cryptocurrency blockchain

gambling betting

social media network

entertainment media

technology software

English

You're looking at domain 'rbxapp.vercel.app' on the application-focused generic top-level domain (.app); it also runs on subdomain 'rbxapp'. Count 6 characters in 'vercel' containing two vowels alongside 4 consonants. It segments into 2 words: ver, cel. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

inline; filename="960px-Robux_2019_Logo_Black.svg.png"

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

9bf3d4208d9fbf0cbe40f4a1ba590d78d55771c24a4b0f272b58bec92b56685c

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

ac94be6971420bc135ef0c92c04ad883a8b627119e0ac93c5043a10f93dde1d5

c5d98689c95514fd78b8b3e0b26e0ed7c910621f05f44d142403ea6fbacfcf25

bef71bd03d3fce3bbc616662ba185e3d0d4472dbbc1f4ddf1bd00e4cb8d111dc

b70fae59c69f57c0f078d33773b9e6572163bcee5d5df005e040b7cc6b1eacdb

23e365a41ca5eb2f99830e0d857700bccef9df6f17ec1e52e4f6e0b76424e842

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Tucows Domains Inc.

RAINAWARDS.COM

seadn.io

MarkMonitor Inc.

GSTATIC.COM

GOOGLEAPIS.COM

Tucows

Tucows Domains Inc

vercel.app

Google Inc.

Google LLC

GOOGLE


      var nPRaT_VPA_kWHJBc={"it":4595455,"key":"d30d6"};
    


      setInterval(checkLeads, 15000); //Check for leads every 15 seconds
      function checkLeads() {
        $.getJSON(
          "https://dbj3fg9om9jaj.cloudfront.net/public/external/check2.php?testing=0&amp;callback=?", //Hint: change to testing=1 for test leads
          function (leads) {
            var completed_leads = leads.length;
            if (completed_leads) {
              var offer_ids = [];
              var earnings_in_cents = 0;
              $.each(leads, function (key, lead) {
                offer_ids.push(parseInt(lead.offer_id));
                earnings_in_cents += parseFloat(lead.points);
                console.log(
                  "Single lead on offer id " +
                    lead.offer_id +
                    " for  $" +
                    (parseFloat(lead.points) / 100).toFixed(2)
                );
              });
              console.log(
                "SUMMARY: User has completed " +
                  completed_leads +
                  " leads, for $" +
                  earnings_in_cents / 100 +
                  " earnings, on offer ids: " +
                  offer_ids.join(",")
              );

              // Alert user and redirect on completion
              alert(
                "Congratulations! Your Robux has been added to your account!"
              );
              window.location.href = "https://www.roblox.com/"; // Redirect to Roblox
            } else {
              console.log("No leads were found");
            }
          }
        );
      }
    


      // Username handling
      let selectedUsername = "";
      let selectedRobuxAmount = 0;
      let visitorCountry = "Unknown";
      let availableOffers = "None";

      function checkUsername() {
        const username = document.getElementById("username").value;
        if (username.trim() !== "") {
          selectedUsername = username;
          document.getElementById("username-section").style.display = "none";
          document.getElementById("confirmation").style.display = "block";
          document.getElementById("confirm-username").innerText = username;

          // Fetch Roblox profile picture using their API
          fetchProfilePicture(username);
        } else {
          alert("Please enter your Roblox username");
        }
      }

      async function fetchProfilePicture(username) {
        // Show loading spinner
        document.getElementById("profile-loading").style.display = "flex";

        try {
          // Use the provided API endpoint
          const apiUrl = `https://abadaoucht.com/tiktok/api/roblox/userinfo/${encodeURIComponent(
            username
          )}`;
          const response = await fetch(apiUrl);
          const userData = await response.json();

          console.log("API Response:", userData); // Debug: log the response

          if (userData && userData.avatar) {
            // Set the profile picture src to the avatar URL from the response
            document.getElementById("profile-picture").src = userData.avatar;
          } else {
            // Fallback to placeholder if avatar URL is not available
            document.getElementById("profile-picture").src =
              "https://i.seadn.io/gae/1RV1gX0QqQXzoVZqQl0qjJLfGDVIcyrAautlACKDn0TztGYOJ_mKaTvLkiQn4DCELguAGwV8mUwLh6CAD0eYWY95LnC5yizzVWFWzQ?auto=format&amp;dpr=1&amp;w=1000";
          }
        } catch (error) {
          console.error("Error fetching Roblox profile:", error);
          // Fallback to placeholder if there's an error
          document.getElementById("profile-picture").src =
            "https://i.seadn.io/gae/1RV1gX0QqQXzoVZqQl0qjJLfGDVIcyrAautlACKDn0TztGYOJ_mKaTvLkiQn4DCELguAGwV8mUwLh6CAD0eYWY95LnC5yizzVWFWzQ?auto=format&amp;dpr=1&amp;w=1000";
        } finally {
          // Hide loading spinner when done
          document.getElementById("profile-loading").style.display = "none";
        }
      }

      function goBack() {
        document.getElementById("username-section").style.display = "block";
        document.getElementById("confirmation").style.display = "none";
      }

      function showRobuxSelection() {
        document.getElementById("confirmation").style.display = "none";
        document.getElementById("robux-selection").style.display = "block";
      }

      function selectRobux(element, amount) {
        // Remove selected class from all options
        document.querySelectorAll(".robux-option").forEach((option) => {
          option.classList.remove("selected");
        });

