Flutter UK&I icon Flutter UK&I HackerOne

barista.roblox.com


Endpoints (2 of 2)

Page 1 of 1

Path
Port
Status Code
Content-Length
Title
Resp Headers
/
443
403
919
ERROR: The request could not be satisfied

Content-Type: text/html

/
80
301
167
301 Moved Permanently

Location: https://barista.roblox.com/

Content-Type: text/html

  • Path: /
  • Port: 443
  • Status Code: 403
  • Title: ERROR: The request could not be satisfied
  • Via: 1.1 8f53b5d73ff2f5f8cae7b49606b79bd4.cloudfront.net (CloudFront)

    Date: Fri, 28 Jun 2024 16:06:45 GMT

    Server: CloudFront

    X-Cache: Error from cloudfront

    X-Amz-Cf-Id: WZFRYVlOpLvgsgfm857OZ3TUDOmmotucJXCBXAHTsDDwUXWud7jd7w==

    Content-Type: text/html

    X-Amz-Cf-Pop: EWR53-C2

    Cache-Control: public, max-age=300

    Content-Length: 919

    Reporting-Endpoints: enforce="https://metrics.roblox.com/v1/csp/report?type=enforce", report="https://metrics.roblox.com/v1/csp/report?type=report", sentry="https://o293668.ingest.sentry.io/api/5337301/security/?sentry_key=2c039001a72b4824851c1b3f71ce1f8f&sentry_environment=production"

    Content-Security-Policy: child-src 'self' blob: roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com; connect-src 'self' *.roblox.com *.robloxlabs.com *.rbxcdn.com *.google-analytics.com *.fullstory.com *.sentry.io https://*.awswaf.com https://translate.googleapis.com https://search-api.swiftype.com https://rights-portal-docs-test.s3.us-east-1.amazonaws.com https://rights-portal-docs-prod.s3.us-east-2.amazonaws.com https://doy2mn9upadnk.cloudfront.net wss://realtime-signalr.roblox.com wss://snc2-realtime-signalr.sitetest1.robloxlabs.com wss://snc3-realtime-signalr.sitetest1.robloxlabs.com wss://realtime-signalr.sitetest3.robloxlabs.com; default-src 'self'; font-src 'self' https://fonts.roblox.com https://webblox.roblox.com; frame-ancestors 'none'; frame-src 'self' roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com https://www.figma.com https://js.stripe.com https://www.instagram.com; img-src 'self' blob: data: *.rbxcdn.com *.roblox.com *.robloxlabs.com *.google.com *.google-analytics.com www.googletagmanager.com https://fonts.gstatic.com https://img.tarobicdn.com https://img.guildedcdn.com https://img.youtube.com *.fullstory.com https://devforum-uploads.s3.us-east-2.amazonaws.com https://devforum-uploads.s3.dualstack.us-east-2.amazonaws.com https://doy2mn9upadnk.cloudfront.net; media-src 'self' blob: *.roblox.com *.robloxlabs.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.googletagmanager.com *.google-analytics.com https://*.awswaf.com *.roblox.com *.robloxlabs.com *.fullstory.com https://js.stripe.com https://www.youtube.com https://www.instagram.com/embed.js; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; upgrade-insecure-requests ; worker-src 'self' blob:; report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; report-to enforce

    Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

  • First snapshot: 1 year, 2 months ago
  • Latest snapshot: 1 year, 2 months ago
  • Path: /
  • Port: 80
  • Status Code: 301
  • Title: 301 Moved Permanently
  • Via: 1.1 8e7c396366d89944c10dfabcfcb15b3c.cloudfront.net (CloudFront)

    Date: Fri, 28 Jun 2024 16:06:55 GMT

    Server: CloudFront

    X-Cache: Redirect from cloudfront

    Location: https://barista.roblox.com/

    X-Amz-Cf-Id: 9-SmJCyhf9h_VyFGw7tAVkfishWf5zgwFGOPSXKAjw4MvVI0nXIlGA==

    Content-Type: text/html

    X-Amz-Cf-Pop: EWR53-C2

    Cache-Control: public, max-age=300

    Content-Length: 167

    Reporting-Endpoints: enforce="https://metrics.roblox.com/v1/csp/report?type=enforce", report="https://metrics.roblox.com/v1/csp/report?type=report", sentry="https://o293668.ingest.sentry.io/api/5337301/security/?sentry_key=2c039001a72b4824851c1b3f71ce1f8f&sentry_environment=production"

    Content-Security-Policy: child-src 'self' blob: roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com; connect-src 'self' *.roblox.com *.robloxlabs.com *.rbxcdn.com *.google-analytics.com *.fullstory.com *.sentry.io https://*.awswaf.com https://translate.googleapis.com https://search-api.swiftype.com https://rights-portal-docs-test.s3.us-east-1.amazonaws.com https://rights-portal-docs-prod.s3.us-east-2.amazonaws.com https://doy2mn9upadnk.cloudfront.net wss://realtime-signalr.roblox.com wss://snc2-realtime-signalr.sitetest1.robloxlabs.com wss://snc3-realtime-signalr.sitetest1.robloxlabs.com wss://realtime-signalr.sitetest3.robloxlabs.com; default-src 'self'; font-src 'self' https://fonts.roblox.com https://webblox.roblox.com; frame-ancestors 'none'; frame-src 'self' roblox-studio: roblox-studio-sitetest1: roblox-studio-sitetest2: roblox-studio-sitetest3: *.roblox.com *.robloxlabs.com *.rbx.com https://rbx.okta.com https://dev-04639403.okta.com https://setup.rbxcdn.com https://www.youtube-nocookie.com https://www.figma.com https://js.stripe.com https://www.instagram.com; img-src 'self' blob: data: *.rbxcdn.com *.roblox.com *.robloxlabs.com *.google.com *.google-analytics.com www.googletagmanager.com https://fonts.gstatic.com https://img.tarobicdn.com https://img.guildedcdn.com https://img.youtube.com *.fullstory.com https://devforum-uploads.s3.us-east-2.amazonaws.com https://devforum-uploads.s3.dualstack.us-east-2.amazonaws.com https://doy2mn9upadnk.cloudfront.net; media-src 'self' blob: *.roblox.com *.robloxlabs.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.googletagmanager.com *.google-analytics.com https://*.awswaf.com *.roblox.com *.robloxlabs.com *.fullstory.com https://js.stripe.com https://www.youtube.com https://www.instagram.com/embed.js; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; upgrade-insecure-requests ; worker-src 'self' blob:; report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; report-to enforce

  • First snapshot: 1 year, 2 months ago
  • Latest snapshot: 1 year, 2 months ago

Page 1 of 1