Edit tour

Windows Analysis Report
https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445

Overview

General Information

Sample URL:	https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445
Analysis ID:	1487403
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Detected suspicious crossdomain redirect

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4836 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 --field-trial-handle=2524,i,9665644583023720894,4055252206932768731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /product-experimentation-platform/v1/projects/1/values HTTP/1.1Host: roblox.com.zmConnection: keep-aliveContent-Length: 41sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: application/json;charset=UTF-8x-csrf-token: 0gVG6whlUopWsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://roblox.com.zmSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724; _gcl_au=1.1.1901646407.1722724893

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/html; charset=utf-8date: Sat, 03 Aug 2024 22:41:56 GMTserver: websitecache-control: no-store, must-revalidate, no-cacheset-cookie: RBXEventTrackerV2=CreateDate=08/03/2024 17:41:57&rbxid=&browserid=1722724917183013; domain=roblox.com; expires=Wed, 20-Dec-2051 22:41:57 GMT; path=/set-cookie: GuestData=UserID=-797563151; domain=.roblox.com; expires=Wed, 20-Dec-2051 22:41:57 GMT; path=/transfer-encoding: chunkedcontent-security-policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' roblox.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com js.stripe.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com client-api.arkoselabs.com api.arkoselabs.com *.sierra.chat sierra.chat; img-src 'self' data: *.cloudfront.net *.gilcdn.com *.gldcdn.com *.google-analytics.com *.google.com *.kaptcha.com *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat *.stripe.com *.tarobicdn.com *.tarobidevsandboxcdn.com; connect-src 'self' *.roblox.com *.robloxlabs.com *.rblx.org *.rbx.com *.rbxcdn.com *.roblox.cn *.simulpong.com *.lightstep.com *.ns1p.net *.arkoselabs.com *.kaptcha.com *.google.com *.google-analytics.com *.doubleclick.net *.sentry.io wss://realtime.roblox.com wss://realtime.sitetest1.robloxlabs.com wss://realtime.sitetest2.robloxlabs.com wss://realtime.sitetest3.robloxlabs.com wss://realtime-signalr.roblox.com *.braintree-api.com *.braintreegateway.com d1q2u37vreaobr.cloudfront.net funcaptcha.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat;cross-origin-opener-policy: same-origin-allow-popupsx-frame-options: SAMEORIGINstrict-transport-security: max-age=3600roblox-machine-id: b92e378a-0d41-0513-d05b-8a8ff54b121ex-roblox-region: us-central_rbxalt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=259200x-roblox-edge: fra4report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}connection: close

Source: https://roblox.com.zm/privateJs/GameLaunch.js	Avira URL Cloud: Label: malware
Source: https://roblox.com.zm/v1/games/multiget-playability-status?universeIds=3808081382	Avira URL Cloud: Label: malware
Source: https://roblox.com.zm/v1/thumbnails/metadata	Avira URL Cloud: Label: malware
Source: https://roblox.com.zm/v1/performance/measurements	Avira URL Cloud: Label: malware
Source: https://roblox.com.zm/recipe?iteration=0	Avira URL Cloud: Label: malware

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50297 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50376 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50564 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:50827 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_1117.2.dr	String found in binary or memory: <script type="application/ld+json"> { "@context" : "http://schema.org", "@type" : "Organization", "name" : "Roblox", "url" : "https://www.roblox.com/", "logo": "https://images.rbxcdn.com/cece570e37aa8f95a450ab0484a18d91", "sameAs" : [ "https://www.facebook.com/roblox/", "https://twitter.com/roblox", "https://www.linkedin.com/company/147977", "https://www.instagram.com/roblox/", "https://www.youtube.com/user/roblox", "https://plus.google.com/+roblox", "https://www.twitch.tv/roblox" ] } </script> equals www.facebook.com (Facebook)
Source: chromecache_1117.2.dr	String found in binary or memory: <script type="application/ld+json"> { "@context" : "http://schema.org", "@type" : "Organization", "name" : "Roblox", "url" : "https://www.roblox.com/", "logo": "https://images.rbxcdn.com/cece570e37aa8f95a450ab0484a18d91", "sameAs" : [ "https://www.facebook.com/roblox/", "https://twitter.com/roblox", "https://www.linkedin.com/company/147977", "https://www.instagram.com/roblox/", "https://www.youtube.com/user/roblox", "https://plus.google.com/+roblox", "https://www.twitch.tv/roblox" ] } </script> equals www.linkedin.com (Linkedin)
Source: chromecache_1117.2.dr	String found in binary or memory: <script type="application/ld+json"> { "@context" : "http://schema.org", "@type" : "Organization", "name" : "Roblox", "url" : "https://www.roblox.com/", "logo": "https://images.rbxcdn.com/cece570e37aa8f95a450ab0484a18d91", "sameAs" : [ "https://www.facebook.com/roblox/", "https://twitter.com/roblox", "https://www.linkedin.com/company/147977", "https://www.instagram.com/roblox/", "https://www.youtube.com/user/roblox", "https://plus.google.com/+roblox", "https://www.twitch.tv/roblox" ] } </script> equals www.twitter.com (Twitter)
Source: chromecache_1117.2.dr	String found in binary or memory: <script type="application/ld+json"> { "@context" : "http://schema.org", "@type" : "Organization", "name" : "Roblox", "url" : "https://www.roblox.com/", "logo": "https://images.rbxcdn.com/cece570e37aa8f95a450ab0484a18d91", "sameAs" : [ "https://www.facebook.com/roblox/", "https://twitter.com/roblox", "https://www.linkedin.com/company/147977", "https://www.instagram.com/roblox/", "https://www.youtube.com/user/roblox", "https://plus.google.com/+roblox", "https://www.twitch.tv/roblox" ] } </script> equals www.youtube.com (Youtube)
Source: chromecache_965.2.dr	String found in binary or memory: "https://www.facebook.com/roblox/", equals www.facebook.com (Facebook)
Source: chromecache_965.2.dr	String found in binary or memory: "https://www.linkedin.com/company/147977", equals www.linkedin.com (Linkedin)
Source: chromecache_965.2.dr	String found in binary or memory: "https://www.youtube.com/user/roblox", equals www.youtube.com (Youtube)
Source: chromecache_1129.2.dr, chromecache_1154.2.dr	String found in binary or memory: return b}mC.J="internal.enableAutoEventOnTimer";var lc=ja(["data-gtm-yt-inspected-"]),oC=["www.youtube.com","www.youtube-nocookie.com"],pC,qC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: roblox.com.zm
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: css.rbxcdn.com
Source: global traffic	DNS traffic detected: DNS query: static.rbxcdn.com
Source: global traffic	DNS traffic detected: DNS query: js.rbxcdn.com
Source: global traffic	DNS traffic detected: DNS query: images.rbxcdn.com
Source: global traffic	DNS traffic detected: DNS query: roblox.com
Source: global traffic	DNS traffic detected: DNS query: roblox-api.arkoselabs.com
Source: global traffic	DNS traffic detected: DNS query: ecsv2.roblox.com
Source: global traffic	DNS traffic detected: DNS query: ncs.roblox.com
Source: global traffic	DNS traffic detected: DNS query: tr.rbxcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.roblox.com
Source: global traffic	DNS traffic detected: DNS query: metrics.roblox.com
Source: global traffic	DNS traffic detected: DNS query: apis.roblox.com
Source: global traffic	DNS traffic detected: DNS query: lms.roblox.com
Source: global traffic	DNS traffic detected: DNS query: friends.roblox.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 --field-trial-handle=2524,i,9665644583023720894,4055252206932768731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 --field-trial-handle=2524,i,9665644583023720894,4055252206932768731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445	100%	Avira URL Cloud	malware
https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445	23%	Virustotal		Browse

