Security Alert: Confirmed Malware
Free Robux Guide
ID: doaednhagbbpmldpjleemcaifcdmhebd
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- varaldinesh0View Profile
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Your ultimate guide to earning free Robux on Roblox. Search for tips and tricks to maximize your Robux collection.
Are you a Roblox enthusiast looking to enhance your Robux collection without spending a dime? Look no further! The "Free Robux Guide" Chrome extension is your ultimate companion on the quest to acquire free Robux. Key Features: Search Enhancement: Attach your searched terms directly to our extensive blog search query on www.anandmarket.in. Discover tips, tricks, and strategies for maximizing your Robux earnings. Real-time Content: Stay in the loop with up-to-the-minute Robux guides and resources. Our extension dynamically updates the content to match your search, ensuring you receive the latest and most relevant information. Claim Your Robux: If your search query includes the keyword "robux," our extension transforms into a "Claim Your Robux" portal, redirecting you to the exclusive Get Free Robux on Roblox (No Human Verification) page. Unlock the secrets to Robux riches! User-Friendly: The "Free Robux Guide" extension is designed with simplicity in mind. A floating button provides quick access to the information you need, making your Roblox journey more enjoyable. Enhance your Roblox experience today with the "Free Robux Guide" Chrome extension. Discover new strategies, boost your Robux collection, and elevate your gameplay. Get started now! Feel free to customize this description further to better align with your extension's unique features and benefits. Ensure that it accurately represents the value your extension offers to users in their pursuit of free Robux on Roblox.
Reads the active tab's URL and extracts the 'q=' query parameter (typically a Google search term the user typed), then forwards that query to an external third-party site (anandmarket.in). This is unauthorized collection and exfiltration of the user's search queries to a site the user did not explicitly intend to share them with, constituting search-hijacking-style tracking.
document.addEventListener('DOMContentLoaded', function() { const blogFrame = document.getElementById('blogFrame'); const loadingIndicator = document.getElementById('loading'); // Get the currently active tab chrome.tabs.query({ active: true, currentWindow: true }, function(tabs) { const activeTab = tabs[0]; // Get the user's input query from the active tab's URL const query = activeTab.url.split('q=')[1]; if (query) { // Construct the URL of your blog's search page with the query const blogSearchUrl = `https://www.anandmarket.in/?s=${query}`; // Load the blog search results in the iframe blogFrame.src = blogSearchUrl; } else { // If no search term is found, load the default blog URL blogFrame.src = 'https://www.anandmarket.in/'; }Detects searches containing 'robux' and lures the user to a 'get-free-robux...no-human-verification' landing page. This is a classic Roblox/Robux scam pattern used to drive victims (often minors) to phishing / survey-scam / credential-harvesting funnels under the pretense of free in-game currency.
// Function to update the button label and link based on the search queryfunction updateButtonForSearchQuery(query) { if (query.toLowerCase() .includes('robux')) { // If the query contains "robux," update the button floatingButton.innerText = 'Claim Your Robux'; floatingButton.addEventListener('click', function() { // Redirect to the specific Robux page chrome.tabs.create({ url: 'https://www.anandmarket.in/get-free-robux-on-roblox-no-human-verification/' }); }); } else { // If the query doesn't contain "robux," reset the button floatingButton.innerText = 'Read on The Anand Market'; floatingButton.addEventListener('click', openCurrentUrlInTab); }}Uses chrome.scripting.executeScript to inject code into a tab, but the 'scripting' permission is NOT declared in manifest.json (only 'activeTab' is). This call will fail at runtime, but the pattern — injecting arbitrary functions into tabs driven by a message bus reachable from any content script running on <all_urls> — is a privilege-escalation design that would allow script injection if the manifest were updated.
chrome.runtime.onMessage.addListener(function(message, sender, sendResponse) { if (message.action === 'showPopup') { // Open a new tab with a popup that displays the message chrome.tabs.create({ url: 'popup.html' }, function(tab) { // Send a message to the popup script chrome.scripting.executeScript({ target: { tabId: tab.id }, function: function() { alert('Content Available on The Anand Market'); }, }); }); }});Content script injected into <all_urls> listens for arbitrary 'checkAvailability' messages carrying a 'keywords' payload and triggers the background script to open new tabs. Combined with the broad <all_urls> match, this provides a generic cross-site message relay that can be leveraged to open attacker-controlled tabs on any site the user visits.
chrome.runtime.onMessage.addListener(function(message, sender, sendResponse) { if (message.action === 'checkAvailability') { const keywords = message.keywords; // Implement your logic to check if the content is available on your website // Here, we assume a simple check: if the keywords contain "example", show the popup if (keywords.toLowerCase() .includes('example')) { // Send a message to the background script to trigger the popup chrome.runtime.sendMessage({ action: 'showPopup' }); } }});By severity
Versions scanned
Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.0 | 4 |
Files with findings
3 distinct paths — top paths by unique finding count:
- popup.js2
- background.js1
- content.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.