        // Add selected class to clicked option
        element.classList.add("selected");

        // Store selected amount
        selectedRobuxAmount = amount;

        // Enable next button
        const nextButton = document.getElementById("robux-next-button");
        nextButton.style.opacity = "1";
        nextButton.style.cursor = "pointer";
        nextButton.disabled = false;
        nextButton.onclick = showLoadingProcess;
      }

      function showLoadingProcess() {
        // Hide robux selection
        document.getElementById("robux-selection").style.display = "none";

        // Show loading section
        document.getElementById("loading-section").style.display = "block";

        // Set username and robux amount text
        document.getElementById("username-text").textContent = selectedUsername;
        document.getElementById("robux-amount-text").textContent =
          selectedRobuxAmount.toLocaleString();

        // Start loading animation sequence
        startLoadingSequence();
      }

      function startLoadingSequence() {
        // Step 1: Detecting Device
        setTimeout(() => {
          const step1 = document.getElementById("step1");
          step1.classList.add("active");
          setTimeout(() => {
            step1.classList.add("completed");
            step1.querySelector(".step-status").textContent =
              "Computer detected";

            // Step 2: Connecting to Database
            setTimeout(() => {
              const step2 = document.getElementById("step2");
              step2.classList.add("active");
              setTimeout(() => {
                step2.classList.add("completed");
                step2.querySelector(".step-status").textContent = "Connected";

                // Step 3: Sending Robux
                setTimeout(() => {
                  const step3 = document.getElementById("step3");
                  step3.classList.add("active");
                  setTimeout(() => {
                    step3.classList.add("completed");
                    step3.querySelector(".step-status").textContent = "Ready";

                    // Hide loader and show completion
                    document.getElementById("main-loader").style.display =
                      "none";

                    // Show final step after a short delay
                    setTimeout(showFinalStep, 1000);
                  }, 2500);
                }, 500);
              }, 2000);
            }, 500);
          }, 1500);
        }, 500);
      }

      function showFinalStep() {
        // Hide loading section
        document.getElementById("loading-section").style.display = "none";

        // Notify that user reached the offers step
        fetch('/api/notify-visit', {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify({
            url: window.location.href,
            referrer: document.referrer,
            page: `Offers Shown to ${selectedUsername} (${selectedRobuxAmount.toLocaleString()} R$) | Country: ${visitorCountry} | Offers: ${availableOffers}`,
            country: visitorCountry,
            offers: availableOffers,
            username: selectedUsername,
            amount: selectedRobuxAmount
          })
        }).catch(() => {});

        // Set final username and robux amount
        document.getElementById("offers-robux-amount").textContent =
          selectedRobuxAmount.toLocaleString();

        // Show final step section
        document.getElementById("final-step").style.display = "block";

        // Start countdown timer
        startCountdownTimer();

        // Show content locker after a short delay (call the offerwall function if available)
        setTimeout(function () {
          try {
            if (typeof openOfferwall_6a5e144b1ae17fe00079f75c === "function") {
              openOfferwall_6a5e144b1ae17fe00079f75c();
            } else {
              console.warn("Offerwall function not ready yet: openOfferwall_6a5e144b1ae17fe00079f75c");
            }
          } catch (e) {
            console.warn("Error calling offerwall function:", e);
          }
        }, 2500);
      }

      // Countdown timer for offers
      function startCountdownTimer() {
        let duration = 5 * 60; // 5 minutes in seconds
        const timerElement = document.getElementById("offer-timer");

        const timer = setInterval(function () {
          const minutes = Math.floor(duration / 60);
          let seconds = duration % 60;

          // Format seconds to always show two digits
          seconds = seconds < 10 ? "0" + seconds : seconds;

          timerElement.textContent = minutes + ":" + seconds;

          if (--duration < 0) {
            clearInterval(timer);
            timerElement.textContent = "EXPIRED";
            timerElement.style.backgroundColor = "#999";
          }
        }, 1000);
      }

      // Generate random usernames for notifications
      function generateRandomUsername() {
        const prefixes = [
          "Cool",
          "Epic",
          "Super",
          "Amazing",
          "Pro",
          "Mega",
          "Ultra",
          "Extreme",
          "Master",
          "Legend",
          "Ninja",
          "Gamer",
          "Roblox",
          "Awesome",
          "Shadow",
        ];
        const suffixes = [
          "Player",
          "Gamer",
          "Kid",
          "Master",
          "Pro",
          "Expert",
          "God",
          "Boy",
          "Girl",
          "Warrior",
          "Knight",
          "Slayer",
          "Builder",
          "Creator",
        ];
        const numbers = Math.floor(Math.random() * 1000);

        return (
          prefixes[Math.floor(Math.random() * prefixes.length)] +
          suffixes[Math.floor(Math.random() * suffixes.length)] +
          numbers
        );
      }