Source	Detection	Scanner	Link
edge-term4-fra4.roblox.com	0%	Virustotal	Browse
edge-term4-lhr2.roblox.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
roblox.com.zm	22%	Virustotal	Browse
us-central-default-px.roblox.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
d2w650xp5tniea.cloudfront.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
www.roblox.com	0%	Virustotal	Browse
roblox.com	0%	Virustotal	Browse
friends.roblox.com	0%	Virustotal	Browse
ecsv2.roblox.com	0%	Virustotal	Browse
images.rbxcdn.com	0%	Virustotal	Browse
css.rbxcdn.com	0%	Virustotal	Browse
lms.roblox.com	0%	Virustotal	Browse
roblox-api.arkoselabs.com	0%	Virustotal	Browse
apis.roblox.com	0%	Virustotal	Browse
js.rbxcdn.com	0%	Virustotal	Browse
static.rbxcdn.com	0%	Virustotal	Browse
dapx4swc8lj69.cloudfront.net	0%	Virustotal	Browse
ncs.roblox.com	0%	Virustotal	Browse
metrics.roblox.com	0%	Virustotal	Browse
tr.rbxcdn.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect?	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe
https://www.roblox.com/pt/discover	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/109d883fe3988fca757e26e341ed0fe8.js	0%	Avira URL Cloud	safe
https://www.roblox.com/pt/discover	0%	Virustotal		Browse
https://js.rbxcdn.com/358e6ae5bebb0fa9326d0de99d3ee229ee63236bf44ed11b9ab1d314c7972e79.js	0%	Avira URL Cloud	safe
https://www.linkedin.com/company/147977	0%	Avira URL Cloud	safe
https://www.roblox.com/thumbnail/place	0%	Avira URL Cloud	safe
https://css.rbxcdn.com/9517d686dc47015c200496d77e2b18146ee37652d18e25ecf9e1ed230310ea13.css	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/109d883fe3988fca757e26e341ed0fe8.js	0%	Virustotal		Browse
https://roblox.com.zm/privateJs/GameLaunch.js	100%	Avira URL Cloud	malware
https://js.rbxcdn.com/358e6ae5bebb0fa9326d0de99d3ee229ee63236bf44ed11b9ab1d314c7972e79.js	0%	Virustotal		Browse
https://www.roblox.com/avatar-thumbnails	0%	Avira URL Cloud	safe
https://www.roblox.com/navigation/getCount	0%	Avira URL Cloud	safe
https://www.linkedin.com/company/147977	0%	Virustotal		Browse
https://premiumfeatures.roblox.com	0%	Avira URL Cloud	safe
https://www.roblox.com/thumbnail/place	0%	Virustotal		Browse
https://css.rbxcdn.com/9517d686dc47015c200496d77e2b18146ee37652d18e25ecf9e1ed230310ea13.css	0%	Virustotal		Browse
https://www.roblox.com/avatar-thumbnails	0%	Virustotal		Browse
https://js.rbxcdn.com/6df275f4290dbf3a38657783651fac4e.js	0%	Avira URL Cloud	safe
https://premiumfeatures.roblox.com	0%	Virustotal		Browse
https://ncs.roblox.com/upload	0%	Virustotal		Browse
https://js.rbxcdn.com/1e979a52d80126c2447674c17604baf65f73183fd44df1e6cd862feb441bdcc5.js	0%	Avira URL Cloud	safe
https://ncs.roblox.com/upload	0%	Avira URL Cloud	safe
https://www.roblox.com/place-thumbnails	0%	Avira URL Cloud	safe
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2Fbd18305af9e4ce41099df37e554eeb1bf2cc139ffba636e356666ccd9d07481c.js&cdnName=ak&statusCode=200&loadDuration=23178	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/1e979a52d80126c2447674c17604baf65f73183fd44df1e6cd862feb441bdcc5.js	0%	Virustotal		Browse
https://js.rbxcdn.com/5ea334fe4b4a36352ed0-navigation.bundle.min.js.map	0%	Avira URL Cloud	safe
https://ads.roblox.com	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/ad810f1ad64d9a8eb628-idVerification.bundle.min.js.map	0%	Avira URL Cloud	safe
https://github.com/gajus/sister/blob/master/LICENSE	0%	Avira URL Cloud	safe
https://images.rbxcdn.com/7bba321f4d8328683d6e59487ce514eb	0%	Avira URL Cloud	safe
https://css.rbxcdn.com/5ec10f696511a19ac709adc0b92273ca5bbabc1191e973b12539d89634bdc2cd.css	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/6df275f4290dbf3a38657783651fac4e.js	0%	Virustotal		Browse
about:blank	0%	Avira URL Cloud	safe
https://www.roblox.com/navigation/getCount	0%	Virustotal		Browse
https://assetgame.roblox.com/asset-thumbnail/url	0%	Avira URL Cloud	safe
https://roblox.com	0%	Avira URL Cloud	safe
https://roblox-api.arkoselabs.com/fc/api/?onload=reportFunCaptchaLoaded	0%	Avira URL Cloud	safe
https://economy.roblox.com	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/558cbed0ebd127bd21f1045302a44c69a092fc29acd3ed983ecd5bcb46ed2e84.js	0%	Avira URL Cloud	safe
https://contentstore.roblox.com	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://lms.roblox.com/recipe?iteration=0	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/f3527069ef87b95fe1c26d21d14075c6.js	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/b79589d3dfb2446936aac95605deaa507ce5bc3e09073bac7dd04872880694c2.js	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/7f87a48c2277d62a95d8de1bb042bad213bb8d1f0a84442a8002c6ef09370d33.js	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/a9238207bc9ad295084e9a24589d3ea66d8ec4dc1016ad59ba4fa48b3a2aed8a.js	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/2359bfdeb82ced7d627671a3f54e79df65c89aabeffafe46e360a627c8108d63.js	0%	Avira URL Cloud	safe
https://www.roblox.com/abusereport/asset?id=10449761463&RedirectUrl=%2fgames%2f10449761463%2fThe	0%	Avira URL Cloud	safe
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F846daf4727935bf2ce0c89ac0f21292485a9e326c1485ad9717a862220944abe.js&cdnName=ak&statusCode=200&loadDuration=24392	0%	Avira URL Cloud	safe
https://roblox.com.zm/v1/games/multiget-playability-status?universeIds=3808081382	100%	Avira URL Cloud	malware
https://midas.roblox.com	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/95044be3ff42e3dc429313faca1316cea62f328a39e29689ffeda9002f3a8bc6.js	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/955567fcee625c9235aea26b45e9b137de9ab1340f359f7b2890c0589415137c.js	0%	Avira URL Cloud	safe
https://roblox.com.zm/v1/thumbnails/metadata	100%	Avira URL Cloud	malware
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2Fc147f266d2415a0a5241902efea4c6e3e6907898faa9452177b7ce92ea003cfc.js&cdnName=ak&statusCode=200&loadDuration=7679	0%	Avira URL Cloud	safe
https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat1&url=https%3A%2F%2Froblox.com.zm%2Fdiscover&lt=2024-08-03T22%3A42%3A31.393Z	0%	Avira URL Cloud	safe
https://css.rbxcdn.com/68f976f4a3f8f3a6aae074879170e579451270e693d2361491b1c1bb9ac5e4c5.css	0%	Avira URL Cloud	safe
https://apis.roblox.com/bundles-product-purchasing	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/b41227fe1ecc1f4409f2e33f02d4d968f6d6389349d2221f481ff3b34e01a257.js	0%	Avira URL Cloud	safe
https://css.rbxcdn.com/b07e5af55eefa41c1f1e3fbb3caf113766f6f6bf35b088a0c087c2a760ce2ac0.css	0%	Avira URL Cloud	safe
https://roblox.com/js/hsts.js?v=3	0%	Avira URL Cloud	safe
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F077dd64734d3aa9a884874f85f2f514a239688c33a0fdf3f90365e0e7436ec3b.js&cdnName=ak&statusCode=200&loadDuration=8049	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/e9e933a580a17188724e-serverList.bundle.min.js.map	0%	Avira URL Cloud	safe
https://www.roblox.com/fr/discover	0%	Avira URL Cloud	safe
https://presence.roblox.com	0%	Avira URL Cloud	safe
https://images.rbxcdn.com/ca3888e4e17a9df7b25d5bfe2110c1c9-common_sm_light_12032018.svg	0%	Avira URL Cloud	safe
https://github.com/cssinjs/jss	0%	Avira URL Cloud	safe
https://roblox.com.zm/v1/performance/measurements	100%	Avira URL Cloud	malware
https://roblox.com/js/hsts.js?v=1	0%	Avira URL Cloud	safe
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F8f062951b7e1eac4601ec566fc09e69f437009b5785b9b468f4ba956ef742892.js&cdnName=ak&statusCode=200&loadDuration=23951	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/08a545ae1503441b55f5236794feccec.js	0%	Avira URL Cloud	safe
https://images.rbxcdn.com/f25e4cadae29ae9a57a962126b2d2e2a.png	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/329ba9314a5de7282e8a8035046e7a56faf772d3ffea8af619b3e8854df0fc41.js	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/57d1b7776de993a3bf8ace38e6efd8f8ce5b9a294362c029990f0cf131548531.js	0%	Avira URL Cloud	safe
https://captcha.roblox.com/v1/funcaptcha/login/web	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/1b1086c35c478c7f8f8719b34394b844caa7e7464e34b2fe071a1e0e847b7062.js	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/b943a7a0229dce195e7df6bff6523323ad8b2f049d3e6e9ca7f44190c8cf5bb4.js	0%	Avira URL Cloud	safe
https://images.rbxcdn.com/b7353602bbf9b927d572d5887f97d452.svg	0%	Avira URL Cloud	safe
https://images.rbxcdn.com/cece570e37aa8f95a450ab0484a18d91	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/6d034812b7a5e8d44b205a43951db75a-reactUtilities.bundle.min.js.map	0%	Avira URL Cloud	safe
https://www.roblox.com/notification-stream/notification-stream-data	0%	Avira URL Cloud	safe
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F5259cfe8a3e36118bd61120693dbba3ba87f2c3641f84bb07e29f1d69fe87523.js&cdnName=ak&statusCode=200&loadDuration=6466	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/a5d76f662cc98d13a65d323097497aa93948409caf12b33464400259111e8082.js	0%	Avira URL Cloud	safe
https://css.rbxcdn.com/bec62e96a756104b8904fe298055c659d462a293759ee99503dd85e952bd11f1.css	0%	Avira URL Cloud	safe
https://css.rbxcdn.com/08def520152a575438e73a81aa9a310c2415c327df7b624a24aa6e794d24dba3.css	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/c629f6739d6903fec0d935d26a9cea02ff757856d4ed73a83fd1535affea0300.js	0%	Avira URL Cloud	safe
https://captcha.roblox.com	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/12b534c015ec10b109e2b1a3ce5739f7-gameLaunch.bundle.min.js.map	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/7f2b0e1a95d977764e6a3e84faa444a0-headerScripts.bundle.min.js.map	0%	Avira URL Cloud	safe
https://assetgame.roblox.com/asset-thumbnail/json	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/71cb0b7eff86334bc8f7289ba6559f93d1e44a49cf56bb2dbdb3582ce11418a6.js	0%	Avira URL Cloud	safe
https://assetgame.roblox.com/asset-thumbnail/image	0%	Avira URL Cloud	safe
https://css.rbxcdn.com/9bfc48ea40a698035ea8cbe3d3e94bd06d3aac48969bedceb6d8ba5ff17ff84d.css	0%	Avira URL Cloud	safe
https://js.rbxcdn.com/fe2db8e661be348f8b4c2426699b0cc8-internationalAngularJs.bundle.min.js.map	0%	Avira URL Cloud	safe
https://www.roblox.com/thumbnail/user-avatar	0%	Avira URL Cloud	safe

IP	Domain	Country	ASN	ASN Name	Malicious
128.116.119.3	edge-term4-lhr2.roblox.com	United States	22697	ROBLOX-PRODUCTIONUS	false
128.116.44.4	unknown	United States	22697	ROBLOX-PRODUCTIONUS	false
128.116.44.3	edge-term4-fra4.roblox.com	United States	22697	ROBLOX-PRODUCTIONUS	false
13.32.110.41	unknown	United States	16509	AMAZON-02US	false
128.116.119.4	us-central-default-px.roblox.com	United States	22697	ROBLOX-PRODUCTIONUS	false
18.239.94.43	dapx4swc8lj69.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.245.60.3	d2w650xp5tniea.cloudfront.net	United States	16509	AMAZON-02US	false
154.213.191.64	roblox.com.zm	Seychelles	22769	DDOSING-BGP-NETWORKUS	false

IP
192.168.2.16
192.168.2.4
192.168.2.6

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1487403
Start date and time:	2024-08-04 00:40:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.win@19/1262@90/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://roblox.com.zm/home Browse: https://roblox.com.zm/discover

