{"report_id":"0777e596-cdd2-4adb-8a8b-d540d0921c1d","version":0,"status":"done","tags":[],"date":"2026-06-28T12:14:46Z","url":{"schema":"https","addr":"rbxswitch.com","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rbxswitch.com/","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"title":"RbxSwitch - open several Roblox accounts at once","dom":{"size":341641,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (43916)","md5":"e528ca5f3d9911df6deee7e912f273f0","sha1":"a7e7e9e62f5062f317f39f3ddac662e2bc56e799","sha256":"f23c4badf3c499b467800cc3365d7cfbade6a30b342ffe15b6e57ff769790fd6","sha512":"371102b0b344c6daa45d7bf94db21ae787cea80bcf8562f48744b6c1c5c61bf6614354aa3349d42c9cc1e22029b24ef5200ececb517345528a2d7f59e8f348e3","ssdeep":"6144:mSPH5KIOYV6CtSUJqPHFq0AzCwN1ac2UX+EZJ1T3xt:Nv5GcShk0AzRNZTXJb1T3xt","tlshash":"3a7402daa224213f115b89d9bf93a7dc3539e24be90e61d8f62e41414bcfee01d6f484","dom_hash":"domhashfddee6290484c23b8207545092cd4306","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rbxswitch.com","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T12:14:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rbxswitch.com","ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":11,"request_count":11,"received_data":456614,"sent_data":5392,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tr.rbxcdn.com","ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-07-17","domain_rank":26027,"first_seen":"2019-05-23T12:45:13Z","last_seen":"2026-06-27T10:30:24.964777Z","alert_count":0,"request_count":4,"received_data":422205,"sent_data":2340,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":2,"received_data":24578,"sent_data":1210,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":10,"received_data":350418,"sent_data":5756,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rbxswitch.com/extension/accounts-ui.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac503ec6482134972f504e869dca5893","sha1":"537afa7790c75d288bb420506d685c090a71256e","sha256":"481b10e9efe359f32b0e3b07b0ce6fb35cf4701cc6503b1994ef03bb4bd35fdb","sha512":"695759aefbabcd4120e5d921dfc288f14de04e6da3a9df65e866bcc63458f204aafc5dc68d6c9bd9a85a89b178c3f941181d9805c0c47f95d8d1e7c047982536","ssdeep":"192:5wMaLdbr9bbLga9hmxKpdCriCo5/+K4mzQkCcW+3NISLBUKe79qYRtIrpXZZQ6WI:50y/KOrpLn++8v3GVtNkbWOdBRR","tlshash":"2f62966e2db32036453be6b6a7af6aa5f03500171005c4d8bccdd6181f6076466ff9ee","size":15791,"data":"","first_seen":"2026-06-28T12:14:51.424393Z","last_seen":"2026-06-28T12:14:51.424393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/popup.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa61a225c087c799a6d979351b7b9114","sha1":"65443a6c33b613c5ed038629a853d088d62c1b3e","sha256":"5f56f3d7d151c046d0bed0c52f032ebbfcbf33f8899fe8d98198053f1da8b682","sha512":"c9644320c63a023d663223687545bb66ed64a1469e2b7ef573bd761b10b579e182bf1569c3a015bbe89d3ee114251a240baff35c3c3ddfae71ce284b7be35332","ssdeep":"","tlshash":"f66141bf65f92272466360b8179fb2c67326400330a6c4047d9de2881f61f3596a3dea","size":3259,"data":"","first_seen":"2026-06-28T12:14:51.421049Z","last_seen":"2026-06-28T12:14:51.421049Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cf1546afa7fd8fe00280aa125b93236","sha1":"1f71bffbfaffeac96807fc163bd7111e4e053ebc","sha256":"e25845932183e433149f316d0d9613ca6947b758db5beb791a13193955e82bfb","sha512":"90dcfd98c632b830d216ca88dab34c43e0a2f1e0aff9ef55e142e4c22fd1852e736050982c80f5ca719af4fe217cc648aa9b8659a5a75b078952a3bd179e57ab","ssdeep":"192:/QuMPUQrL6uvDCDs3BEccKIwNZnnzfBeQaV0WmuaQahtaf9Zxrlxi5uGW28:/QUavrCDcBEccKhpnUQYmuaQaCfU8T","tlshash":"76e1727bb912343784eb32f666ef7388387220536c42d8407d1c84c52fadd5925beada","size":7404,"data":"","first_seen":"2026-06-28T12:14:51.428016Z","last_seen":"2026-06-28T12:14:51.428016Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/analytics.