.net/images/background.png","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxclaim.net/","date":"2026-01-25T02:15:52.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rbxclaim.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:2A:80:40:5E:55:92:BB:86:0A:3B:47:5B:E0:89:B1:D9:A9:EE:17","sha256":"74:12:2F:49:F4:A4:92:16:9B:AD:A8:FE:C1:DC:65:06:4E:17:23:09:F5:FD:FD:DC:D7:63:79:07:B9:32:EA:39"}}},"request":{"raw":"GET /images/background.png HTTP/1.1\r\nHost: rbxclaim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxclaim.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 02:15:52 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-08T11:44:51.543966Z","times_seen":39269,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxclaim.net/images/logo.png","fqdn":"rbxclaim.net","domain":"rbxclaim.net","tld":"net"},"ip":{"addr":"195.20.18.201","port":443,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxclaim.net/","date":"2026-01-25T02:15:53.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rbxclaim.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 26 Dec 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F4:2A:80:40:5E:55:92:BB:86:0A:3B:47:5B:E0:89:B1:D9:A9:EE:17","sha256":"74:12:2F:49:F4:A4:92:16:9B:AD:A8:FE:C1:DC:65:06:4E:17:23:09:F5:FD:FD:DC:D7:63:79:07:B9:32:EA:39"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: rbxclaim.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxclaim.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 02:15:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 40365\r\nlast-modified: Thu, 08 Jan 2026 03:26:38 GMT\r\nexpires: Thu, 26 Mar 2026 02:15:53 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: HIT\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40365,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 647 x 647, 8-bit/color RGBA, non-interlaced","md5":"8561922f719f0dcc072b2b43165fcb8b","sha1":"8cd564d60387cf23fc67c0e058d9088a310ce698","sha256":"ec5bcd8c2addcccbefbf09a6354b7c655be5f5cd65478cca1070c4ac7413d037","sha512":"a3e11786e0f3bbf0777c44fbb8c8050a047e3112945ef5169a35af9ab688f976e54fa4aa94f515d1f23f11f1dd39405dbb904108e0840b88584337915abc6b80","ssdeep":"768:1Pb1G+O6ncGOk47C6t8MvohZVLOoLlQgo5iTNEW/+PjupzSWB0:1nncGOrC6t8MvoPxLii/ojupa","tlshash":"4b03f21706847479d32f08ab9da188af9273083436edc49fcea4e4889c7505d6f57f97","first_seen":"2025-10-26T13:49:36.69356Z","last_seen":"2026-03-01T04:22:15.767805Z","times_seen":12,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"rbxclaim.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.roblox.com/headshot-thumbnail/image?userId=28165741\u0026width=150\u0026height=150\u0026format=png","fqdn":"www.roblox.com","domain":"roblox.com","tld":"com"},"ip":{"addr":"128.116.21.3","port":443,"asn":22697,"as":"ROBLOX-PRODUCTION","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxclaim.net/","date":"2026-01-25T02:15:55.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox.com","organization":"Roblox Corporation"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 19 May 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:96:65:C2:85:B7:CD:C0:13:44:BA:7C:2D:C2:14:52:B3:26:3C:79","sha256":"7D:88:9E:E5:EF:CA:B7:BA:E6:EA:D2:95:1B:9A:BB:20:34:9A:59:28:AA:85:BA:D2:5A:A9:2F:AC:A6:6D:49:76"}}},"request":{"raw":"GET /headshot-thumbnail/image?userId=28165741\u0026width=150\u0026height=150\u0026format=png HTTP/1.1\r\nHost: www.roblox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxclaim.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 02:15:55 GMT\r\nserver: website\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\nset-cookie: rbx-ip2=1; domain=roblox.com; expires=Sun, 25-Jan-2026 03:15:56 GMT; path=/\nRBXEventTrackerV2=CreateDate=01/24/2026 20:15:56\u0026rbxid=\u0026browserid=1769307356420006; domain=roblox.com; expires=Thu, 12-Jun-2053 02:15:56 GMT; path=/\nGuestData=UserID=-1636973040; domain=.roblox.com; expires=Thu, 12-Jun-2053 02:15:56 GMT; path=/\r\nvary: Accept-Encoding\r\ncontent-security-policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests;  script-src 'self' 'unsafe-inline' apis.roblox.com roblox.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com js.stripe.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com arkoselabs.roblox.