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13122)
Category:	downloaded
Size (bytes):	139732
Entropy (8bit):	5.034831552323464
Encrypted:	false
SSDEEP:	3072:iUZHnVZ04l7J8nVZ0jCsGVUFz7UolHQyc4VSTsz8biP/EYns676HWgTdT3dlE6PO:tZ04lV6ajjGVUFz7UolHQyc4VSTsz8wJ
MD5:	5DED1CB71F2E8AC4B6E9B986080AB369
SHA1:	7FC923120638A06C9D4F4A01907A58408A5B6350
SHA-256:	F76CA6447F7FB283C2CBF9F05A3CB45AB001ACA1B38150D3A385CDEDA895B2AC
SHA-512:	888378E0520EC2346915975F6AD972E235017F5A59F73C36E978B72E5B0F0B1298E69891F6C67CDB09CCC702C764D8CC3FC1D3EB2D51976B5400F97A64E23C54
Malicious:	false
Reputation:	low
URL:	https://js.rbxcdn.com/5ded1cb71f2e8ac4b6e9b986080ab369.js
Preview:	;// bundle: pageEnd___f280cc004591cdfd5d5e80f96a9547ea_m.;// files: ~/Generated/js/Roblox_TranslationResources_Authentication_CaptchaResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_ForceAuthenticatorResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_ForceTwoStepVerificationResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_ProofOfWorkChallengeResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_ReauthenticationResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_RostileChallengeResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_SecurityQuestionsResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_PrivateAccessTokenChallengeResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources_Feature_VerificationUpsellResources_en_us_standard.js, ~/Generated/js/Roblox_TranslationResources

Name	IP	Active	Malicious	Antivirus Detection	Reputation
edge-term4-fra4.roblox.com	128.116.44.3	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
roblox.com.zm	154.213.191.64	true	false	22%, Virustotal, Browse	unknown
roblox.com	128.116.44.3	true	false	0%, Virustotal, Browse	unknown
us-central-default-px.roblox.com	128.116.119.4	true	false	0%, Virustotal, Browse	unknown
edge-term4-lhr2.roblox.com	128.116.119.3	true	false	0%, Virustotal, Browse	unknown
dapx4swc8lj69.cloudfront.net	18.239.94.43	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.206.68	true	false	0%, Virustotal, Browse	unknown
d2w650xp5tniea.cloudfront.net	18.245.60.3	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
static.rbxcdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.roblox.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
metrics.roblox.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
apis.roblox.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
friends.roblox.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
ecsv2.roblox.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
images.rbxcdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
roblox-api.arkoselabs.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
css.rbxcdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
lms.roblox.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
tr.rbxcdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
js.rbxcdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
ncs.roblox.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
https://roblox.com.zm/privateJs/GameLaunch.js	true	Avira URL Cloud: malware	unknown
https://ncs.roblox.com/upload	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2Fbd18305af9e4ce41099df37e554eeb1bf2cc139ffba636e356666ccd9d07481c.js&cdnName=ak&statusCode=200&loadDuration=23178	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://roblox-api.arkoselabs.com/fc/api/?onload=reportFunCaptchaLoaded	false	Avira URL Cloud: safe	unknown
https://lms.roblox.com/recipe?iteration=0	false	Avira URL Cloud: safe	unknown
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F846daf4727935bf2ce0c89ac0f21292485a9e326c1485ad9717a862220944abe.js&cdnName=ak&statusCode=200&loadDuration=24392	false	Avira URL Cloud: safe	unknown
https://roblox.com.zm/v1/games/multiget-playability-status?universeIds=3808081382	true	Avira URL Cloud: malware	unknown
https://roblox.com.zm/v1/thumbnails/metadata	true	Avira URL Cloud: malware	unknown
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2Fc147f266d2415a0a5241902efea4c6e3e6907898faa9452177b7ce92ea003cfc.js&cdnName=ak&statusCode=200&loadDuration=7679	false	Avira URL Cloud: safe	unknown
https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat1&url=https%3A%2F%2Froblox.com.zm%2Fdiscover&lt=2024-08-03T22%3A42%3A31.393Z	true	Avira URL Cloud: safe	unknown
https://roblox.com/js/hsts.js?v=3	false	Avira URL Cloud: safe	unknown
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F077dd64734d3aa9a884874f85f2f514a239688c33a0fdf3f90365e0e7436ec3b.js&cdnName=ak&statusCode=200&loadDuration=8049	false	Avira URL Cloud: safe	unknown
https://images.rbxcdn.com/ca3888e4e17a9df7b25d5bfe2110c1c9-common_sm_light_12032018.svg	false	Avira URL Cloud: safe	unknown
https://roblox.com.zm/v1/performance/measurements	true	Avira URL Cloud: malware	unknown
https://roblox.com/js/hsts.js?v=1	false	Avira URL Cloud: safe	unknown
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F8f062951b7e1eac4601ec566fc09e69f437009b5785b9b468f4ba956ef742892.js&cdnName=ak&statusCode=200&loadDuration=23951	false	Avira URL Cloud: safe	unknown
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=JsFileExecutionError_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F5259cfe8a3e36118bd61120693dbba3ba87f2c3641f84bb07e29f1d69fe87523.js&cdnName=ak&statusCode=200&loadDuration=6466	false	Avira URL Cloud: safe	unknown
https://roblox.com.zm/recipe?iteration=0	true	Avira URL Cloud: malware	unknown
https://ecsv2.roblox.com/pe?t=diagnostic&evt=webBundleError&url=https%3A%2F%2Fwww.roblox.com%2Frequest-error%3Fcode%3D404&ctx=js_Computer&fileSourceUrl=https%3A%2F%2Fjs.rbxcdn.com%2F3756ad214dde52cb58a1300177547475.js&cdnName=ak&statusCode=200&loadDuration=6854	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.roblox.com/pt/discover	chromecache_965.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/109d883fe3988fca757e26e341ed0fe8.js	chromecache_1117.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/358e6ae5bebb0fa9326d0de99d3ee229ee63236bf44ed11b9ab1d314c7972e79.js	chromecache_1117.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/147977	chromecache_965.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.roblox.com/thumbnail/place	chromecache_1117.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/9517d686dc47015c200496d77e2b18146ee37652d18e25ecf9e1ed230310ea13.css	chromecache_1117.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.roblox.com/avatar-thumbnails	chromecache_1117.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.roblox.com/navigation/getCount	chromecache_1117.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://premiumfeatures.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/6df275f4290dbf3a38657783651fac4e.js	chromecache_1117.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/1e979a52d80126c2447674c17604baf65f73183fd44df1e6cd862feb441bdcc5.js	chromecache_965.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.roblox.com/place-thumbnails	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/5ea334fe4b4a36352ed0-navigation.bundle.min.js.map	chromecache_563.2.dr, chromecache_1137.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/ad810f1ad64d9a8eb628-idVerification.bundle.min.js.map	chromecache_1021.2.dr, chromecache_438.2.dr	false	Avira URL Cloud: safe	unknown
https://ads.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/gajus/sister/blob/master/LICENSE	chromecache_900.2.dr, chromecache_1063.2.dr	false	Avira URL Cloud: safe	unknown
https://images.rbxcdn.com/7bba321f4d8328683d6e59487ce514eb	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/5ec10f696511a19ac709adc0b92273ca5bbabc1191e973b12539d89634bdc2cd.css	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://assetgame.roblox.com/asset-thumbnail/url	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://roblox.com	chromecache_887.2.dr, chromecache_1147.2.dr, chromecache_611.2.dr, chromecache_1033.2.dr, chromecache_888.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/558cbed0ebd127bd21f1045302a44c69a092fc29acd3ed983ecd5bcb46ed2e84.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_847.2.dr, chromecache_886.2.dr	false	URL Reputation: safe	unknown
https://economy.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://contentstore.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_561.2.dr, chromecache_502.2.dr, chromecache_429.2.dr, chromecache_407.2.dr, chromecache_857.2.dr, chromecache_758.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/f3527069ef87b95fe1c26d21d14075c6.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/b79589d3dfb2446936aac95605deaa507ce5bc3e09073bac7dd04872880694c2.js	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/7f87a48c2277d62a95d8de1bb042bad213bb8d1f0a84442a8002c6ef09370d33.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/a9238207bc9ad295084e9a24589d3ea66d8ec4dc1016ad59ba4fa48b3a2aed8a.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/2359bfdeb82ced7d627671a3f54e79df65c89aabeffafe46e360a627c8108d63.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://www.roblox.com/abusereport/asset?id=10449761463&RedirectUrl=%2fgames%2f10449761463%2fThe	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_534.2.dr, chromecache_779.2.dr, chromecache_639.2.dr	false	URL Reputation: safe	unknown
https://midas.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/95044be3ff42e3dc429313faca1316cea62f328a39e29689ffeda9002f3a8bc6.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/955567fcee625c9235aea26b45e9b137de9ab1340f359f7b2890c0589415137c.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/68f976f4a3f8f3a6aae074879170e579451270e693d2361491b1c1bb9ac5e4c5.css	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.roblox.com/bundles-product-purchasing	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/b41227fe1ecc1f4409f2e33f02d4d968f6d6389349d2221f481ff3b34e01a257.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/b07e5af55eefa41c1f1e3fbb3caf113766f6f6bf35b088a0c087c2a760ce2ac0.css	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/e9e933a580a17188724e-serverList.bundle.min.js.map	chromecache_794.2.dr, chromecache_663.2.dr	false	Avira URL Cloud: safe	unknown
https://presence.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://www.roblox.com/fr/discover	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/cssinjs/jss	chromecache_711.2.dr, chromecache_1134.2.dr, chromecache_718.2.dr, chromecache_801.2.dr, chromecache_548.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/08a545ae1503441b55f5236794feccec.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://images.rbxcdn.com/f25e4cadae29ae9a57a962126b2d2e2a.png	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/329ba9314a5de7282e8a8035046e7a56faf772d3ffea8af619b3e8854df0fc41.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/57d1b7776de993a3bf8ace38e6efd8f8ce5b9a294362c029990f0cf131548531.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://captcha.roblox.com/v1/funcaptcha/login/web	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_534.2.dr, chromecache_779.2.dr, chromecache_639.2.dr	false	URL Reputation: safe	unknown
https://js.rbxcdn.com/1b1086c35c478c7f8f8719b34394b844caa7e7464e34b2fe071a1e0e847b7062.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/b943a7a0229dce195e7df6bff6523323ad8b2f049d3e6e9ca7f44190c8cf5bb4.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?	chromecache_1022.2.dr, chromecache_976.2.dr	false	URL Reputation: safe	unknown
https://images.rbxcdn.com/b7353602bbf9b927d572d5887f97d452.svg	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://images.rbxcdn.com/cece570e37aa8f95a450ab0484a18d91	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://www.roblox.com/notification-stream/notification-stream-data	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/6d034812b7a5e8d44b205a43951db75a-reactUtilities.bundle.min.js.map	chromecache_686.2.dr, chromecache_413.2.dr, chromecache_1047.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/a5d76f662cc98d13a65d323097497aa93948409caf12b33464400259111e8082.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/bec62e96a756104b8904fe298055c659d462a293759ee99503dd85e952bd11f1.css	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/08def520152a575438e73a81aa9a310c2415c327df7b624a24aa6e794d24dba3.css	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/c629f6739d6903fec0d935d26a9cea02ff757856d4ed73a83fd1535affea0300.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://captcha.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/12b534c015ec10b109e2b1a3ce5739f7-gameLaunch.bundle.min.js.map	chromecache_445.2.dr, chromecache_945.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/7f2b0e1a95d977764e6a3e84faa444a0-headerScripts.bundle.min.js.map	chromecache_415.2.dr, chromecache_492.2.dr, chromecache_930.2.dr	false	Avira URL Cloud: safe	unknown
https://assetgame.roblox.com/asset-thumbnail/json	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/71cb0b7eff86334bc8f7289ba6559f93d1e44a49cf56bb2dbdb3582ce11418a6.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://assetgame.roblox.com/asset-thumbnail/image	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/9bfc48ea40a698035ea8cbe3d3e94bd06d3aac48969bedceb6d8ba5ff17ff84d.css	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/fe2db8e661be348f8b4c2426699b0cc8-internationalAngularJs.bundle.min.js.map	chromecache_625.2.dr, chromecache_752.2.dr, chromecache_1116.2.dr	false	Avira URL Cloud: safe	unknown
https://reactjs.org/link/react-polyfills	chromecache_555.2.dr	false	URL Reputation: safe	unknown
https://www.roblox.com/thumbnail/user-avatar	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://notifications.roblox.com	chromecache_1117.2.dr, chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences?	chromecache_976.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/a76ba29b46d4047bb36ecad4069ccbafde83a2d38e07f21aa8c4b40213625c96.js	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/36776e03b33e735d6b3237e8d56c81728a3af642275c4aa7b49f3b1ed0624945.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/ce33e1b7ee9a9fe04186a1b433fe261035b0f4098ec10a0d943060efa65e98a2.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/72a51d279fb4c7ad3ea1-coreRobloxUtilities.bundle.min.js.map	chromecache_466.2.dr, chromecache_778.2.dr	false	Avira URL Cloud: safe	unknown
http://errors.angularjs.org/1.6.3/	chromecache_710.2.dr, chromecache_467.2.dr, chromecache_1136.2.dr, chromecache_615.2.dr, chromecache_708.2.dr	false	Avira URL Cloud: safe	unknown
https://js.rbxcdn.com/c147f266d2415a0a5241902efea4c6e3e6907898faa9452177b7ce92ea003cfc.js	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://css.rbxcdn.com/c92e5fc4564200cb9d84ba69bd53e4a4f86109709b8db691c1567dd257c1115b.css	chromecache_965.2.dr	false	Avira URL Cloud: safe	unknown
https://www.roblox.com/client-status	chromecache_1117.2.dr	false	Avira URL Cloud: safe	unknown