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0ce01b00ed5e7d666b86b8e1a7df500","sha1":"72834f23a523070490cb5291883ff95c1715b315","sha256":"931bb891c5b757116ff1c7d439967ae641a4b405c3b48b4dad54ce3ae17188ec","sha512":"a430662c533d29079c5e086776d38bc2f4a17ebf7f9fba7c3e3b8100dc1ee0f5c723d93b3e395cfc7a379d7e94d53d8686a1785d8cd83cbab1c872ec5f779c37","ssdeep":"","tlshash":"7f5101ad78f7a0a40423703d4aaf7606b2278153149ddd607d5cd8217f64b1902babef","size":2613,"data":"","first_seen":"2026-06-28T12:14:51.400915Z","last_seen":"2026-06-28T12:14:51.400915Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/chrome-mock.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fcd17935e69ddecdb50f4ce93363b5a","sha1":"c7817710b33b0cf174ff0b97184d30cdeec3d7eb","sha256":"b0823f56b7ea63cfa989241644fc27cc2a7beec3ac34ecc2da0348fda0d3b6cc","sha512":"e693ffe2d6fc58b749f204d5262d3a149953db8a55e5e2c80a535b0480569c43a09feb057a8a799359df70119fd83771f934f97e324cccf57ea4a45f2d227078","ssdeep":"96:amk8PeEGEaO8U6BMum/nJZTl/oAj88cBYbVPtJa21FlFRjg0:axty8U6uJvTX886YbNba2/lN","tlshash":"589150df5cb7004167a27df4ec0fa19a6e39405308699511fe8d808c9f2673a92fb9ed","size":4460,"data":"","first_seen":"2026-06-28T12:14:51.405867Z","last_seen":"2026-06-28T12:14:51.405867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.384Z","timestamp":1782648862384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/api/analytics/event","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:22.282Z","timestamp":1782648862282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"POST /api/analytics/event HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://rbxswitch.com/\r\nContent-Length: 106\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rbx_vid=9598c55a-e16f-43da-91ad-d64a579399be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Visitor-Id\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrcGoLkI3R4P3u0SZuQlv9arvGEzNKMwlC73N1QdFCcz0KMPvLfNv0Ze78Zc59LlDHTRA64T4B8Ee%2FFofh0BPxax3PPijpxJhTVVX7q99IRuzDDvG1emspd6HdaYiAyA\"}]}\r\ncontent-length: 11\r\ncf-ray: a12c9c5d4effb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":846,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-07-17T15:17:33.316208Z","times_seen":15934,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/30DAY-AvatarHeadshot-B825C6C32B6934252E31B11D7D954150-Png/420/420/AvatarHeadshot/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.375Z","timestamp":1782648862375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /30DAY-AvatarHeadshot-B825C6C32B6934252E31B11D7D954150-Png/420/420/AvatarHeadshot/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 37244\r\ndate: Thu, 25 Jun 2026 16:28:56 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 30DAY-AvatarHeadshot-B825C6C32B6934252E31B11D7D954150-Png\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 7ccbff41-7818-2a30-5195-5ceff906911d\r\nx-envoy-upstream-service-time: 139\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 287573\r\nx-ratelimit-reset: 4\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d51c70081a09a7d0c27ac92d2b36e5da.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: X4YcWLx56oBi5RQT7UDE8h4qZinOH3Ta6ONXPssB72TCCKPTbW4qjg==\r\nage: 243925\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN56-P4\",cdn-rid;desc=\"X4YcWLx56oBi5RQT7UDE8h4qZinOH3Ta6ONXPssB72TCCKPTbW4qjg==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=22\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":37244,"size_decoded":38546,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit/color RGBA, non-interlaced","md5":"d591c4ead5f3b5b57fcf1de4d25a0b11","sha1":"13c39de1c3104cc22542bbcc66b7dc3ac61f859d","sha256":"1d681555b4c5c9cd8adee4b2ee9439d1edb9f8d0719045b930c754ba6dba68ee","sha512":"6890b981556a254f16b83e0782516e592885ea1993e8cec68db6614b62b99334da49f9c40bbab06326087a19d689000e5e1e33015d67eccbd3571f7bf9bca453","ssdeep":"768:BAn5IwXyMcR+k6U/7zfBsCefTvlgisSHetH4eQU8jxfFgX318oWbvc:BEGwXZcR+kP3fqNlgisyre0xNqtWbvc","tlshash":"70f2e16166fad936dc0c4b778770e56975b2b84f1c4c790cb326b496ee800f39391a13","first_seen":"2026-06-28T12:14:51.392124Z","last_seen":"2026-06-28T12:14:51.392124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":32,"receive":1,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.389Z","timestamp":1782648862389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.393Z","timestamp":1782648862393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:22.153Z","timestamp":1782648862153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 