Windows Analysis Report
https://mandrillapp.com/track/click/30953781/woolworthsrobloxrewards.com.au?p=eyJzIjoiX0dYbnNBb1dSWkpNc0Z1d2RDOXp3RlRxNEJFIiwidiI6MSwicCI6IntcInVcIjozMDk1Mzc4MSxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL3dvb2x3b3J0aHNyb2Jsb3hyZXdhcmRzLmNvbS5hdVxcXC8_cHJpemU9NDAgUm9idXhcIixcImlkXCI6XCI2MWFjOGM1NGU0Yj

{
  "contains_trigger_text": false,
  "trigger_text": "unknown",
  "prominent_button_name": "unknown",
  "text_input_field_labels": "unknown",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}

```json
{
    "risk_score": 1,
    "reasoning": "The script primarily involves DOM and history manipulation without any high-risk indicators such as dynamic code execution or data exfiltration. It does not interact with external domains or use obfuscated code, suggesting a low risk of malicious behavior."
}

(self.webpackChunkpromotion=self.webpackChunkpromotion||[]).push([[792],{4364:(N,O,b)=>{"use strict";var c=b(7705);let F=null;function j(){return F}class x{}const M=new c.nKC("DocumentToken");let S=(()=>{class n{historyGo(e){throw new Error("Not implemented")}static#e=this.\u0275fac=function(i){return new(i||n)};static#t=this.\u0275prov=c.jDH({token:n,factory:function(){return(0,c.WQX)(k)},providedIn:"platform"})}return n})();const U=new c.nKC("Location Initialized");let k=(()=>{class n extends S{constructor(){super(),this._doc=(0,c.WQX)(M),this._location=window.location,this._history=window.history}getBaseHrefFromDOM(){return j().getBaseHref(this._doc)}onPopState(e){const i=j().getGlobalEventTarget(this._doc,"window");return i.addEventListener("popstate",e,!1),()=>i.removeEventListener("popstate",e)}onHashChange(e){const i=j().getGlobalEventTarget(this._doc,"window");return i.addEventListener("hashchange",e,!1),()=>i.removeEventListener("hashchange",e)}get href(){return this._location.href}get protocol(){return this._location.protocol}get hostname(){return this._location.hostname}get port(){return this._location.port}get pathname(){return this._location.pathname}get search(){return this._location.search}get hash(){return this._location.hash}set pathname(e){this._location.pathname=e}pushState(e,i,a){this._history.pushState(e,i,a)}replaceState(e,i,a){this._history.replaceState(e,i,a)}forward(){this._history.forward()}back(){this._history.back()}historyGo(e=0){this._history.go(e)}getState(){return this._history.state}static#e=this.\u0275fac=function(i){return new(i||n)};static#t=this.\u0275prov=c.jDH({token:n,factory:function(){return new n},providedIn:"platform"})}return n})();function P(n,r){if(0==n.length)return r;if(0==r.length)return n;let e=0;return n.endsWith("/")&&e++,r.startsWith("/")&&e++,2==e?n+r.substring(1):1==e?n+r:n+"/"+r}function B(n){const r=n.match(/#|\?|$/),e=r&&r.index||n.length;return n.slice(0,e-("/"===n[e-1]?1:0))+n.slice(e)}function V(n){return n&&"?"!==n[0]?"?"+n:n}let te=(()=>{class n{historyGo(e){throw new Error("Not implemented")}static#e=this.\u0275fac=function(i){return new(i||n)};static#t=this.\u0275prov=c.jDH({token:n,factory:function(){return(0,c.WQX)(ye)},providedIn:"root"})}return n})();const ne=new c.nKC("appBaseHref");let ye=(()=>{class n extends te{constructor(e,i){super(),this._platformLocation=e,this._removeListenerFns=[],this._baseHref=i??this._platformLocation.getBaseHrefFromDOM()??(0,c.WQX)(M).location?.origin??""}ngOnDestroy(){for(;this._removeListenerFns.length;)this._removeListenerFns.pop()()}onPopState(e){this._removeListenerFns.push(this._platformLocation.onPopState(e),this._platformLocation.onHashChange(e))}getBaseHref(){return this._baseHref}prepareExternalUrl(e){return P(this._baseHref,e)}path(e=!1){const i=this._platformLocation.pathname+V(this._platformLocation.search),a=this._platformLocation.hash;return a&&e?`${i}${a}`:i}pushState(e,i,a,u){const f=this.prepareExternalUrl(a+V(u));this._platformLocation.pushState(e,i,f)}replaceState(e,i,a,u){const f=this.prepareExternalUrl(a+V(u));this._platformLocation.replaceState(e,i,f)}forward(){this._platformLocation.forward()}back(){this._platformLocation.back()}getState(){return this._platformLocation.getState()}historyGo(e=0){this._platformLocation.historyGo?.(e)}static#e=this.\u0275fac=function(i){return new(i||n)(c.KVO(S),c.KVO(ne,8))};static#t=this.\u0275prov=c.jDH({token:n,factory:n.\u0275fac,providedIn:"root"})}return n})(),pe=(()=>{class n extends te{constructor(e,i){super(),this._platformLocation=e,this._baseHref="",this._removeListenerFns=[],null!=i&&(this._baseHref=i)}ngOnDestroy(){for(;this._removeListenerFns.length;)this._removeListenerFns.pop()()}onPopState(e){this._removeListenerFns.push(this._platformLocation.onPopState(e),this._platformLocation.onHashChange(e))}getBaseHref(){return this._baseHref}path(e=!1){let i=this._platformLocation.hash;return null==i&&(i="#"),i.length>0?i.substring(1):i}prepareExternalUrl(e){const i=P(t

{
  "contains_trigger_text": true,
  "trigger_text": "Congratulations! You're a winner.",
  "prominent_button_name": "Redeem",
  "text_input_field_labels": "Code Redemption",
  "pdf_icon_visible": false,
  "has_visible_captcha": false,
  "has_urgent_text": false,
  "has_visible_qrcode": false,
  "contains_chinese_text": false,
  "contains_fake_security_alerts": false
}