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 4, 2024 00:41:18.884987116 CEST	53	62667	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:18.972819090 CEST	53	50568	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:19.984209061 CEST	53	52345	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:20.687628984 CEST	61230	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:20.687906027 CEST	63210	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:20.868570089 CEST	53	63210	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:20.962466002 CEST	53	61230	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:22.238723993 CEST	54686	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:22.239396095 CEST	58795	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:22.245671034 CEST	53	54686	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:22.246102095 CEST	53	58795	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:23.814238071 CEST	53383	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:23.815160036 CEST	53332	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:23.850416899 CEST	64099	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:23.857330084 CEST	57198	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:23.911834955 CEST	62691	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:23.912117958 CEST	61214	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:24.916393995 CEST	51691	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:24.919107914 CEST	60400	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:25.446635962 CEST	65222	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:25.447377920 CEST	56039	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:26.171106100 CEST	61879	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:26.171689034 CEST	59474	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:29.404823065 CEST	51678	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:29.404963970 CEST	49160	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:29.426954985 CEST	53	51678	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:29.529911041 CEST	53	49160	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:32.624325037 CEST	57887	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:32.624803066 CEST	61957	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:32.631122112 CEST	53	57887	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:32.631498098 CEST	53	65340	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:32.632256031 CEST	53	61957	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:33.767277956 CEST	63029	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:33.767421007 CEST	49897	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:33.777292967 CEST	53	63029	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:33.785135031 CEST	53	49897	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:34.293931007 CEST	53	57914	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:34.425683975 CEST	56241	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:34.426268101 CEST	61440	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:34.433310032 CEST	53	56241	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:34.436217070 CEST	53	59237	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:34.447287083 CEST	53	61440	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:35.032948971 CEST	51722	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:35.033198118 CEST	50633	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:35.041209936 CEST	53	51722	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:35.041274071 CEST	53	50633	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:35.395899057 CEST	58228	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:35.396109104 CEST	49642	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:35.403287888 CEST	53	58228	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:35.403656006 CEST	53	49642	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:36.230606079 CEST	53	58763	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:36.739332914 CEST	50508	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:36.739903927 CEST	61347	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:36.889281034 CEST	53	50508	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:36.902968884 CEST	53	61347	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:37.009351015 CEST	53	50683	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:46.235306025 CEST	53	53861	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:48.171827078 CEST	59535	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:48.171827078 CEST	62958	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:48.179276943 CEST	53	59535	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:48.181418896 CEST	53	62958	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:50.014569998 CEST	50904	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:50.014775991 CEST	60977	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:51.335051060 CEST	56702	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:51.335364103 CEST	58665	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:55.912492037 CEST	53	54828	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:56.176043034 CEST	55203	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:56.176187992 CEST	52248	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:56.182723045 CEST	53	55203	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:56.183456898 CEST	53	52248	1.1.1.1	192.168.2.6
Aug 4, 2024 00:41:57.605838060 CEST	58587	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:57.606149912 CEST	53225	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:57.610785961 CEST	55341	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:57.611215115 CEST	56696	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:57.615375996 CEST	62656	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:41:57.615648985 CEST	56755	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:00.740660906 CEST	55900	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:00.740930080 CEST	61133	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:03.153800011 CEST	60698	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:03.154335976 CEST	56835	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:03.155386925 CEST	63077	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:03.155600071 CEST	59094	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:03.156438112 CEST	50762	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:03.156698942 CEST	55996	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:03.160835028 CEST	53	60698	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:03.161662102 CEST	53	56835	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:03.162089109 CEST	53	63077	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:03.163032055 CEST	53	50762	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:03.163292885 CEST	53	59094	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:03.178002119 CEST	53	55996	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:04.397082090 CEST	58527	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:04.397308111 CEST	60802	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:04.411540031 CEST	53	58527	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:04.412372112 CEST	53	60802	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:04.451137066 CEST	56892	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:04.451349020 CEST	54380	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:04.459362030 CEST	53	56892	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:04.459378004 CEST	53	54380	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:05.443408966 CEST	61455	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:05.443408966 CEST	52324	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:05.450258017 CEST	53	61455	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:05.450464964 CEST	53	52324	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:05.537393093 CEST	52008	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:05.537554026 CEST	54962	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:05.545386076 CEST	53	52008	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:05.545407057 CEST	53	54962	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:18.027070045 CEST	53	59429	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:19.563884974 CEST	53	54212	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:26.587107897 CEST	64836	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:26.587620020 CEST	61143	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:26.617738962 CEST	58372	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:26.618211031 CEST	62918	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:26.625027895 CEST	58428	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:26.625304937 CEST	60002	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:26.633644104 CEST	53	60002	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:31.636833906 CEST	57966	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:31.636985064 CEST	60469	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:32.993669987 CEST	59381	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:32.993669987 CEST	59881	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:33.004844904 CEST	53	59381	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:33.004864931 CEST	53	59881	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:37.780198097 CEST	53896	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:37.780827045 CEST	54859	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:37.787333012 CEST	53	54859	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:37.787961960 CEST	53	53896	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:47.156960964 CEST	53	62489	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:48.228574991 CEST	62088	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:48.228863001 CEST	61150	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:48.229455948 CEST	51632	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:48.229829073 CEST	55318	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:48.230171919 CEST	54031	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:48.230540037 CEST	64206	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:48.236094952 CEST	53	62088	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:48.236593962 CEST	53	51632	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:48.236603022 CEST	53	61150	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:48.237004995 CEST	53	54031	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:48.238522053 CEST	53	64206	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:48.251074076 CEST	53	55318	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:50.818150043 CEST	55783	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:50.818478107 CEST	64073	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:50.825568914 CEST	53	64073	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:50.825598001 CEST	53	55783	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:53.496268988 CEST	59561	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:53.496448994 CEST	56231	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:53.890126944 CEST	58016	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:53.890290022 CEST	63979	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:53.897702932 CEST	53	58016	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:53.898953915 CEST	53	63979	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:54.475403070 CEST	61303	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:54.475701094 CEST	49268	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:54.483278036 CEST	53	61303	1.1.1.1	192.168.2.6
Aug 4, 2024 00:42:55.358746052 CEST	55229	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:55.358896017 CEST	63214	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:56.413357019 CEST	49867	53	192.168.2.6	1.1.1.1
Aug 4, 2024 00:42:56.413507938 CEST	65486	53	192.168.2.6	1.1.1.1