06:03:11 GMT\r\nexpires: Fri, 25 Jun 2027 06:03:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281471\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-17T16:07:59.747684Z","times_seen":10242,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:22.158Z","timestamp":1782648862158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/30DAY-AvatarHeadshot-7A7709729456A2DE8059AE2FCBFFCF78-Png/420/420/AvatarHeadshot/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.373Z","timestamp":1782648862373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /30DAY-AvatarHeadshot-7A7709729456A2DE8059AE2FCBFFCF78-Png/420/420/AvatarHeadshot/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 90907\r\ndate: Thu, 25 Jun 2026 16:28:57 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 30DAY-AvatarHeadshot-7A7709729456A2DE8059AE2FCBFFCF78-Png\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 53db8de9-601f-1091-0968-07303860709c\r\nx-envoy-upstream-service-time: 649\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60, 70000\r\nx-ratelimit-remaining: 262720, 70000\r\nx-ratelimit-reset: 4, 0\r\nx-ingress-proxy: true\r\nx-roblox-edge: c088\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d51c70081a09a7d0c27ac92d2b36e5da.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: uKlx11kQU11_Ij5xzjjEj8F0QpHsIQoCFj75JF1Bbo3fnIV7BpJe1w==\r\nage: 243925\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN56-P4\",cdn-rid;desc=\"uKlx11kQU11_Ij5xzjjEj8F0QpHsIQoCFj75JF1Bbo3fnIV7BpJe1w==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":90907,"size_decoded":92226,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit/color RGBA, non-interlaced","md5":"2c0c2f5351129a2eda58966752a2ab46","sha1":"fb4e0e8dd08834c45cf5e6667c808b9613ad01ae","sha256":"6b5a1313576baf449dbb51bba63a56acd64956cff409156db90f07d56ac9bafe","sha512":"10b7ced42487d1295c943966cb25084f0f5451ee86f5285c380f7dc6fe77f07618c92b369b3d05ffc710e548fba5d4e37eba4aef8a16467bb3ccfd3efe7e967b","ssdeep":"1536:3Gn7vNU0Jom9Biz/1XsQ3w7MF7wZ2OFecY0SMHy/ROUd0jjbLfq0Mk9A/lnTzzkd:Wn7vH9ILg7MVwZvFe5iypL0jrfCgA5kd","tlshash":"4d9302fbb4921a70c79c028c486ea7361ca444608700e8777eca65296f1ffeb8564dfd","first_seen":"2026-06-28T12:14:51.396572Z","last_seen":"2026-06-28T12:14:51.396572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":33,"receive":16,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/analytics.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:21.961Z","timestamp":1782648861961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /analytics.js HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3a958b-a35\"\r\nlast-modified: Tue, 23 Jun 2026 14:17:47 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfXcDPdABiuxaGsen%2FY6KGd3McQ0ZdcvE4sHWKw3%2FBk%2B6wCrd5QyseaDzbn9URKHZyNCZ9fsy3CdYh97bODX460hdgsN%2FfAeQolR7n2mvYRZAu1ZGsKCe6YOH1T3WcXm\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5b4eb0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2613,"size_decoded":1850,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a0ce01b00ed5e7d666b86b8e1a7df500","sha1":"72834f23a523070490cb5291883ff95c1715b315","sha256":"931bb891c5b757116ff1c7d439967ae641a4b405c3b48b4dad54ce3ae17188ec","sha512":"a430662c533d29079c5e086776d38bc2f4a17ebf7f9fba7c3e3b8100dc1ee0f5c723d93b3e395cfc7a379d7e94d53d8686a1785d8cd83cbab1c872ec5f779c37","ssdeep":"","tlshash":"7f5101ad78f7a0a40423703d4aaf7606b2278153149ddd607d5cd8217f64b1902babef","first_seen":"2026-06-28T12:14:51.400915Z","last_seen":"2026-06-28T12:14:51.400915Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/rbxswitch-logo-v3.png","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:21.976Z","timestamp":1782648861976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /rbxswitch-logo-v3.png HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 25 Jun 2026 04:51:14 GMT\r\npriority: u=5,i\r\netag: \"6a3cb3c2-9bd1\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2b6TQXQzPFemLkw4GWsXzKSBpahjUbvhYr4F3r7MdtthvW75M5mzyYoOXvenWBrgE4MW4KPupb5JgYCpj5MT82a4j1As%2FEW5rpJPvQwdYSJRexbXUZQE8BncnqLQiXt\"}]}\r\ncontent-length: 