Summary
A Concise Overview of the scan result of url https://www.roblox.com/login?returnUrl=https%3A%2F%2Fwww.roblox.com%2Fshare-links%3Fcode%3D9d7252bdb989f945ad03244d77ac1a1c%26type%3DServer%26pid%3DServer%26is_retargeting%3Dfalse%26af_dp%3Droblox%253A%252F%252Fnavigation%252Fshare_links%253Fcode%253D9d7252bdb989f945ad03244d77ac1a1c%2526type%253DServer%26deep_link_value%3Droblox%253A%252F%252Fnavigation%252Fshare_links%253Fcode%253D9d7252bdb989f945ad03244d77ac1a1c%2526type%253DServer
- Document
- HTML
- 12
- StyleSheets
- 30
- Scripts
- 119
- Font
- 0
- Images
- 8
- Links
- 2
- JavaScript Variables
- 82
- Console log messages
- 0
- Network
- Requests
- 194
- Bytes Transferred
- 3.73MB
- Bytes Total
- 16.31MB
- DNS Record
- CNAME Record
- 6
- A Record
- 1
- Technology
- Reverse proxies
- 1
- PaaS
- 1
- JavaScript frameworks
- 2
- Security
- 1
- CDN
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|---|
| https://create.roblox.com/ | Create |
| https://create.roblox.com/store/models?keyword= | in Creator Store |
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| JavaScript frameworks | ||
React | React is an open-source JavaScript library for building user interfaces or UI components. | Type: html Regex: <[^>]{1,250}data-react |
AngularJS | AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google. | Type: html Regex: <(?:div|html)[^>]{1,250}ng-app= |
| Security | ||
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| CDN | ||
Amazon S3 | Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. | Type: headers Name: server Regex: s3[^ ]{0,250}amazonaws\.com |
| PaaS | ||
Amazon Web Services | Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | Dependent on Amazon S3 |
| Reverse proxies | ||
| Envoy is an open-source edge and service proxy, designed for cloud-native applications. | Type: headers Name: x-envoy-upstream-service-time Regex: (?:) | |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 1 msGood
- requestTime
- 5 msGood
- dom
- 1780 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | www.roblox.com | titanium.roblox.com. | no |
| CNAME | titanium.roblox.com | edge-term4.roblox.com. | no |
| CNAME | edge-term4.roblox.com | edge-term4-sea1.roblox.com. | no |
| A | edge-term4-sea1.roblox.com | 128.116.115.3 | no |
| CNAME | www.roblox.com | titanium.roblox.com. | no |
| CNAME | titanium.roblox.com | edge-term4.roblox.com. | no |
| CNAME | edge-term4.roblox.com | edge-term4-sea1.roblox.com. | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
www.roblox.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
css.rbxcdn.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
static.rbxcdn.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
js.rbxcdn.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
images.rbxcdn.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
roblox.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
metrics.roblox.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
apis.roblox.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
ecsv2.roblox.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
o293668.ingest.us.sentry.io | 9/22/2026 | 9/23/2027 | 1 year 1 day |
apis.rbxcdn.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
locale.roblox.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
auth.roblox.com | 9/22/2026 | 9/23/2027 | 1 year 1 day |
client.px-cloud.net | 9/22/2026 | 9/23/2027 | 1 year 1 day |