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com client-api.arkoselabs.com api.arkoselabs.com *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com cdn.safecharge.com;  img-src 'self' data: *.cloudfront.net *.gilcdn.com *.gldcdn.com *.google-analytics.com *.google.com *.kaptcha.com *.rblx.org *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat *.stripe.com *.tarobicdn.com *.tarobidevsandboxcdn.com www.facebook.com *.snapchat.com *.safecharge.com;  connect-src 'self' *.roblox.com *.robloxlabs.com *.rblx.org *.rbx.com *.rbxcdn.com *.roblox.cn *.simulpong.com *.lightstep.com *.ns1p.net *.arkoselabs.com *.kaptcha.com *.google.com *.google-analytics.com *.doubleclick.net *.sentry.io wss://realtime.roblox.com wss://realtime.sitetest1.robloxlabs.com wss://realtime.sitetest2.robloxlabs.com wss://realtime.sitetest3.robloxlabs.com wss://realtime-signalr.roblox.com *.braintree-api.com *.braintreegateway.com d1q2u37vreaobr.cloudfront.net funcaptcha.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com *.safecharge.com;\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nroblox-machine-id: 06982292-b6a1-c936-5597-648a0da2b211\r\nx-roblox-region: us-central_rbx\r\nx-roblox-edge: c074\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":789,"timings":{"blocked":222,"dns":180,"connect":17,"send":0,"wait":343,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.roblox.com/headshot-thumbnail/image?userId=102929\u0026width=150\u0026height=150\u0026format=png","fqdn":"www.roblox.com","domain":"roblox.com","tld":"com"},"ip":{"addr":"128.116.21.3","port":443,"asn":22697,"as":"ROBLOX-PRODUCTION","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxclaim.net/","date":"2026-01-25T02:16:07.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblox.com","organization":"Roblox Corporation"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 19 May 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:96:65:C2:85:B7:CD:C0:13:44:BA:7C:2D:C2:14:52:B3:26:3C:79","sha256":"7D:88:9E:E5:EF:CA:B7:BA:E6:EA:D2:95:1B:9A:BB:20:34:9A:59:28:AA:85:BA:D2:5A:A9:2F:AC:A6:6D:49:76"}}},"request":{"raw":"GET /headshot-thumbnail/image?userId=102929\u0026width=150\u0026height=150\u0026format=png HTTP/1.1\r\nHost: www.roblox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rbxclaim.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 25 Jan 2026 02:16:07 GMT\r\nserver: website\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\nset-cookie: rbx-ip2=1; domain=roblox.com; expires=Sun, 25-Jan-2026 03:16:08 GMT; path=/\nRBXEventTrackerV2=CreateDate=01/24/2026 20:16:08\u0026rbxid=\u0026browserid=1769307368010001; domain=roblox.com; expires=Thu, 12-Jun-2053 02:16:08 GMT; path=/\nGuestData=UserID=-1484945822; domain=.roblox.com; expires=Thu, 12-Jun-2053 02:16:08 GMT; path=/\r\nvary: Accept-Encoding\r\ncontent-security-policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests;  script-src 'self' 'unsafe-inline' apis.roblox.com roblox.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com js.stripe.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com arkoselabs.roblox.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com client-api.arkoselabs.com api.arkoselabs.com *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com cdn.safecharge.com;  img-src 'self' data: *.cloudfront.net *.gilcdn.com *.gldcdn.com *.google-analytics.com *.google.com *.kaptcha.com *.rblx.org *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat *.stripe.com *.tarobicdn.com *.tarobidevsandboxcdn.com www.facebook.com *.snapchat.com *.safecharge.com;  connect-src 'self' *.roblox.com *.robloxlabs.com *.rblx.org *.rbx.com *.rbxcdn.com *.roblox.cn *.simulpong.com *.lightstep.com *.ns1p.net *.arkoselabs.com *.kaptcha.com *.google.com *.google-analytics.com *.doubleclick.net *.sentry.io wss://realtime.roblox.com wss://realtime.sitetest1.robloxlabs.com wss://realtime.sitetest2.robloxlabs.com wss://realtime.sitetest3.robloxlabs.com wss://realtime-signalr.roblox.com *.braintree-api.com *.braintreegateway.com d1q2u37vreaobr.cloudfront.net funcaptcha.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com *.safecharge.com;\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\nroblox-machine-id: 4e7cf6a2-a4c7-1131-544f-3ee63d1be7ec\r\nx-roblox-region: us-central_rbx\r\nx-roblox-edge: c074\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0.001,\"failure_fraction\":1}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}