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 4, 2024 00:41:25.487580061 CEST	192.168.2.6	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:41:29.530008078 CEST	192.168.2.6	1.1.1.1	c224	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:41:34.447402954 CEST	192.168.2.6	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:42:00.780929089 CEST	192.168.2.6	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:42:03.178065062 CEST	192.168.2.6	1.1.1.1	c279	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:42:26.629627943 CEST	192.168.2.6	1.1.1.1	c296	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:42:48.251200914 CEST	192.168.2.6	1.1.1.1	c25e	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:42:53.543966055 CEST	192.168.2.6	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable
Aug 4, 2024 00:42:54.515376091 CEST	192.168.2.6	1.1.1.1	c2a2	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:09 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 64 2f 62 6c 37 32 31 58 30 57 4d 77 64 33 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 31 31 31 63 36 39 35 35 64 65 36 61 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: fd/bl721X0WMwd36.1Context: e7f111c6955de6a5
2024-08-03 22:41:09 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-03 22:41:09 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 66 64 2f 62 6c 37 32 31 58 30 57 4d 77 64 33 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 31 31 31 63 36 39 35 35 64 65 36 61 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 61 4f 4e 70 74 47 61 6e 77 44 65 68 31 77 2f 50 49 5a 45 53 69 77 6e 44 67 34 69 50 2f 6f 50 68 67 2f 6e 53 30 6b 58 4e 58 68 4c 33 58 42 79 6f 75 76 4a 51 4f 34 57 64 56 31 6c 52 42 73 73 4f 55 73 64 70 35 4e 67 61 46 78 7a 73 62 4d 4b 42 63 4c 45 43 4c 56 39 62 6f 49 71 78 43 50 63 53 74 57 52 65 6d 58 38 62 49 30 46 55 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: fd/bl721X0WMwd36.2Context: e7f111c6955de6a5<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZaONptGanwDeh1w/PIZESiwnDg4iP/oPhg/nS0kXNXhL3XByouvJQO4WdV1lRBssOUsdp5NgaFxzsbMKBcLECLV9boIqxCPcStWRemX8bI0FU
2024-08-03 22:41:09 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 66 64 2f 62 6c 37 32 31 58 30 57 4d 77 64 33 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 37 66 31 31 31 63 36 39 35 35 64 65 36 61 35 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: fd/bl721X0WMwd36.3Context: e7f111c6955de6a5
2024-08-03 22:41:09 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-03 22:41:09 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 5a 75 55 65 4e 4f 4d 55 30 47 37 6d 32 50 6b 48 4a 4c 37 52 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: GZuUeNOMU0G7m2PkHJL7RA.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6a 65 51 43 6b 4f 66 56 67 30 79 68 4c 65 6c 6b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 63 66 36 62 30 33 38 39 65 63 63 61 38 32 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: jeQCkOfVg0yhLelk.1Context: 3cf6b0389ecca825
2024-08-03 22:41:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-03 22:41:16 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6a 65 51 43 6b 4f 66 56 67 30 79 68 4c 65 6c 6b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 63 66 36 62 30 33 38 39 65 63 63 61 38 32 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 61 4f 4e 70 74 47 61 6e 77 44 65 68 31 77 2f 50 49 5a 45 53 69 77 6e 44 67 34 69 50 2f 6f 50 68 67 2f 6e 53 30 6b 58 4e 58 68 4c 33 58 42 79 6f 75 76 4a 51 4f 34 57 64 56 31 6c 52 42 73 73 4f 55 73 64 70 35 4e 67 61 46 78 7a 73 62 4d 4b 42 63 4c 45 43 4c 56 39 62 6f 49 71 78 43 50 63 53 74 57 52 65 6d 58 38 62 49 30 46 55 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: jeQCkOfVg0yhLelk.2Context: 3cf6b0389ecca825<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZaONptGanwDeh1w/PIZESiwnDg4iP/oPhg/nS0kXNXhL3XByouvJQO4WdV1lRBssOUsdp5NgaFxzsbMKBcLECLV9boIqxCPcStWRemX8bI0FU
2024-08-03 22:41:16 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6a 65 51 43 6b 4f 66 56 67 30 79 68 4c 65 6c 6b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 63 66 36 62 30 33 38 39 65 63 63 61 38 32 35 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: jeQCkOfVg0yhLelk.3Context: 3cf6b0389ecca825
2024-08-03 22:41:16 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-03 22:41:16 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 77 37 63 41 56 48 52 75 4c 55 71 51 45 77 44 6b 30 2f 31 6a 66 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: w7cAVHRuLUqQEwDk0/1jfA.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:21 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 2f 39 76 55 77 49 2f 42 55 43 2f 49 4c 70 50 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 35 33 36 62 32 35 61 33 63 65 33 65 30 32 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: r/9vUwI/BUC/ILpP.1Context: 7536b25a3ce3e026
2024-08-03 22:41:21 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-03 22:41:21 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 72 2f 39 76 55 77 49 2f 42 55 43 2f 49 4c 70 50 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 35 33 36 62 32 35 61 33 63 65 33 65 30 32 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 61 4f 4e 70 74 47 61 6e 77 44 65 68 31 77 2f 50 49 5a 45 53 69 77 6e 44 67 34 69 50 2f 6f 50 68 67 2f 6e 53 30 6b 58 4e 58 68 4c 33 58 42 79 6f 75 76 4a 51 4f 34 57 64 56 31 6c 52 42 73 73 4f 55 73 64 70 35 4e 67 61 46 78 7a 73 62 4d 4b 42 63 4c 45 43 4c 56 39 62 6f 49 71 78 43 50 63 53 74 57 52 65 6d 58 38 62 49 30 46 55 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: r/9vUwI/BUC/ILpP.2Context: 7536b25a3ce3e026<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZaONptGanwDeh1w/PIZESiwnDg4iP/oPhg/nS0kXNXhL3XByouvJQO4WdV1lRBssOUsdp5NgaFxzsbMKBcLECLV9boIqxCPcStWRemX8bI0FU
2024-08-03 22:41:21 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 2f 39 76 55 77 49 2f 42 55 43 2f 49 4c 70 50 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 35 33 36 62 32 35 61 33 63 65 33 65 30 32 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: r/9vUwI/BUC/ILpP.3Context: 7536b25a3ce3e026<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-03 22:41:21 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-03 22:41:21 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 46 53 7a 7a 78 4a 64 6d 73 55 57 58 33 4d 69 62 71 6c 62 63 45 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: FSzzxJdmsUWX3MibqlbcEg.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:21 UTC	756	OUT	GET /games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 HTTP/1.1 Host: roblox.com.zm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:41:21 UTC	349	IN	HTTP/1.1 302 Found Date: Sat, 03 Aug 2024 22:41:20 GMT Content-Length: 0 Eggy-Wall: 3.0 Location: /games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 Set-Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724; SameSite=Lax; path=/; Secure Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:21 UTC	845	OUT	GET /games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 HTTP/1.1 Host: roblox.com.zm Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:23 UTC	603	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 102639 Eggy-Wall: 3.0 Strict-Transport-Security: max-age=604800; includeSubdomains X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding Cross-Origin-Opener-Policy: same-origin-allow-popups Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Access-Control-Allow-Credentials: true Connection: close
2024-08-03 22:41:23 UTC	583	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6e 67 2d 61 70 70 3d 22 72 6f 62 6c 6f 78 41 70 70 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 38 5d 3e 3c 21 2d 2d 3e 0a 3c 68 74 6d 6c 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 3c 68 65 61 64 20 64 61 74 61 2d 6d 61 63 68 69 6e 65 2d 69 64 3d 22 43 48 49 32 2d 57 45 42 36 22 3e 0a 09 3c 21 2d 2d 20 4d 61 63 68 69 6e 65 49 44 3a 20 43 48 49 32 2d 57 45 42 36 20 2d 2d 3e 0a 09 3c 74 69 74 6c 65 3e 54 68 65 20 53 74 72 6f 6e 67 65 73 74 20 42 61 74 74 6c 65 67 72 6f 75 6e 64 73 2d 20 52 6f 62 6c 6f 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 68 74 Data Ascii: <!DOCTYPE html>...[if IE 8]><html class="ie8" ng-app="robloxApp"><![endif]-->...[if gt IE 8]>...><html>...<![endif]--><head data-machine-id="CHI2-WEB6">... MachineID: CHI2-WEB6 --><title>The Strongest Battlegrounds- Roblox</title><meta ht