39889\r\ncf-ray: a12c9c5b5eb5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39889,"size_decoded":40680,"mime_type":"image/png","magic":"PNG image data, 640 x 160, 8-bit/color RGBA, non-interlaced","md5":"054ba3a7622e8d0704cee7913ea90d25","sha1":"6018e36e9f4c7609ce2b8c020821f61ba9e54582","sha256":"b36bdbba88b76a36c521b04bd93e3c0f4650968fc693186b79dff9ae7c66bb17","sha512":"9035ed6987b69b720ed8f2a2b4c13e8876b182cd6bc58ff3db8d2ab03c5b1dadbbd0658e7928163fbcb355d6dc23b745507ae42235c96cf1723b9908a8ab3fc1","ssdeep":"768:yk1PBwh7BmvleM2MdyFB5SSKtI0NOhSRhUdqGtgxI34qr:h1yh7Bmvj2oaB8SKt7N9hUdqGE6","tlshash":"ea03be4adc28f6375c6347a09bec602984168ef7068f859f03460977b4e67f3b66354e","first_seen":"2026-06-28T12:14:51.403695Z","last_seen":"2026-06-28T12:14:51.403695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/chrome-mock.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.170Z","timestamp":1782648862170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /extension/chrome-mock.js HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/extension/popup.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3b7adf-116c\"\r\nlast-modified: Wed, 24 Jun 2026 06:36:15 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HeJyVPgCtNSNR4BfiBNqT1j0KLblr9a%2FPjVDBQWpVI10tizAvZz%2F2F62tZiMpTQ40YdbBJBTREx4dl8ZLsFdc1x%2F8FSBkz%2BLQAp%2BunTOdeAhbUxSjrLFf%2BUxCkAv82%2B\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5c9ee4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4460,"size_decoded":2560,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1fcd17935e69ddecdb50f4ce93363b5a","sha1":"c7817710b33b0cf174ff0b97184d30cdeec3d7eb","sha256":"b0823f56b7ea63cfa989241644fc27cc2a7beec3ac34ecc2da0348fda0d3b6cc","sha512":"e693ffe2d6fc58b749f204d5262d3a149953db8a55e5e2c80a535b0480569c43a09feb057a8a799359df70119fd83771f934f97e324cccf57ea4a45f2d227078","ssdeep":"96:amk8PeEGEaO8U6BMum/nJZTl/oAj88cBYbVPtJa21FlFRjg0:axty8U6uJvTX886YbNba2/lN","tlshash":"589150df5cb7004167a27df4ec0fa19a6e39405308699511fe8d808c9f2673a92fb9ed","first_seen":"2026-06-28T12:14:51.405867Z","last_seen":"2026-06-28T12:14:51.405867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/profile.json","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.378Z","timestamp":1782648862378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /extension/profile.json HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/extension/popup.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: rbx_vid=9598c55a-e16f-43da-91ad-d64a579399be\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: application/json\r\netag: W/\"6a3b5bb4-78\"\r\nlast-modified: Wed, 24 Jun 2026 04:23:16 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fs%2F9cIfME0Z%2F9WZNlcudlQUKd6i0RHePTLeKzwl3zOg3rRRrrqaUEFW7nfi9%2BbnlsXW2aePKoa5spbHuGgHE%2BX0OKNqA5mjsX5baQPieed5mcugiCN4mzu6P5LaG1%2B60\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5ddf10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":862,"mime_type":"application/json","magic":"JSON text data","md5":"3b73b1636e6cafdf02a92e4310d11ecc","sha1":"d6fafbd54da454fc470220c42b9d958d29ef8c09","sha256":"a5b30c4245f99a8479836362666a184f2aa63f331f13ca5d18381a679cc5e93e","sha512":"3e9255998b3915d83dd1d26ad9a54639440a6c769010b321eb89e10d7c463c2c485e58777d2f0df628910ef06721f14d9503c0dae87526bfbb34b28dacdcb12b","ssdeep":"","tlshash":"eab0923ac02a040744c186011c09334109910e3b004cf8049f538d2a96aee2b0c32eae","first_seen":"2026-06-28T12:14:51.407985Z","last_seen":"2026-06-28T12:14:51.407985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T12:14:21.122Z","timestamp":1782648861122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:21 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 25 Jun 2026 