ift.px-cloud.net | 9/22/2026 | 9/23/2027 | 1 year 1 day |
collector-pxbf8propw.px-cloud.net | 9/22/2026 | 9/23/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| cache-control | no-store, must-revalidate, no-cache |
| content-encoding | br |
| content-security-policy | report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' apis.roblox.com roblox.com apis.robloxapp.vnggames.com arkoselabs.robloxapp.vnggames.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com challenges.cloudflare.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com js.stripe.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com arkoselabs.roblox.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com client-api.arkoselabs.com api.arkoselabs.com *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com cdn.safecharge.com *.px-cloud.net *.px-cdn.net; img-src 'self' data: *.cloudfront.net *.gilcdn.com *.gldcdn.com *.google-analytics.com *.google.com *.kaptcha.com *.openstreetmap.org *.rblx.org *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat *.stripe.com *.tarobicdn.com *.tarobidevsandboxcdn.com www.facebook.com *.snapchat.com *.safecharge.com; connect-src 'self' *.roblox.com *.robloxlabs.com *.rblx.org *.rbx.com *.rbxcdn.com *.roblox.cn *.robloxapp.vnggames.com *.simulpong.com *.lightstep.com *.ns1p.net *.arkoselabs.com *.kaptcha.com *.google.com *.google-analytics.com *.doubleclick.net *.sentry.io wss://realtime.roblox.com wss://realtime.sitetest1.robloxlabs.com wss://realtime.sitetest2.robloxlabs.com wss://realtime.sitetest3.robloxlabs.com wss://realtime-signalr.roblox.com wss://realtime-signalr.robloxapp.vnggames.com *.braintree-api.com *.braintreegateway.com d1q2u37vreaobr.cloudfront.net funcaptcha.com robloxcorp.s.llnwi.net roblox-poc.global.ssl.fastly.net d1unuk07s6td74.cloudfront.net *.sierra.chat sierra.chat sc-static.net *.sc-static.net *.snapchat.com *.tapad.com analytics.tiktok.com *.safecharge.com *.px-cloud.net *.px-cdn.net *.pxchk.net *.px-client.net *.perimeterx.net; |
| content-type | text/html; charset=utf-8 |
| cross-origin-opener-policy | same-origin-allow-popups |
| date | Wed, 23 Sep 2026 21:28:31 GMT |
| nel | {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1} |
| report-to | {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]} |
| roblox-machine-id | 1c84ba17-6bae-6de9-ac38-e573cafec4e7 |
| server | public-gateway |
| strict-transport-security | max-age=31536000 max-age=3600 |
| transfer-encoding | chunked |
| vary | Accept-Encoding |
| x-envoy-attempt-count | 1 |
| x-envoy-upstream-service-time | 30 |
| x-frame-options | SAMEORIGIN |
| x-ratelimit-limit | 50, 50;w=60 |
| x-ratelimit-remaining | 49 |
| x-ratelimit-reset | 29 |
| x-roblox-edge | c088 |
| x-roblox-region | us-central_rbx |
| x-terms-message | Terms apply https://rblx.co/TOU. |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|---|
| report-uri | https://metrics.roblox.com/v1/csp/report?type=enforce |
| upgrade-insecure-requests | |