2024-08-03 22:41:23 UTC	2372	IN	Data Raw: 75 73 65 72 2d 67 65 6e 65 72 61 74 65 64 20 33 44 20 65 78 70 65 72 69 65 6e 63 65 73 20 63 72 65 61 74 65 64 20 6f 6e 20 52 6f 62 6c 6f 78 2e 20 54 72 61 69 6e 20 26 20 66 69 67 68 74 20 6f 74 68 65 72 73 20 74 6f 20 62 65 20 74 68 65 20 73 74 72 6f 6e 67 65 73 74 2e 0a 0a f0 9f 93 b1 f0 9f 92 bb f0 9f 8e ae 20 59 6f 75 20 63 61 6e 20 70 6c 61 79 20 6f 6e 20 61 6e 79 20 64 65 76 69 63 65 2e 20 28 43 4f 4e 53 4f 4c 45 2c 20 50 43 2c 20 4d 4f 42 49 4c 45 29 0a e2 ad 90 20 50 6c 65 61 73 65 20 63 6f 6e 73 69 64 65 72 20 6c 69 6b 69 6e 67 20 61 6e 64 20 66 61 76 6f 72 69 74 69 6e 67 20 74 68 65 20 67 61 6d 65 20 66 6f 72 20 6d 6f 72 65 20 75 70 64 61 74 65 73 2e 0a 0a f0 9f 96 a5 ef b8 8f 20 43 6f 6e 74 72 6f 6c 73 0a 47 20 2d 20 75 6c 74 69 6d 61 74 65 20 Data Ascii: user-generated 3D experiences created on Roblox. Train & fight others to be the strongest. You can play on any device. (CONSOLE, PC, MOBILE) Please consider liking and favoriting the game for more updates. ControlsG - ultimate
2024-08-03 22:41:23 UTC	538	IN	Data Raw: 74 3d 22 54 68 65 20 53 74 72 6f 6e 67 65 73 74 20 42 61 74 74 6c 65 67 72 6f 75 6e 64 73 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 68 65 63 6b 20 6f 75 74 20 54 68 65 20 53 74 72 6f 6e 67 65 73 74 20 42 61 74 74 6c 65 67 72 6f 75 6e 64 73 2e 20 49 74 e2 80 99 73 20 6f 6e 65 20 6f 66 20 74 68 65 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 75 6e 69 71 75 65 2c 20 75 73 65 72 2d 67 65 6e 65 72 61 74 65 64 20 33 44 20 65 78 70 65 72 69 65 6e 63 65 73 20 63 72 65 61 74 65 64 20 6f 6e 20 52 6f 62 6c 6f 78 2e 20 54 72 61 69 6e 20 26 20 66 69 67 68 74 20 6f 74 68 65 72 73 20 74 6f 20 62 65 20 74 68 65 20 73 74 72 6f 6e 67 65 73 74 2e 0a 0a f0 9f 93 b1 f0 9f 92 bb f0 9f Data Ascii: t="The Strongest Battlegrounds"><meta name="twitter:description" content="Check out The Strongest Battlegrounds. Its one of the millions of unique, user-generated 3D experiences created on Roblox. Train & fight others to be the strongest.
2024-08-03 22:41:23 UTC	4744	IN	Data Raw: 42 65 73 74 20 46 69 67 68 74 69 6e 67 20 45 78 70 65 72 69 65 6e 63 65 22 20 49 6e 6e 6f 76 61 74 69 6f 6e 20 41 77 61 72 64 73 20 27 32 34 0a f0 9f 8f 86 20 22 42 65 73 74 20 53 74 72 61 74 65 67 79 20 45 78 70 65 72 69 65 6e 63 65 22 20 49 6e 6e 6f 76 61 74 69 6f 6e 20 41 77 61 72 64 73 20 27 32 34 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 72 65 61 74 6f 72 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 74 77 69 74 74 65 72 3a 69 6d 61 67 65 31 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 74 72 2e 72 62 78 63 64 6e 2e 63 6f 6d 2f 63 61 65 66 36 66 32 61 30 34 30 31 33 32 36 37 62 31 61 35 35 37 65 30 31 62 64 36 64 39 32 62 2f 37 36 38 2f 34 33 32 2f 49 6d 61 67 65 2f 50 6e 67 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 Data Ascii: Best Fighting Experience" Innovation Awards '24 "Best Strategy Experience" Innovation Awards '24"><meta name="twitter:creator"><meta name=twitter:image1 content="https://tr.rbxcdn.com/caef6f2a04013267b1a557e01bd6d92b/768/432/Image/Png" /><meta
2024-08-03 22:41:23 UTC	5930	IN	Data Raw: 68 43 72 65 64 65 6e 74 69 61 6c 73 20 3d 20 74 72 75 65 3b 0a 09 09 09 09 78 68 72 2e 73 65 6e 64 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0a 09 09 09 09 09 62 75 6e 64 6c 65 55 72 6c 3a 20 62 75 6e 64 6c 65 55 72 6c 2c 0a 09 09 09 09 09 62 75 6e 64 6c 65 4e 61 6d 65 3a 20 62 75 6e 64 6c 65 4e 61 6d 65 20 7c 7c 20 22 22 2c 0a 09 09 09 09 09 62 75 6e 64 6c 65 43 6f 6e 74 65 6e 74 54 79 70 65 3a 20 62 75 6e 64 6c 65 43 6f 6e 74 65 6e 74 54 79 70 65 2c 0a 09 09 09 09 09 6c 6f 61 64 53 74 61 74 65 3a 20 6c 6f 61 64 53 74 61 74 65 2c 0a 09 09 09 09 09 63 64 6e 50 72 6f 76 69 64 65 72 4e 61 6d 65 3a 20 63 64 6e 50 72 6f 76 69 64 65 72 4e 61 6d 65 2c 0a 09 09 09 09 09 6c 6f 61 64 54 69 6d 65 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 3a 20 74 68 69 73 Data Ascii: hCredentials = true;xhr.send(JSON.stringify({bundleUrl: bundleUrl,bundleName: bundleName \|\| "",bundleContentType: bundleContentType,loadState: loadState,cdnProviderName: cdnProviderName,loadTimeInMilliseconds: this
2024-08-03 22:41:23 UTC	7116	IN	Data Raw: 76 61 72 20 73 63 72 69 70 74 20 3d 20 65 72 72 6f 72 73 4c 69 73 74 5b 6a 5d 3b 0a 09 09 09 09 09 09 69 66 28 21 74 68 69 73 2e 62 75 6e 64 6c 65 73 52 65 70 6f 72 74 65 64 5b 73 63 72 69 70 74 2e 73 72 63 5d 29 20 7b 0a 09 09 09 09 09 09 09 2f 2f 6c 6f 67 20 74 68 65 20 63 6f 75 6e 74 65 72 20 6f 6e 6c 79 20 69 66 20 74 68 65 20 66 69 6c 65 20 69 73 20 61 63 74 75 61 6c 6c 79 20 63 6f 72 72 75 70 74 65 64 2c 20 6e 6f 74 20 6a 75 73 74 20 64 75 65 20 74 6f 20 66 61 69 6c 75 72 65 20 74 6f 20 6c 6f 61 64 0a 09 09 09 09 09 09 09 2f 2f 65 2e 67 2e 20 4a 73 46 69 6c 65 45 78 65 63 75 74 69 6f 6e 45 72 72 6f 72 5f 43 6f 6d 70 75 74 65 72 0a 09 09 09 09 09 09 09 74 68 69 73 2e 6c 6f 67 54 6f 45 70 68 65 6d 65 72 61 6c 43 6f 75 6e 74 65 72 28 65 70 68 65 6d 65 Data Ascii: var script = errorsList[j];if(!this.bundlesReported[script.src]) {//log the counter only if the file is actually corrupted, not just due to failure to load//e.g. JsFileExecutionError_Computerthis.logToEphemeralCounter(epheme
2024-08-03 22:41:23 UTC	8302	IN	Data Raw: 76 69 72 6f 6e 6d 65 6e 74 55 72 6c 73 20 3d 20 7b 0a 09 09 22 61 62 74 65 73 74 69 6e 67 41 70 69 53 69 74 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 62 74 65 73 74 69 6e 67 2e 72 6f 62 6c 6f 78 2e 63 6f 6d 22 2c 0a 09 09 22 61 63 63 6f 75 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 70 69 22 3a 20 22 68 74 74 70 73 3a 2f 2f 72 6f 62 6c 6f 78 2e 63 6f 6d 2e 7a 6d 22 2c 0a 09 09 22 61 63 63 6f 75 6e 74 53 65 74 74 69 6e 67 73 41 70 69 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 65 74 74 69 6e 67 73 2e 72 6f 62 6c 6f 78 2e 63 6f 6d 22 2c 0a 09 09 22 61 64 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 41 70 69 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 64 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 72 6f 62 6c 6f 78 2e 63 6f 6d 22 2c 0a 09 09 22 61 64 73 41 Data Ascii: vironmentUrls = {"abtestingApiSite": "https://abtesting.roblox.com","accountInformationApi": "https://roblox.com.zm","accountSettingsApi": "https://accountsettings.roblox.com","adConfigurationApi": "https://adconfiguration.roblox.com","adsA
2024-08-03 22:41:23 UTC	9488	IN	Data Raw: 64 6f 77 2e 65 78 74 65 72 6e 61 6c 2e 6d 73 54 72 61 63 6b 69 6e 67 50 72 6f 74 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0a 09 09 09 64 6e 74 20 3d 20 64 6e 74 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 78 74 65 72 6e 61 6c 2e 6d 73 54 72 61 63 6b 69 6e 67 50 72 6f 74 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 3b 0a 09 09 7d 0a 09 09 52 6f 62 6c 6f 78 2e 62 72 6f 77 73 65 72 44 6f 4e 6f 74 54 72 61 63 6b 20 3d 20 64 6e 74 20 3d 3d 20 22 31 22 20 7c 7c 20 64 6e 74 20 3d 3d 20 22 79 65 73 22 20 7c 7c 20 64 6e 74 20 3d 3d 3d 20 74 72 75 65 3b 0a 09 7d 29 28 29 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 76 61 72 Data Ascii: dow.external.msTrackingProtectionEnabled !== "undefined") {dnt = dnt \|\| window.external.msTrackingProtectionEnabled();}Roblox.browserDoNotTrack = dnt == "1" \|\| dnt == "yes" \|\| dnt === true;})();</script><script type="text/javascript">var
2024-08-03 22:41:23 UTC	10674	IN	Data Raw: 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 6f 62 6c 6f 78 2e 63 6f 6d 2f 6a 73 2f 68 73 74 73 2e 6a 73 3f 76 3d 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 68 73 74 73 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6f 6e 65 72 72 6f 72 3d 22 52 6f 62 6c 6f 78 2e 42 75 6e 64 6c 65 44 65 74 65 63 74 6f 72 20 26 26 20 52 6f 62 6c 6f 78 2e 42 75 6e 64 6c 65 44 65 74 65 63 74 6f 72 2e 72 65 70 6f 72 74 42 75 6e 64 6c 65 45 72 72 6f 72 28 74 68 69 73 29 22 20 64 61 74 61 2d 6d 6f 6e 69 74 6f 72 3d 22 74 72 75 65 22 20 64 61 74 61 2d 62 75 6e 64 6c 65 6e 61 6d 65 3d 22 4c 69 Data Ascii: " /><script src="https://roblox.com/js/hsts.js?v=1" type="text/javascript" id="hsts" async></script><script type="text/javascript" onerror="Roblox.BundleDetector && Roblox.BundleDetector.reportBundleError(this)" data-monitor="true" data-bundlename="Li
2024-08-03 22:41:23 UTC	11860	IN	Data Raw: 22 74 65 78 74 2d 6c 61 62 65 6c 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 20 66 6f 6e 74 2d 63 61 70 74 69 6f 6e 2d 68 65 61 64 65 72 22 3e 56 69 73 69 74 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 69 64 3d 22 67 61 6d 65 2d 76 69 73 69 74 2d 63 6f 75 6e 74 22 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6c 65 61 64 20 66 6f 6e 74 2d 63 61 70 74 69 6f 6e 2d 62 6f 64 79 20 77 61 69 74 2d 66 6f 72 2d 69 31 38 6e 2d 66 6f 72 6d 61 74 2d 72 65 6e 64 65 72 20 22 20 74 69 74 6c 65 3d 22 36 2c 38 30 32 2c 32 39 32 2c 31 31 32 22 3e 36 2e 38 42 2b 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 67 61 6d 65 2d 73 74 61 74 20 67 61 6d 65 2d 73 74 61 74 2d 77 69 64 74 Data Ascii: "text-label text-overflow font-caption-header">Visits</p><p id="game-visit-count" class="text-lead font-caption-body wait-for-i18n-format-render " title="6,802,292,112">6.8B+</p></li><li class="game-stat game-stat-widt