19:37:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KbpvTjC7AOvzwubX4vlsXOWz48UcNxY%2BkyF5Of16qi4P6eB2gysbfbGxOUKeC%2BVvZwnrL2tVZ%2BLMxnNCWJKvMSQxDeJsr8wwaLjCk8gePFLdABIo8UT6i647aJ2FFGy\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c564e23b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340786,"size_decoded":231999,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (43931)","md5":"58139fe3df4a014f366f5b37867e178c","sha1":"9047d6457517a9eace85659ce9bc9c0a060d7f8d","sha256":"85172ed9c4a6d88a3996e877830432b476d033fef7c00272fd1a787b6e04f21e","sha512":"d2480a1e2f14369b1055c4fad8ed1c5a9f772f428840c685139e8f322f7ad8d2fb76513a2a6bec179ff0e21bcc4d2c04f7c0d28b1ffef1d922402db395484be8","ssdeep":"6144:iSPH5KIOYV6CtSUJqPqSq0AzCwN1ac1UX+EZJ1ks5W:xv5GcShO0AzRNZGXJb1ks5W","tlshash":"357402dea220213e115b98d9bf93a7dc3539e24be90e61d8f66e41414bcfee01d6f484","first_seen":"2026-06-28T12:14:51.409912Z","last_seen":"2026-06-28T12:14:51.409912Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":21,"connect":20,"send":0,"wait":79,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:wght@400;500;600;700\u0026family=Archivo+Expanded:wght@700;800\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:21.958Z","timestamp":1782648861958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Archivo:wght@400;500;600;700\u0026family=Archivo+Expanded:wght@700;800\u0026family=JetBrains+Mono:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Jun 2026 12:14:22 GMT\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10372,"size_decoded":1514,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"57af70c64c47c4875fd4e5a6414ce196","sha1":"995190015762991d80d38379ccae892909250ce8","sha256":"cd658acbb6ff19bef043034bfe58a7209ad274ea76ebba6cdbefc554b694ab16","sha512":"2cfc9f4719166cc1531a05a8ea73c481ddf91ec9e1590dfe244b3d2da33b083b61e01d9810feeb80339486891f1743ef55bb1af934cd33bddb84027f88e31f26","ssdeep":"192:cKop1WhHpOWMWp/W79pAcG+7p3ZAXYjG9Up3qnXfV:cklyUOGCE","tlshash":"a322fea1041f9444ea471cd233df7e36ae8fa1466481d4fd9ffe18989caac22237570d","first_seen":"2026-06-28T12:14:51.411873Z","last_seen":"2026-06-28T12:14:51.411873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/popup.html","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:21.963Z","timestamp":1782648861963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /extension/popup.html HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 24 Jun 2026 05:31:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hmg%2FRypteyj01%2B0soZtr22H47%2F7XTcLgqM9SSbpIKEmRP9Mxn6JGHsPMMo9ftH49js1CBtir2R%2FZhAiNGZn4S7Tj05b89o2jgnbNnvN3ccAfvZO2Su0zZ8V4LnbO0MD7\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5b4eb2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7616,"size_decoded":3003,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f7e268119c7072440679c47ae619405a","sha1":"665d180f098ee83040aadd90011141b7ece2b134","sha256":"75cda75025e416d116c475c2a3b5d491b0a203bb3f12d3d18b173cbc093e6c1d","sha512":"55b4efe79afb432b78049748229c97d5df4438bd36074c07dd38fd57842428c6b54f1c90d66cb340b9f499dac3e53e13fbf37231fd00caaeae316faad745833b","ssdeep":"96:fLg02M0Yi9lyo/lYagJCfuTvuNAMUN7ADb7bgOYkxakfizmHmVPmNmxmndGNZce7:cyFQWaNzUiXbFDTfiCGVeswmZcJcX","tlshash":"82f1117074f95833215341c8b1956b6b3a92e643ca4f2144f7ae1ff21fdbe94a80706b","first_seen":"2026-06-28T12:14:51.413859Z","last_seen":"2026-06-28T12:14:51.413859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:wght@400;500;600;700\u0026family=Archivo+Expanded:wght@700;800\u0026family=JetBrains+Mono:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.161Z","timestamp":1782648862161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Archivo:wght@400;500;600;700\u0026family=Archivo+Expanded:wght@700;800\u0026family=JetBrains+Mono:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Jun 2026 12:14:22 GMT\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12858,"size_decoded":1530,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8fecd3909d751cace1715e46049df254","sha1":"1c338c4891aea0b0ff01575a58869652be51ce57","sha256":"ce31799aa8187d5b6af920ed6d266de39d88414addc7bc5b614d757451a639e3","sha512":"bea0a2651d8131240f55ae594b531f1df2d8436abc3778249d290374917bafdb5ff0c740ae39b02f0bbe4c7fcac485872f1a55c7b0d35054c5b484c9d3a78fa4","ssdeep":"192:cKop1WhHpOWMWp/W79pAcG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCV:cklyUOGC6C7","tlshash":"8d42eda1041f9444ea472cd633cfbe35ae8ea1466481d4fd9ffe18989caac32233574d","first_seen":"2026-06-28T12:14:51.415794Z","last_seen":"2026-06-28T12:14:51.415794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/30DAY-AvatarHeadshot-B3B4160442E72515C97F4DF1ECDD9E1B-Png/420/420/AvatarHeadshot/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.371Z","timestamp":1782648862371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /30DAY-AvatarHeadshot-B3B4160442E72515C97F4DF1ECDD9E1B-Png/420/420/AvatarHeadshot/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 