WEBSITE ANALYSIS REPORT

https://www.r.oblox.com.et/users/9598248105/profile

17 Oct 2026 · 21:45:04.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Domain graph details

Hostnames

apis.roblox.com2 captured requests
css.rbxcdn.com37 captured requests
ecsv2.roblox.com20 captured requests
images.rbxcdn.com7 captured requests
js.rbxcdn.com120 captured requests
lms.roblox.com1 captured requests
metrics.r.oblox.com.et1 captured requests
premiumfeatures.roblox.com1 captured requests
roblox.com2 captured requests
static.rbxcdn.com2 captured requests
tr.rbxcdn.com9 captured requests
trades.roblox.com1 captured requests
www.r.oblox.com.et57 captured requests
www.roblox.com10 captured requests

Connections

www.r.oblox.com.et → apis.roblox.comCalls1 captured connections
www.r.oblox.com.et → apis.roblox.comLoads from1 captured connections
www.r.oblox.com.et → css.rbxcdn.comLoads from37 captured connections
www.r.oblox.com.et → ecsv2.roblox.comLoads from20 captured connections
www.r.oblox.com.et → images.rbxcdn.comLoads from7 captured connections
www.r.oblox.com.et → js.rbxcdn.comLoads from120 captured connections
www.r.oblox.com.et → lms.roblox.comCalls1 captured connections
www.r.oblox.com.et → metrics.r.oblox.com.etCalls1 captured connections
www.r.oblox.com.et → premiumfeatures.roblox.comCalls1 captured connections
www.r.oblox.com.et → roblox.comLoads from2 captured connections
www.r.oblox.com.et → static.rbxcdn.comLoads from2 captured connections
www.r.oblox.com.et → tr.rbxcdn.comLoads from9 captured connections
www.r.oblox.com.et → trades.roblox.comCalls1 captured connections
www.r.oblox.com.et → www.roblox.comCalls10 captured connections
www.r.oblox.com.et → www.roblox.comRedirects to10 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:44:02.343 GET 200 document 94.8 KB 243 ms 4 alerts