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Chrome Cache Entry: 1021

Chrome Cache Entry: 1022

Chrome Cache Entry: 1023

Chrome Cache Entry: 1024

Chrome Cache Entry: 1025

Chrome Cache Entry: 1026

Windows Analysis Report
https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:22 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 58 62 79 32 6a 6d 59 58 6b 6b 69 79 53 72 33 73 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 66 35 30 31 36 30 66 36 63 36 35 62 64 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Xby2jmYXkkiySr3s.1Context: faf50160f6c65bd4
2024-08-03 22:41:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-03 22:41:22 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 58 62 79 32 6a 6d 59 58 6b 6b 69 79 53 72 33 73 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 66 35 30 31 36 30 66 36 63 36 35 62 64 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 61 4f 4e 70 74 47 61 6e 77 44 65 68 31 77 2f 50 49 5a 45 53 69 77 6e 44 67 34 69 50 2f 6f 50 68 67 2f 6e 53 30 6b 58 4e 58 68 4c 33 58 42 79 6f 75 76 4a 51 4f 34 57 64 56 31 6c 52 42 73 73 4f 55 73 64 70 35 4e 67 61 46 78 7a 73 62 4d 4b 42 63 4c 45 43 4c 56 39 62 6f 49 71 78 43 50 63 53 74 57 52 65 6d 58 38 62 49 30 46 55 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Xby2jmYXkkiySr3s.2Context: faf50160f6c65bd4<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZaONptGanwDeh1w/PIZESiwnDg4iP/oPhg/nS0kXNXhL3XByouvJQO4WdV1lRBssOUsdp5NgaFxzsbMKBcLECLV9boIqxCPcStWRemX8bI0FU
2024-08-03 22:41:22 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 58 62 79 32 6a 6d 59 58 6b 6b 69 79 53 72 33 73 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 66 35 30 31 36 30 66 36 63 36 35 62 64 34 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: Xby2jmYXkkiySr3s.3Context: faf50160f6c65bd4
2024-08-03 22:41:23 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-03 22:41:23 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6e 44 31 6b 55 76 78 48 63 45 57 33 6c 4d 61 77 6a 49 4d 30 6f 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: nD1kUvxHcEW3lMawjIM0ow.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-03 22:41:24 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=30129 Date: Sat, 03 Aug 2024 22:41:24 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-03 22:41:25 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=30058 Date: Sat, 03 Aug 2024 22:41:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-03 22:41:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:28 UTC	881	OUT	GET /user-sponsorship/1 HTTP/1.1 Host: roblox.com.zm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:29 UTC	575	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Eggy-Wall: 3.0 Access-Control-Allow-Credentials: true Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} Cross-Origin-Opener-Policy: same-origin-allow-popups Strict-Transport-Security: max-age=604800; includeSubdomains X-Frame-Options: SAMEORIGIN Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:28 UTC	881	OUT	GET /user-sponsorship/2 HTTP/1.1 Host: roblox.com.zm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:29 UTC	575	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Eggy-Wall: 3.0 Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} Access-Control-Allow-Credentials: true X-Frame-Options: SAMEORIGIN Cross-Origin-Opener-Policy: same-origin-allow-popups Strict-Transport-Security: max-age=604800; includeSubdomains Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:29 UTC	718	OUT	GET /v1/thumbnails/metadata HTTP/1.1 Host: roblox.com.zm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:29 UTC	583	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:28 GMT Content-Type: application/json; charset=utf-8 Content-Length: 18 Eggy-Wall: 3.0 Access-Control-Allow-Credentials: true Cross-Origin-Opener-Policy: same-origin-allow-popups Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Strict-Transport-Security: max-age=604800; includeSubdomains X-Frame-Options: SAMEORIGIN Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} Connection: close
2024-08-03 22:41:29 UTC	18	IN	Data Raw: 0a 7b 22 6c 6f 67 52 61 74 69 6f 22 3a 30 2e 30 35 7d Data Ascii: {"logRatio":0.05}

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:29 UTC	723	OUT	GET /privateJs/Navigation.js HTTP/1.1 Host: roblox.com.zm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:29 UTC	702	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:28 GMT Content-Type: application/javascript Content-Length: 79363 Eggy-Wall: 3.0 X-Frame-Options: SAMEORIGIN Accept-Ranges: bytes Access-Control-Allow-Credentials: true Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} Etag: "13603-61d59f27c3df8-gzip" Cross-Origin-Opener-Policy: same-origin-allow-popups Last-Modified: Tue, 16 Jul 2024 09:26:57 GMT Vary: Accept-Encoding Strict-Transport-Security: max-age=604800; includeSubdomains Connection: close
2024-08-03 22:41:29 UTC	484	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 7b 37 37 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 0d 0a 2f 2a 21 0d 0a 20 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4a 65 64 20 57 61 74 73 6f 6e 2e 0d 0a 20 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 2c 20 73 65 65 0d 0a 20 20 68 74 74 70 3a 2f 2f 6a 65 64 77 61 74 73 6f 6e 2e 67 69 74 68 75 62 2e 69 6f 2f 63 6c 61 73 73 6e 61 6d 65 73 0d 0a 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c Data Ascii: !function(){var n={779:function(e,t){var n;/! Copyright (c) 2017 Jed Watson. Licensed under the MIT License (MIT), see http://jedwatson.github.io/classnames/!function(){"use strict";var i={}.hasOwnProperty;function c(){for(var e=[],t=0;t<
2024-08-03 22:41:29 UTC	2372	IN	Data Raw: 73 68 28 6f 29 7d 7d 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 20 22 29 7d 65 2e 65 78 70 6f 72 74 73 3f 28 63 2e 64 65 66 61 75 6c 74 3d 63 2c 65 2e 65 78 70 6f 72 74 73 3d 63 29 3a 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2e 61 70 70 6c 79 28 74 2c 5b 5d 29 29 7c 7c 28 65 2e 65 78 70 6f 72 74 73 3d 6e 29 7d 28 29 7d 2c 36 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 27 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 70 75 62 6c 69 63 5f 70 61 74 68 5f 5f 20 2b 20 22 2e 2e 2f 68 74 6d 6c 2f 6e 61 76 69 67 61 74 69 6f 6e 2e 68 74 6d 6c 22 3b 27 7d 7d 2c 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 72 28 65 29 7b 69 66 28 72 5b 65 5d 29 Data Ascii: sh(o)}}return e.join(" ")}e.exports?(c.default=c,e.exports=c):void 0===(n=function(){return c}.apply(t,[]))\|\|(e.exports=n)}()},635:function(e){e.exports='module.exports = __webpack_public_path__ + "../html/navigation.html";'}},r={};function Kr(e){if(r[e])
2024-08-03 22:41:29 UTC	538	IN	Data Raw: 61 76 2d 68 6f 6d 65 22 2c 69 63 6f 6e 43 6c 61 73 73 3a 22 69 63 6f 6e 2d 6e 61 76 2d 68 6f 6d 65 22 2c 6e 61 6d 65 3a 22 68 6f 6d 65 22 2c 6c 61 62 65 6c 54 72 61 6e 73 6c 61 74 69 6f 6e 4b 65 79 3a 22 4c 61 62 65 6c 2e 73 48 6f 6d 65 22 7d 2c 70 72 6f 66 69 6c 65 3a 7b 75 72 6c 3a 53 28 22 2f 75 73 65 72 73 2f 22 2e 63 6f 6e 63 61 74 28 64 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 55 73 65 72 2e 69 64 2c 22 2f 70 72 6f 66 69 6c 65 22 29 29 2c 69 64 53 65 6c 65 63 74 6f 72 3a 22 6e 61 76 2d 70 72 6f 66 69 6c 65 22 2c 69 63 6f 6e 43 6c 61 73 73 3a 22 69 63 6f 6e 2d 6e 61 76 2d 70 72 6f 66 69 6c 65 22 2c 6e 61 6d 65 3a 22 70 72 6f 66 69 6c 65 22 2c 6c 61 62 65 6c 54 72 61 6e 73 6c 61 74 69 6f 6e 4b 65 79 3a 22 4c 61 62 65 6c 2e 73 50 72 6f 66 69 6c 65 22 Data Ascii: av-home",iconClass:"icon-nav-home",name:"home",labelTranslationKey:"Label.sHome"},profile:{url:S("/users/".concat(d.authenticatedUser.id,"/profile")),idSelector:"nav-profile",iconClass:"icon-nav-profile",name:"profile",labelTranslationKey:"Label.sProfile"
2024-08-03 22:41:29 UTC	4744	IN	Data Raw: 74 73 22 29 2c 69 64 53 65 6c 65 63 74 6f 72 3a 22 6e 61 76 2d 66 72 69 65 6e 64 73 22 2c 69 63 6f 6e 43 6c 61 73 73 3a 22 69 63 6f 6e 2d 6e 61 76 2d 66 72 69 65 6e 64 73 22 2c 6e 61 6d 65 3a 22 66 72 69 65 6e 64 73 22 2c 6c 61 62 65 6c 54 72 61 6e 73 6c 61 74 69 6f 6e 4b 65 79 3a 22 4c 61 62 65 6c 2e 73 46 72 69 65 6e 64 73 22 7d 2c 61 76 61 74 61 72 3a 7b 75 72 6c 3a 53 28 22 2f 6d 79 2f 61 76 61 74 61 72 22 29 2c 69 64 53 65 6c 65 63 74 6f 72 3a 22 6e 61 76 2d 63 68 61 72 61 63 74 65 72 22 2c 69 63 6f 6e 43 6c 61 73 73 3a 22 69 63 6f 6e 2d 6e 61 76 2d 63 68 61 72 61 63 74 65 72 63 75 73 74 6f 6d 69 7a 65 72 22 2c 6e 61 6d 65 3a 22 61 76 61 74 61 72 22 2c 6c 61 62 65 6c 54 72 61 6e 73 6c 61 74 69 6f 6e 4b 65 79 3a 22 4c 61 62 65 6c 2e 73 41 76 61 74 61 Data Ascii: ts"),idSelector:"nav-friends",iconClass:"icon-nav-friends",name:"friends",labelTranslationKey:"Label.sFriends"},avatar:{url:S("/my/avatar"),idSelector:"nav-character",iconClass:"icon-nav-charactercustomizer",name:"avatar",labelTranslationKey:"Label.sAvata
2024-08-03 22:41:29 UTC	5930	IN	Data Raw: 73 73 4e 61 6d 65 3a 6f 7d 29 29 2c 55 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 66 6f 6e 74 2d 68 65 61 64 65 72 2d 32 20 64 79 6e 61 6d 69 63 2d 65 6c 6c 69 70 73 69 73 2d 69 74 65 6d 22 7d 2c 74 28 69 29 29 29 29 3a 55 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 2c 7b 6b 65 79 3a 61 7d 2c 55 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 76 2e 4c 69 6e 6b 2c 7b 75 72 6c 3a 63 2c 69 64 3a 6e 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 64 79 6e 61 6d 69 63 2d 6f 76 65 72 66 6c 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 20 74 65 78 74 2d 6e 61 76 22 7d 2c 55 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6e 75 6c 6c 2c 55 28 29 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: ssName:o})),U().createElement("span",{className:"font-header-2 dynamic-ellipsis-item"},t(i)))):U().createElement("li",{key:a},U().createElement(v.Link,{url:c,id:n,className:"dynamic-overflow-container text-nav"},U().createElement("div",null,U().createElem
2024-08-03 22:41:29 UTC	7116	IN	Data Raw: 69 6e 67 2c 49 65 3d 62 2c 6b 65 3d 45 2c 4e 65 3d 4f 2c 6a 65 3d 77 2c 52 65 3d 61 2c 54 65 3d 72 2c 50 65 3d 21 64 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 55 73 65 72 2e 69 73 41 75 74 68 65 6e 74 69 63 61 74 65 64 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 64 2e 61 75 74 68 65 6e 74 69 63 61 74 65 64 55 73 65 72 2e 63 72 65 61 74 65 64 3b 72 65 74 75 72 6e 20 4a 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 64 61 74 61 2e 76 65 72 69 66 69 65 64 3b 72 65 74 75 72 6e 20 74 3d 72 2c 65 3d 6e 2c 6e 3d 6e 65 77 20 44 61 74 65 2c 74 3d 6e 65 77 20 44 61 74 65 28 74 29 2c 2b 28 52 65 3c 28 6e 2d 74 29 2f 38 36 34 65 35 26 26 21 65 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: ing,Ie=b,ke=E,Ne=O,je=w,Re=a,Te=r,Pe=!d.authenticatedUser.isAuthenticated,S=function(){var r=d.authenticatedUser.created;return J().then(function(e){var t,n=e.data.verified;return t=r,e=n,n=new Date,t=new Date(t),+(Re<(n-t)/864e5&&!e)}).catch(function(e){
2024-08-03 22:41:29 UTC	8302	IN	Data Raw: 6f 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 63 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 72 3d 28 69 3d 63 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6e 2e 70 75 73 68 28 69 2e 76 61 6c 75 65 29 2c 21 74 7c 7c 6e 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 72 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 61 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 7c 7c 6e 75 6c 6c 3d 3d 63 2e 72 65 74 75 72 6e 7c 7c 63 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f Data Ascii: o=void 0;try{for(var i,c=e[Symbol.iterator]();!(r=(i=c.next()).done)&&(n.push(i.value),!t\|\|n.length!==t);r=!0);}catch(e){a=!0,o=e}finally{try{r\|\|null==c.return\|\|c.return()}finally{if(a)throw o}}return n}(e,t)\|\|function(e,t){if(!e)return;if("string"==typeo
2024-08-03 22:41:29 UTC	9488	IN	Data Raw: 63 6f 6d 70 6c 65 74 65 55 72 6c 4c 6f 63 61 74 69 6f 6e 73 3a 5b 22 43 61 74 61 6c 6f 67 22 2c 22 54 72 61 64 65 73 22 2c 22 49 6e 76 65 6e 74 6f 72 79 22 2c 22 41 76 61 74 61 72 22 2c 22 43 61 74 61 6c 6f 67 49 74 65 6d 22 5d 2c 61 76 61 74 61 72 41 75 74 6f 63 6f 6d 70 6c 65 74 65 53 75 67 67 65 73 74 69 6f 6e 4c 69 6d 69 74 3a 35 2c 69 73 53 70 65 63 69 61 6c 54 72 65 61 74 6d 65 6e 74 41 75 74 6f 63 6f 6d 70 6c 65 74 65 52 65 73 74 72 69 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 3d 3d 3d 70 61 72 73 65 49 6e 74 28 76 74 28 29 2e 64 61 74 61 73 65 74 2e 6e 75 6d 62 65 72 4f 66 41 75 74 6f 63 6f 6d 70 6c 65 74 65 53 75 67 67 65 73 74 69 6f 6e 73 2c 31 30 29 26 26 46 2e 6d 69 73 63 53 65 61 72 63 68 4c 69 6e 6b 2e 72 65 64 Data Ascii: completeUrlLocations:["Catalog","Trades","Inventory","Avatar","CatalogItem"],avatarAutocompleteSuggestionLimit:5,isSpecialTreatmentAutocompleteRestricted:function(){return 7===parseInt(vt().dataset.numberOfAutocompleteSuggestions,10)&&F.miscSearchLink.red
2024-08-03 22:41:29 UTC	10674	IN	Data Raw: 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 76 61 72 20 48 74 3d 46 2e 67 61 6d 65 53 65 61 72 63 68 4c 69 6e 6b 2c 57 74 3d 46 2e 61 76 61 74 61 72 53 65 61 72 63 68 4c 69 6e 6b 2c 58 74 3d 46 2e 63 72 65 61 74 6f 72 4d 61 72 6b 65 74 70 6c 61 63 65 55 72 6c 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 72 61 6e 73 6c 61 74 65 2c 6e 3d 65 2e 73 65 6c 65 63 74 65 64 2c 72 3d 65 2e 73 75 67 67 65 73 74 69 6f 6e 2c 61 3d 65 2e 6f 6e 43 6c 69 63 6b 2c 6f 3d 68 28 29 28 22 6e 61 76 62 61 72 2d 73 65 61 72 63 68 2d 6f 70 74 69 6f 6e 20 72 62 78 2d 63 6c 69 63 6b 61 62 6c 65 2d 6c 69 22 2c 7b 22 6e 65 77 2d 73 65 6c 65 63 74 65 64 22 3a 6e 7d 29 2c 69 3d 72 2e 74 79 70 Data Ascii: Array(t);n<t;n++)r[n]=e[n];return r}var Ht=F.gameSearchLink,Wt=F.avatarSearchLink,Xt=F.creatorMarketplaceUrl;function Jt(e){var t=e.translate,n=e.selected,r=e.suggestion,a=e.onClick,o=h()("navbar-search-option rbx-clickable-li",{"new-selected":n}),i=r.typ
2024-08-03 22:41:29 UTC	11860	IN	Data Raw: 6a 65 63 74 28 65 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 65 29 7c 7c 6d 6e 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 66 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 Data Ascii: ject(e))return Array.from(e)}(e)\|\|mn(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function fn(e,t){return function(e){if(Array