160431\r\ndate: Thu, 25 Jun 2026 16:28:56 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 30DAY-AvatarHeadshot-B3B4160442E72515C97F4DF1ECDD9E1B-Png\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 46b4ae63-e09f-60fb-9c45-8fb1845b58bf\r\nx-envoy-upstream-service-time: 352\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 293015\r\nx-ratelimit-reset: 4\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d51c70081a09a7d0c27ac92d2b36e5da.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: Ug4eyCrRa3Oek6qYZlCSZMTlWj4v1BYj0IDOb0uY6eqsJ3trVEvSfw==\r\nage: 243925\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN56-P4\",cdn-rid;desc=\"Ug4eyCrRa3Oek6qYZlCSZMTlWj4v1BYj0IDOb0uY6eqsJ3trVEvSfw==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":160431,"size_decoded":161734,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit/color RGBA, non-interlaced","md5":"5850ea2b421ae65885a01fca90531f8e","sha1":"d585c7f903092443bd15633b9da7712f73631bf3","sha256":"041dff2a17a1ccdf00e111f2692a8deb1ed6968cf89a89138ab81a814b88aba1","sha512":"1d870a66f3aeee0ae74f9e35deb7cc9dda9c634fae999014a85981e3726664ec775df0f6a127f3c4898fa8aa0d7706dcb007c3919ee3d402eae0ca696f94c089","ssdeep":"3072:QGc/SWSY6lqdJn1MsDui47Q+yuSKAe9rXIM/mQNt1+K5TjTioNHqcnhosf:C/zim+7VyuSzmr9/BR95TjTPHqcnhoy","tlshash":"27f312dba67309c4321f68107e1f76e2727170c9af0b92e26d498b9e0a0dbdf551cb20","first_seen":"2026-06-28T12:14:51.417512Z","last_seen":"2026-06-28T12:14:51.417512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":34,"receive":14,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.386Z","timestamp":1782648862386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 06:03:11 GMT\r\nexpires: Fri, 25 Jun 2027 06:03:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 281471\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-17T16:07:59.747684Z","times_seen":10242,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:22.155Z","timestamp":1782648862155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/popup.css","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.165Z","timestamp":1782648862165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /extension/popup.css HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/extension/popup.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3b6b98-8068\"\r\nlast-modified: Wed, 24 Jun 2026 05:31:04 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejlNwh15Mx5cStbEcoo3CegYbX7tXJMRXEXOL5w1IUWBPZjghDglKFgvAniBzdeVPjVc7pSmUQUmfVVUvP6Eu%2Ftd8UXYvjTZj9By%2FzNeCIvqd7adwXcC647BiJt4XMVu\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5c8ee3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32872,"size_decoded":7682,"mime_type":"text/css","magic":"ASCII text, with very long lines (561)","md5":"843b26075e4684c995a722ae4bed859f","sha1":"1c1b2be6096c4e48aef886aa0c99dded1864294f","sha256":"0adbc37c1e5500bec7c41b038a7e5f6cddc8f75a1d1bb1ae67aef17ddd1700da","sha512":"cac1a846bd41feea493c20f5cca9db2d337d84f5bb08f5712b4d2b71efdd4f28486159dcc984444039c8a9eeeba8a043ae353856aa141a7fead7059696597a32","ssdeep":"768:4vk61CJUljFX4/XW8TaCF6PFit10ylfFqBuTYw3:Sk61COlj94/XWCaCqFit106fUgTH","tlshash":"0ee20da1a6309175bd33ab68378b6b5e7318b5128806d9fcafe1101c8ec63fc51a374d","first_seen":"2026-06-28T12:14:51.41924Z","last_seen":"2026-06-28T12:14:51.41924Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/popup.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.217Z","timestamp":1782648862217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /extension/popup.js HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/extension/popup.