| script-src'self''unsafe-inline''wasm-unsafe-eval'apis.roblox.comroblox.comapis.robloxapp.vnggames.comarkoselabs.robloxapp.vnggames.com*.evidon.com*.gigya.com*.google-analytics.com*.ns1p.netadservice.google.comchallenges.cloudflare.comcdn.arkoselabs.comconnect.facebook.netfuncaptcha.comjs.rbxcdn.comjs.stripe.comlong.open.weixin.qq.commidas.gtimg.cnradar.cedexis.comres.wx.qq.comroblox-api.arkoselabs.comarkoselabs.roblox.comroblox-load-generator-configuration.s3.us-east-2.amazonaws.coms.ytimg.comsb.scorecardresearch.comstatic.rbxcdn.comwww.google.comwww.gstatic.comwww.youtube.comh.online-metrix.netrequest.eprotect.vantivcnp.comrequest.eprotect.vantivpostlive.com*.googletagmanager.com*.googleadservices.comgoogleads.g.doubleclick.netcdn.veriff.me*.lightstep.comclient-api.arkoselabs.comapi.arkoselabs.com*.sierra.chatsierra.chatsc-static.net*.sc-static.net*.snapchat.com*.tapad.comanalytics.tiktok.comcdn.safecharge.com*.px-cloud.net*.px-cdn.net | |
| img-src'self'data:*.cloudfront.net*.gilcdn.com*.gldcdn.com*.google-analytics.com*.google.com*.kaptcha.com*.openstreetmap.org*.rblx.org*.rbxcdn.com*.roblox.com*.robloxlabs.comgoogleads.g.doubleclick.neti.ytimg.comwww.googletagmanager.comrobloxcorp.s.llnwi.netroblox-poc.global.ssl.fastly.netd1unuk07s6td74.cloudfront.net*.sierra.chatsierra.chat*.stripe.com*.tarobicdn.com*.tarobidevsandboxcdn.comwww.facebook.com*.snapchat.com*.safecharge.com | |
| connect-src'self'*.roblox.com*.robloxlabs.com*.rblx.org*.rbx.com*.rbxcdn.com*.roblox.cn*.robloxapp.vnggames.com*.simulpong.com*.lightstep.com*.ns1p.net*.arkoselabs.com*.kaptcha.com*.google.com*.google-analytics.com*.doubleclick.net*.sentry.iowss://realtime.roblox.comwss://realtime.sitetest1.robloxlabs.comwss://realtime.sitetest2.robloxlabs.comwss://realtime.sitetest3.robloxlabs.comwss://realtime-signalr.roblox.comwss://realtime-signalr.robloxapp.vnggames.com*.braintree-api.com*.braintreegateway.comd1q2u37vreaobr.cloudfront.netfuncaptcha.comrobloxcorp.s.llnwi.netroblox-poc.global.ssl.fastly.netd1unuk07s6td74.cloudfront.net*.sierra.chatsierra.chatsc-static.net*.sc-static.net*.snapchat.com*.tapad.comanalytics.tiktok.com*.safecharge.com*.px-cloud.net*.px-cdn.net*.pxchk.net*.px-client.net*.perimeterx.net |
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| rbx-ip2 | 1 | .roblox.com/ | 9/23/2026, 10:28:31 PM | no | no |
| RBXEventTrackerV2 | CreateDate=09/23/2026 16:28:31&rbxid=&rbxuid=&browserid=1790198911928011 | .roblox.com/ | 10/28/2027, 9:28:31 PM | no | no |
| GuestData | UserID=-547440617 | .roblox.com/ | 10/28/2027, 9:28:31 PM | no | no |
| RBXPaymentsFlowContext | 64af5acd-e561-4926-99a7-8a78dd89f9d0, | .roblox.com/ | 9/23/2026, 9:38:34 PM | no | no |
| _pxvid | bebfd1a8-b795-11f1-a1e0-27871cce2e84 | .roblox.com/ | 9/23/2027, 9:28:40 PM | yes | no |
| _px3 | 3584c43870f6dd79da49e64b609816d1c314629f17b527aff22042271fc25168:BTPZWpgyBi51FQj3QCoaw3NXO0MZQ7q1PTOvpE9yAGZSzsW3tJOEvo9Uw5yBum4v0VScaBpLuuAcWt7XCfU3hA==:1000:sMJpBieSA+V2PLfBJj/Qrbslg8E5Ob0/lpIRKUbe5EtanASkzeViAxzwbzciV7KDpADDHUx9t59xHsZRpWR/MYFzPDtKs8yQ2kiI0gR7p7tJS3ewcjOI8gIYHJVRQya2IcYdKReGk8feOgwiH+Tv6ryIcgtEiAlT2K5C1QMfLBvVyRZIWVzShFvTs8g3fJFUBiA5cBQDkrKelNjih1cnAvfwUEfuat0ZcUQ83alAEd7OPd0YADjENzhHMYajmBfLbHIgCe0X6K1HR05H8HiO+VsR80J3wab+i+ZBIiSnwWSwK6rFFL6w5GUJKm9hD4bymhp3UEH4m1hJcHPWvn86/wdodH5uujEHYMi662Nf/9g3PIAGlIUrMcNhJUXU/T1W1YP8XLE6xrL7d6iHKDkedWSF5ONDw4gNgYTlYUhQLSPxI0qsz6QzMLJirfVRRVPVx5/jQjpv1hlZIQkodUd2jE8n/dQ/gloXTg3Yh1FYGoo= | .roblox.com/ | 9/23/2026, 9:34:12 PM | yes | no |
| pxcts | 0Ioo1IJwtSkxEU8UZIc/HYT/F1F1VeceSeyCmHRYv2A=:HtYy-TzPX8pz2acxE1RhZhanBjFD6UzmiKCF7tz/C6lH2jiuhfgeGR4aBUyOvho423HwI1NtgfIYzuNVCBoUtgR2XpVrEqKEwsWo9OJQ2W4sfC-3WKAKG6H5LVv2LwPLTJfwa8gVR2I8/0Gb0p1Et1lRuIfCtpSAefCsd60/lkteoBWtjKpJ9VhXuAYzob3z | .roblox.com/ | 12/31/1969, 11:59:59 PM | yes | no |