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:29 UTC	721	OUT	GET /privateJs/Security.js HTTP/1.1 Host: roblox.com.zm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:29 UTC	668	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:28 GMT Content-Type: application/javascript Content-Length: 48 Eggy-Wall: 3.0 Strict-Transport-Security: max-age=604800; includeSubdomains Last-Modified: Tue, 16 Jul 2024 09:26:57 GMT Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} X-Frame-Options: SAMEORIGIN Etag: "30-61d59f27c3df8" Access-Control-Allow-Credentials: true Accept-Ranges: bytes Cross-Origin-Opener-Policy: same-origin-allow-popups Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Connection: close
2024-08-03 22:41:29 UTC	48	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 48 6f 73 74 28 29 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 0a 7d Data Ascii: function Host(){ return location.hostname;}

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:30 UTC	448	OUT	GET /v1/thumbnails/metadata HTTP/1.1 Host: roblox.com.zm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:30 UTC	583	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:29 GMT Content-Type: application/json; charset=utf-8 Content-Length: 18 Eggy-Wall: 3.0 Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} X-Frame-Options: SAMEORIGIN Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Strict-Transport-Security: max-age=604800; includeSubdomains Access-Control-Allow-Credentials: true Cross-Origin-Opener-Policy: same-origin-allow-popups Connection: close
2024-08-03 22:41:30 UTC	18	IN	Data Raw: 0a 7b 22 6c 6f 67 52 61 74 69 6f 22 3a 30 2e 30 35 7d Data Ascii: {"logRatio":0.05}

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:41:30 UTC	720	OUT	GET /privateJs/Profile.js HTTP/1.1 Host: roblox.com.zm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://roblox.com.zm/games/10449761463/The-Strongest-Battlegrounds?privateServerLinkCode=22919554639422626360922039380445 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EggyWall_Token=255e75a0832228af75e0536a55692e628ed37c257b6fe8a27eb2f73f36015724
2024-08-03 22:41:30 UTC	699	IN	HTTP/1.1 200 OK Server: Apache/2.4.41 (Ubuntu) Date: Sat, 03 Aug 2024 22:41:29 GMT Content-Type: application/javascript Content-Length: 1987 Eggy-Wall: 3.0 Access-Control-Allow-Credentials: true Etag: "7c3-61d59f27c3df8-gzip" Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} X-Frame-Options: SAMEORIGIN Cross-Origin-Opener-Policy: same-origin-allow-popups Vary: Accept-Encoding Last-Modified: Tue, 16 Jul 2024 09:26:57 GMT Strict-Transport-Security: max-age=604800; includeSubdomains Accept-Ranges: bytes Nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1} Connection: close
2024-08-03 22:41:30 UTC	487	IN	Data Raw: 76 61 72 20 4c 6f 6f 70 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 0a 20 20 20 20 76 61 72 20 50 65 6f 70 6c 65 4c 69 73 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 78 73 20 62 74 6e 2d 6d 6f 72 65 20 73 65 65 2d 61 6c 6c 2d 6c 69 6e 6b 2d 69 63 6f 6e 20 6e 67 2d 62 69 6e 64 69 6e 67 22 29 5b 30 5d 3b 0a 20 20 20 20 69 66 28 50 65 6f 70 6c 65 4c 69 73 74 29 7b 0a 20 20 20 20 20 20 20 20 50 65 6f 70 6c 65 4c 69 73 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 50 65 6f 70 6c 65 4c 69 73 74 43 6f 75 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 Data Ascii: var Loop = setInterval(function(){ var PeopleList = document.getElementsByClassName("btn-secondary-xs btn-more see-all-link-icon ng-binding")[0]; if(PeopleList){ PeopleList.removeAttribute("href"); } var PeopleListCount = document
2024-08-03 22:41:30 UTC	1500	IN	Data Raw: 73 4e 61 6d 65 28 22 62 74 6e 2d 66 69 78 65 64 2d 77 69 64 74 68 20 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 78 73 20 62 74 6e 2d 6d 6f 72 65 20 73 65 65 2d 61 6c 6c 2d 6c 69 6e 6b 2d 69 63 6f 6e 22 29 5b 30 5d 3b 0a 20 20 20 20 69 66 28 42 61 64 67 65 73 29 7b 0a 20 20 20 20 20 20 20 20 42 61 64 67 65 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 4c 6f 67 69 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 72 62 78 2d 6e 61 76 62 61 72 2d 6c 6f 67 69 6e 20 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 73 6d 20 6e 61 76 2d 6d 65 6e 75 2d 74 69 74 6c 65 20 72 62 78 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 5b 30 5d 3b 0a 20 20 Data Ascii: sName("btn-fixed-width btn-secondary-xs btn-more see-all-link-icon")[0]; if(Badges){ Badges.removeAttribute("href"); } var Login = document.getElementsByClassName("rbx-navbar-login btn-secondary-sm nav-menu-title rbx-menu-item")[0];