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3b6bb7-cbb\"\r\nlast-modified: Wed, 24 Jun 2026 05:31:35 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdL3ZAC%2B08UVdEDrMFaXRa8h7kjaqq0F5puHNmQtPApiQAaIqw2CNmILlkG8%2FIljXNk2XH28MIPQuDRJSn43p4onO2T5CJyXUsI1sWg9%2FQSQlPYXBLDwnPTFaLbFrY97\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5cdeedb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3259,"size_decoded":2225,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"aa61a225c087c799a6d979351b7b9114","sha1":"65443a6c33b613c5ed038629a853d088d62c1b3e","sha256":"5f56f3d7d151c046d0bed0c52f032ebbfcbf33f8899fe8d98198053f1da8b682","sha512":"c9644320c63a023d663223687545bb66ed64a1469e2b7ef573bd761b10b579e182bf1569c3a015bbe89d3ee114251a240baff35c3c3ddfae71ce284b7be35332","ssdeep":"","tlshash":"f66141bf65f92272466360b8179fb2c67326400330a6c4047d9de2881f61f3596a3dea","first_seen":"2026-06-28T12:14:51.421049Z","last_seen":"2026-06-28T12:14:51.421049Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.390Z","timestamp":1782648862390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.rbxcdn.com/30DAY-AvatarHeadshot-8F0A7710F0FDCD901C71BC0BE4B3716E-Png/420/420/AvatarHeadshot/Png/noFilter","fqdn":"tr.rbxcdn.com","domain":"rbxcdn.com","tld":"com"},"ip":{"addr":"65.9.62.11","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.376Z","timestamp":1782648862376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rbxcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 09 Oct 2025 00:00:00 GMT","end":"Sat, 07 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0D:DC:44:16:2A:50:86:97:28:B7:54:7B:F1:62:AE:8D:85:A2:B2:8B","sha256":"E6:A2:4B:B5:0E:CF:E8:60:AD:08:DA:72:4E:0E:FB:04:62:FA:BC:04:9A:44:20:C8:C3:69:23:4A:74:90:B4:F4"}}},"request":{"raw":"GET /30DAY-AvatarHeadshot-8F0A7710F0FDCD901C71BC0BE4B3716E-Png/420/420/AvatarHeadshot/Png/noFilter HTTP/1.1\r\nHost: tr.rbxcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/Png\r\ncontent-length: 128395\r\ndate: Sat, 20 Jun 2026 09:37:08 GMT\r\nserver: public-gateway\r\ncache-control: no-cache\r\nedge-cache-tag: 30DAY-AvatarHeadshot-8F0A7710F0FDCD901C71BC0BE4B3716E-Png\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nroblox-machine-id: 469bd686-2d74-71ea-d8ab-f1bb792c5062\r\nx-envoy-upstream-service-time: 286\r\nx-terms-message: Terms apply https://rblx.co/TOU.\r\nx-ratelimit-limit: 300000, 300000;w=60\r\nx-ratelimit-remaining: 297677\r\nx-ratelimit-reset: 52\r\nx-ingress-proxy: true\r\nx-roblox-edge: c080\r\nreport-to: {\"group\":\"network-errors\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://ncs.roblox.com/upload\"}]}\r\nnel: {\"report_to\":\"network-errors\",\"max_age\":604800,\"success_fraction\":0,\"failure_fraction\":0.05,\"response_headers\":[\"Rbx-Cdn-Provider\",\"vary\"]}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d51c70081a09a7d0c27ac92d2b36e5da.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P4\r\nx-amz-cf-id: Vc9y2Q-oStSq6Q7-ZGM6aqWBxqBTQr27wFs80xtdTuqMwvNigttu5g==\r\nage: 700633\r\nrbx-cdn-provider: aws\r\ntiming-allow-origin: *\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"ARN56-P4\",cdn-rid;desc=\"Vc9y2Q-oStSq6Q7-ZGM6aqWBxqBTQr27wFs80xtdTuqMwvNigttu5g==\",cdn-hit-layer;desc=\"REC\",cdn-downstream-fbl;dur=23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":128395,"size_decoded":129699,"mime_type":"image/png","magic":"PNG image data, 420 x 420, 8-bit/color RGBA, non-interlaced","md5":"21e6a7e4fedf2a1e0bba5eb7cfdc8ec7","sha1":"f87e0af289ecc05f5b3b4bd233c07a044601f6c1","sha256":"1d32729b0e2a1fb74c8cd488c2b9104db43bbb4e623b65128a8d13235b84773e","sha512":"9ba4775407400e191caf7d98c5a92cd87767f237a8d763746faa979293f633f58b55e132eeb23c46f94e40279ee6fedd801961458c03dcc6ecd2864f372ad2b8","ssdeep":"3072:RFd3Xt7l3wv0SF8mUsnB532GLuOmKYp67d95puZFTn8d:R73Nl3Y7QsB5y67j5pMk","tlshash":"8cc3121f0319fe568f0d1e8b1288dca4f63368d176d0f11de112d3ce6cc2797aa688a8","first_seen":"2026-06-28T12:14:51.422536Z","last_seen":"2026-06-28T12:14:51.422536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":44,"receive":11,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:22.100Z","timestamp":1782648862100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":35,"send":0,"wait":21,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rbxswitch.com/","date":"2026-06-28T12:14:22.103Z","timestamp":1782648862103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rbxswitch.