Free Robux Guide

Free Robux Guide

ID: doaednhagbbpmldpjleemcaifcdmhebd

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Removed
Version
1.0
Size
0.02 MB
Rating
2.0/5
Reviews
7
Users
643
Type
Extension
Updated
Sep 23, 2023
Category
Productivity Tools
Price
Free
Featured
No
Visibility
Listed
Mature
Yes
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
varaldinesh0View Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
643
Screenshot 1
Screenshot 2
Screenshot 3

Your ultimate guide to earning free Robux on Roblox. Search for tips and tricks to maximize your Robux collection.

Are you a Roblox enthusiast looking to enhance your Robux collection without spending a dime? Look no further! The "Free Robux Guide" Chrome extension is your ultimate companion on the quest to acquire free Robux. Key Features: Search Enhancement: Attach your searched terms directly to our extensive blog search query on www.anandmarket.in. Discover tips, tricks, and strategies for maximizing your Robux earnings. Real-time Content: Stay in the loop with up-to-the-minute Robux guides and resources. Our extension dynamically updates the content to match your search, ensuring you receive the latest and most relevant information. Claim Your Robux: If your search query includes the keyword "robux," our extension transforms into a "Claim Your Robux" portal, redirecting you to the exclusive Get Free Robux on Roblox (No Human Verification) page. Unlock the secrets to Robux riches! User-Friendly: The "Free Robux Guide" extension is designed with simplicity in mind. A floating button provides quick access to the information you need, making your Roblox journey more enjoyable. Enhance your Roblox experience today with the "Free Robux Guide" Chrome extension. Discover new strategies, boost your Robux collection, and elevate your gameplay. Get started now! Feel free to customize this description further to better align with your extension's unique features and benefits. Ensure that it accurately represents the value your extension offers to users in their pursuit of free Robux on Roblox.

Item
Type
Severity
Description
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://www.google.com/*
Permission
Unknown
No classification available for this permission.
https://www.anandmarket.in/*
Permission
Unknown
No classification available for this permission.

Reads the active tab's URL and extracts the 'q=' query parameter (typically a Google search term the user typed), then forwards that query to an external third-party site (anandmarket.in). This is unauthorized collection and exfiltration of the user's search queries to a site the user did not explicitly intend to share them with, constituting search-hijacking-style tracking.

popup.js (Line 1)
document.addEventListener('DOMContentLoaded', function() {      const blogFrame = document.getElementById('blogFrame');      const loadingIndicator = document.getElementById('loading');      // Get the currently active tab      chrome.tabs.query({            active: true,            currentWindow: true          }, function(tabs) {            const activeTab = tabs[0];            // Get the user's input query from the active tab's URL            const query = activeTab.url.split('q=')[1];            if (query) {              // Construct the URL of your blog's search page with the query              const blogSearchUrl = `https://www.anandmarket.in/?s=${query}`;              // Load the blog search results in the iframe              blogFrame.src = blogSearchUrl;            } else {              // If no search term is found, load the default blog URL              blogFrame.src = 'https://www.anandmarket.in/';            }

Detects searches containing 'robux' and lures the user to a 'get-free-robux...no-human-verification' landing page. This is a classic Roblox/Robux scam pattern used to drive victims (often minors) to phishing / survey-scam / credential-harvesting funnels under the pretense of free in-game currency.

popup.js (Line 52)
// Function to update the button label and link based on the search queryfunction updateButtonForSearchQuery(query) {  if (query.toLowerCase()    .includes('robux')) {    // If the query contains "robux," update the button    floatingButton.innerText = 'Claim Your Robux';    floatingButton.addEventListener('click', function() {      // Redirect to the specific Robux page      chrome.tabs.create({        url: 'https://www.anandmarket.in/get-free-robux-on-roblox-no-human-verification/'      });    });  } else {    // If the query doesn't contain "robux," reset the button    floatingButton.innerText = 'Read on The Anand Market';    floatingButton.addEventListener('click', openCurrentUrlInTab);  }}

Uses chrome.scripting.executeScript to inject code into a tab, but the 'scripting' permission is NOT declared in manifest.json (only 'activeTab' is). This call will fail at runtime, but the pattern — injecting arbitrary functions into tabs driven by a message bus reachable from any content script running on <all_urls> — is a privilege-escalation design that would allow script injection if the manifest were updated.

background.js (Line 4)
chrome.runtime.onMessage.addListener(function(message, sender, sendResponse) {  if (message.action === 'showPopup') {    // Open a new tab with a popup that displays the message    chrome.tabs.create({      url: 'popup.html'    }, function(tab) {      // Send a message to the popup script      chrome.scripting.executeScript({        target: {          tabId: tab.id        },        function: function() {          alert('Content Available on The Anand Market');        },      });    });  }});

Content script injected into <all_urls> listens for arbitrary 'checkAvailability' messages carrying a 'keywords' payload and triggers the background script to open new tabs. Combined with the broad <all_urls> match, this provides a generic cross-site message relay that can be leveraged to open attacker-controlled tabs on any site the user visits.

content.js (Line 4)
chrome.runtime.onMessage.addListener(function(message, sender, sendResponse) {  if (message.action === 'checkAvailability') {    const keywords = message.keywords;    // Implement your logic to check if the content is available on your website    // Here, we assume a simple check: if the keywords contain "example", show the popup    if (keywords.toLowerCase()      .includes('example')) {      // Send a message to the background script to trigger the popup      chrome.runtime.sendMessage({        action: 'showPopup'      });    }  }});

By severity

Critical0
High2
Medium2
Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.04

Files with findings

3 distinct paths — top paths by unique finding count:

  • popup.js2
  • background.js1
  • content.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Phishing
high
popup.js (line 52)Detects searches containing 'robux' and lures the user to a 'get-free-robux...no-human-verification' landing page. This is a classic Roblox/Robux scam pattern used to drive victims (often minors) to phishing / survey-…
2Unauthorized Data Collection
high
popup.js (line 1)Reads the active tab's URL and extracts the 'q=' query parameter (typically a Google search term the user typed), then forwards that query to an external third-party site (anandmarket.in). This is unauthorized collect…
3Code Injection
medium
background.js (line 4)Uses chrome.scripting.executeScript to inject code into a tab, but the 'scripting' permission is NOT declared in manifest.json (only 'activeTab' is). This call will fail at runtime, but the pattern — injecting arbitra…
4Tracking
medium
content.js (line 4)Content script injected into <all_urls> listens for arbitrary 'checkAvailability' messages carrying a 'keywords' payload and triggers the background script to open new tabs. Combined with the broad <all_urls> match, t…
URLs
6
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
www.google.com/*https://www.google.com/*
www.anandmarket.in/*https://www.anandmarket.in/*
www.anandmarket.in-https://www.anandmarket.in/?s=${query}`;
www.anandmarket.in-https://www.anandmarket.in/
www.anandmarket.in/get-free-robux-on-roblox-no-human-verification/https://www.anandmarket.in/get-free-robux-on-roblox-no-human-verification/

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.0
Latest
0.02 MB
Malicious
4
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.