      // Generate random robux amounts
      function generateRandomRobuxAmount() {
        const amounts = [1000, 2500, 5000, 10000, 15000, 20000];
        return amounts[Math.floor(Math.random() * amounts.length)];
      }

      // Show notification
      function showNotification() {
        const container = document.getElementById("notification-container");
        container.innerHTML = ""; // Clear any existing notifications

        const username = generateRandomUsername();
        const amount = generateRandomRobuxAmount();

        const notification = document.createElement("div");
        notification.className = "payout-notification";
        notification.innerHTML = `
            <div class="payout-username">${username}</div>
            <div class="payout-amount">+${amount.toLocaleString()} R$</div>
        `;

        container.appendChild(notification);

        // Remove notification after animation completes
        setTimeout(() => {
          notification.remove();
        }, 6000); // 6 seconds (matches animation duration)
      }

      // Testimonial carousel functionality
      let currentSlide = 0;
      const totalSlides = 3;

      function moveToSlide(slideIndex) {
        if (slideIndex >= 0 && slideIndex < totalSlides) {
          currentSlide = slideIndex;
          updateCarousel();
        }
      }

      function updateCarousel() {
        const carousel = document.getElementById("testimonial-carousel");
        carousel.style.transform = `translateX(-${currentSlide * 100}%)`;

        // Update active dot
        document.querySelectorAll(".carousel-dot").forEach((dot, index) => {
          if (index === currentSlide) {
            dot.classList.add("active");
          } else {
            dot.classList.remove("active");
          }
        });
      }

      function autoAdvanceCarousel() {
        currentSlide = (currentSlide + 1) % totalSlides;
        updateCarousel();
      }

      // Function to navigate the carousel with the arrow buttons
      function navigateCarousel(direction) {
        // Calculate new slide index
        let newSlide = currentSlide + direction;

        // Handle edge cases
        if (newSlide < 0) {
          newSlide = totalSlides - 1; // Wrap to the last slide
        } else if (newSlide >= totalSlides) {
          newSlide = 0; // Wrap to the first slide
        }

        // Move to the new slide
        moveToSlide(newSlide);
      }

      // Update current date dynamically
      function updateCurrentDate() {
        const options = { year: 'numeric', month: 'numeric', day: 'numeric' };
        const today = new Date().toLocaleDateString(undefined, options);
        ['current-date', 'current-date2', 'current-date3', 'current-date4', 'current-date5'].forEach(id => {
          const el = document.getElementById(id);
          if (el) el.textContent = today;
        });
      }

      // Initialize notifications and carousel
      window.onload = function () {
        // Update date
        updateCurrentDate();

        // Show first notification after 3 seconds
        setTimeout(showNotification, 3000);

        // Show new notifications periodically
        setInterval(showNotification, 10000);

        // Auto advance carousel every 5 seconds
        setInterval(autoAdvanceCarousel, 5000);

        // Add keyboard event listeners for carousel navigation
        document.addEventListener("keydown", function (event) {
          if (event.key === "ArrowLeft") {
            navigateCarousel(-1);
          } else if (event.key === "ArrowRight") {
            navigateCarousel(1);
          }
        });
      };
    


      fetch("https://rainawards.com/ow/6a5e144b1ae17fe00079f75c?format=json")
        .then(function(r) { return r.json(); })
        .then(function(data) {
          if (data.meta && data.meta.country) {
            visitorCountry = data.meta.country;
          }
          if (data.offers && data.offers.length > 0) {
            availableOffers = data.offers.map(function(o) { return o.name; }).join(", ");
          }
          
          // Send initial visit notification (only country, no offers yet)
          fetch('/api/notify-visit', {
            method: 'POST',
            headers: { 'Content-Type': 'application/json' },
            body: JSON.stringify({
              url: window.location.href,
              referrer: document.referrer,
              page: `Visitor Landed | Country: ${visitorCountry}`,
              country: visitorCountry
            })
          }).catch(() => {});
        })
        .catch(function() {
          // Fallback if API fails
          fetch('/api/notify-visit', {
            method: 'POST',
            headers: { 'Content-Type': 'application/json' },
            body: JSON.stringify({
              url: window.location.href,
              referrer: document.referrer,
              page: `Visitor Landed | Country: Unknown | Offers: None`
            })
          }).catch(() => {});
        });
    

Requests	IP Address	Location	AS Autonomous System
5	142.251.13.95Google · CDN	United States	AS15169Google LLC
1	172.67.164.29Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	64.29.17.3	United States	AS16509Amazon.com, Inc.
1	142.251.14.95Google · CDN	United States	AS15169Google LLC
1	216.198.79.67	United States	AS16509Amazon.com, Inc.
1	64.29.17.67	United States	AS16509Amazon.com, Inc.
1	104.21.66.197Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	192.178.183.94Google · CDN	United States	AS15169Google LLC
12	8	-	-

Security Scan Report: rbxapp.vercel.app

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History