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 06:07:22 GMT\r\nexpires: Wed, 23 Jun 2027 06:07:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 454020\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":34928,"size_decoded":35741,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-07-17T11:48:47.015586Z","times_seen":8359,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":21,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/accounts-ui.js","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.172Z","timestamp":1782648862172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /extension/accounts-ui.js HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/extension/popup.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3b78d9-3daf\"\r\nlast-modified: Wed, 24 Jun 2026 06:27:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JY1Y63bN8avq%2F%2BMCaQZM5fxzw5tenI6yKD6W%2Bqk7Gntd7Nl1TytzMZfbii8BloebK7gHzfrkuB9IX17FUvQyzcQTX0Z0OMfMW9pIQoNf9y86xuH%2FUbOrR9NFOZ86HVFU\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5c9ee5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15791,"size_decoded":5724,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ac503ec6482134972f504e869dca5893","sha1":"537afa7790c75d288bb420506d685c090a71256e","sha256":"481b10e9efe359f32b0e3b07b0ce6fb35cf4701cc6503b1994ef03bb4bd35fdb","sha512":"695759aefbabcd4120e5d921dfc288f14de04e6da3a9df65e866bcc63458f204aafc5dc68d6c9bd9a85a89b178c3f941181d9805c0c47f95d8d1e7c047982536","ssdeep":"192:5wMaLdbr9bbLga9hmxKpdCriCo5/+K4mzQkCcW+3NISLBUKe79qYRtIrpXZZQ6WI:50y/KOrpLn++8v3GVtNkbWOdBRR","tlshash":"2f62966e2db32036453be6b6a7af6aa5f03500171005c4d8bccdd6181f6076466ff9ee","first_seen":"2026-06-28T12:14:51.424393Z","last_seen":"2026-06-28T12:14:51.424393Z","times_seen":1,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rbxswitch.com/extension/rbxswitch-mark.svg","fqdn":"rbxswitch.com","domain":"rbxswitch.com","tld":"com"},"ip":{"addr":"104.21.83.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rbxswitch.com/extension/popup.html","date":"2026-06-28T12:14:22.220Z","timestamp":1782648862220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rbxswitch.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 11:02:09 GMT","end":"Sat, 19 Sep 2026 12:00:45 GMT"},"fingerprint":{"sha1":"02:95:C5:74:3B:F9:DD:D6:C7:37:61:17:13:70:F1:7F:9B:0C:86:3C","sha256":"18:D5:F5:BB:35:4B:80:D8:2A:9C:8D:E8:E3:20:8A:FE:A6:E3:37:F5:4F:BB:94:A3:3E:B0:E3:1F:50:9F:7E:A8"}}},"request":{"raw":"GET /extension/rbxswitch-mark.svg HTTP/1.1\r\nHost: rbxswitch.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rbxswitch.com/extension/popup.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 12:14:22 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a3b816d-28f\"\r\nlast-modified: Wed, 24 Jun 2026 07:04:13 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojkZ64rgOs2uNx%2BM2KJErMlnaiuId5fHdHPvJaRMJ7uop9dDcZEHm2QLytwanRUP0uBPZyiscMP9O2lbb9gg9DbV1URRdsyk2%2FizsOw9fel3qC1GkPRR%2Bay0Ppa7Ohw5\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a12c9c5cdeeeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":1146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cddb812759195348a2980ed9e5adc767","sha1":"accd162ee5b8948f1edd8fb40668b2fd72c1a811","sha256":"ebb104c8fdbdef76a5816a6e7316626acdda0a3504806c4f6550f79e3bb43be5","sha512":"a5f3aea3b5b74f4b7ce4622b9d248c3ab71df059839e1913053c7122e685dd41cef25c5c59b0455189471228f8ef39a6ab7466f7ed866d664be3a0b75c5e99cb","ssdeep":"","tlshash":"94f02628d26e053ce6220a1c67c83b64607b99e9433d2114b4116938b9b595bacbf9dc","first_seen":"2026-06-28T12:14:51.426123Z","last_seen":"2026-06-28T12:14:51.426123Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"rbxswitch.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}