Roblox.har -

They claim they need your "avatar data" to import it into 3D software like Blender.

Scammers often use social engineering to trick players into handing over this file: roblox.har

They send a video tutorial showing you how to go into your browser’s developer tools, click the Network tab, and "Save as HAR" . They claim they need your "avatar data" to

In the context of Roblox, a (HTTP Archive) is a log of a web browser's activity used primarily for troubleshooting network issues. However, it is also central to a dangerous account theft scam because it contains your account's session cookies , including your ".ROBLOSECURITY" token . The Roblox .HAR Scam However, it is also central to a dangerous

A scammer contacts you (often on Discord) offering to make a free GFX (high-quality 3D render) of your avatar.

Once you send the file, they extract your login cookie. This allows them to bypass two-factor authentication (2FA) and log into your account instantly. How to Stay Safe Cookie logging explained - Developer Forum | Roblox