21:44:02.971 GET 200 stylesheet 120.0 KB 50 ms —

21:44:02.973 GET 200 stylesheet 914.5 KB 243 ms —

21:44:02.976 GET 200 stylesheet 21.2 KB 231 ms —

21:44:02.978 GET 200 stylesheet 2.2 KB 31 ms —

21:44:02.979 GET 200 stylesheet 249 B 31 ms —

21:44:02.981 GET 200 stylesheet 2.5 KB 30 ms —

21:44:02.982 GET 200 stylesheet 43.4 KB 6 ms —

21:44:02.984 GET 200 stylesheet 10.1 KB 5 ms —

21:44:02.985 GET 200 stylesheet 475 B 5 ms —

21:44:02.987 GET 200 stylesheet 12.8 KB 20 ms —

21:44:02.989 GET 200 stylesheet 288 B 5 ms —

21:44:02.990 GET 200 stylesheet 275.8 KB 20 ms —

21:44:02.992 GET 200 stylesheet 130.4 KB 21 ms —

21:44:02.993 GET 200 stylesheet 2.4 KB 7 ms —

21:44:02.995 GET 200 stylesheet 6.1 KB 7 ms —

21:44:02.997 GET 200 stylesheet 12.3 KB 21 ms —

21:44:02.998 GET 200 stylesheet 37.5 KB 230 ms —

21:44:03.000 GET 200 stylesheet 6.7 KB 7 ms —

21:44:03.002 GET 200 stylesheet 3.7 KB 6 ms —

21:44:03.004 GET 200 stylesheet 6.9 KB 6 ms —

21:44:03.005 GET 200 stylesheet 5.9 KB 27 ms —

21:44:03.007 GET 200 stylesheet 4.2 KB 27 ms —

21:44:03.008 GET 200 stylesheet 1.4 KB 25 ms —

21:44:03.010 GET 200 stylesheet 9.3 KB 25 ms —

21:44:03.011 GET 200 stylesheet 739 B 24 ms —

21:44:03.013 GET 200 stylesheet 3.5 KB 23 ms —

21:44:03.014 GET 200 stylesheet 254 B 22 ms —

21:44:03.015 GET 200 stylesheet 29.7 KB 21 ms —

21:44:03.016 GET 200 stylesheet 31.2 KB 20 ms —

21:44:03.017 GET 200 stylesheet 1.4 KB 18 ms —

21:44:03.020 GET 200 stylesheet 2.2 KB 16 ms —

21:44:03.021 GET 200 stylesheet 5.7 KB 15 ms —

21:44:03.022 GET 200 stylesheet 784 B 14 ms —

21:44:03.024 GET 200 stylesheet 3.3 KB 13 ms —

21:44:03.025 GET 200 stylesheet 85 B 11 ms —

21:44:03.026 GET 200 script 11.2 KB 54 ms 4 alerts

Transaction #169

Request / response

URL

GET HTTPS

https://www.r.oblox.com.et/js/EnvironmentUrls.js

IP / ASN

202.170.75.201

Unknown

Mongolia

Requested by: https://www.r.oblox.com.et/users/9598248105/profile

Resource information

File type: JavaScript source, ASCII text, with very long lines (4345), with CRLF line terminators
MIME type: text/javascript
First seen (UTC): 13 Sep 2026 · 20:07:50.020 UTC
Last seen (UTC): 18 Oct 2026 · 00:07:18.044 UTC
Times seen: 854

Size: 11.2 KB (11508 bytes)
MD5: 28b08ec44301cab8ef4b4db6bbd33c66
SHA1: 086afb6fa1b7d26db149cf86f39d56b4a3e04fc0
SHA256: ae24e5faaa825dfe2e5ae39be3084d3a7fe1eb24ab35ddb7cb682e5b31430c1b

Certificate information

Issuer: Let's Encrypt · YE2
Subject: www.r.oblox.com.et
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AF:C7:BE:DE:78:62:7A:71:F1:AB:1A:42:DC:8E:CE:49:5F:AF:6B:E9
Valid from: Fri, 21 Aug 2026 02:31:05 GMT
Valid until: Thu, 19 Nov 2026 02:31:04 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)
Plesk (Hosting panels)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /js/EnvironmentUrls.js HTTP/1.1
Host: www.r.oblox.com.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.r.oblox.com.et/users/9598248105/profile
Cookie: A2L0g1nC3ssto=1792273442
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sat, 17 Oct 2026 21:44:03 GMT
content-type: text/javascript
last-modified: Sun, 13 Sep 2026 15:02:59 GMT
etag: W/"6aa6bb23-2cf4"
alt-svc: h3=":443"; ma=86400
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

21:44:03.030 GET 200 script 137.9 KB 281 ms —

21:44:03.031 GET 200 script 209.2 KB 73 ms —

21:44:03.032 GET 200 script 4.5 KB 267 ms —

21:44:03.033 GET 200 script 6.4 KB 248 ms —

21:44:03.034 GET 200 script 103.5 KB 266 ms —

21:44:03.036 GET 200 script 6.1 KB 260 ms —

21:44:03.037 GET 200 script 0 B 0 ms —

21:44:03.038 GET 200 script 3.1 KB 8 ms —

21:44:03.041 GET 200 script 1.7 KB 19 ms —

21:44:03.042 GET 200 script 244.9 KB 18 ms —

21:44:03.043 GET 200 script 23.5 KB 8 ms —

21:44:03.045 GET 200 script 5.5 KB 8 ms —

21:44:03.046 GET 200 script 151.6 KB 20 ms —

https://www.r.oblox.com.et/users/9598248105/profile

Domain graph

Hostnames

Connections

Network requests

Transaction #169

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://www.r.oblox.com.et/users/9598248105/profile

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #169

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://www.r.oblox.com.et/users/9598248105/profile

Domain graph

Network requests