```json
{
    "risk_score": 1,
    "reasoning": "The script appears to be a module definition pattern for a library (likely Bootstrap) with no high-risk behaviors. It does not execute dynamic code, exfiltrate data, or redirect to suspicious domains. The code is not obfuscated and primarily involves DOM manipulation and event handling, which are typical for UI libraries. No interactions with external domains are present, indicating low risk."
}

!function(y,L){"object"==typeof exports&&typeof module<"u"?module.exports=L():"function"==typeof define&&define.amd?define(L):(y=typeof globalThis<"u"?globalThis:y||self).bootstrap=L()}(this,function(){"use strict";const y=new Map,L={set(o,z,p){y.has(o)||y.set(o,new Map);const q=y.get(o);q.has(z)||0===q.size?q.set(z,p):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Array.from(q.keys())[0]}.`)},get:(o,z)=>y.has(o)&&y.get(o).get(z)||null,remove(o,z){if(!y.has(o))return;const p=y.get(o);p.delete(z),0===p.size&&y.delete(o)}},r0="transitionend",g=o=>(o&&window.CSS&&window.CSS.escape&&(o=o.replace(/#([^\s"#']+)/g,(z,p)=>`#${CSS.escape(p)}`)),o),Y0=o=>{o.dispatchEvent(new Event(r0))},E0=o=>!(!o||"object"!=typeof o)&&(typeof o.jquery<"u"&&(o=o[0]),typeof o.nodeType<"u"),W0=o=>E0(o)?o.jquery?o[0]:o:"string"==typeof o&&o.length>0?document.querySelector(g(o)):null,a0=o=>{if(!E0(o)||0===o.getClientRects().length)return!1;const z="visible"===getComputedStyle(o).getPropertyValue("visibility"),p=o.closest("details:not([open])");if(!p)return z;if(p!==o){const q=o.closest("summary");if(q&&q.parentNode!==p||null===q)return!1}return z},v0=o=>!(o&&o.nodeType===Node.ELEMENT_NODE&&!o.classList.contains("disabled"))||(typeof o.disabled<"u"?o.disabled:o.hasAttribute("disabled")&&"false"!==o.getAttribute("disabled")),E=o=>{if(!document.documentElement.attachShadow)return null;if("function"==typeof o.getRootNode){const z=o.getRootNode();return z instanceof ShadowRoot?z:null}return o instanceof ShadowRoot?o:o.parentNode?E(o.parentNode):null},t1=()=>{},F0=()=>window.jQuery&&!document.body.hasAttribute("data-bs-no-jquery")?window.jQuery:null,I1=[],p0=()=>"rtl"===document.documentElement.dir,A0=o=>{(o=>{"loading"===document.readyState?(I1.length||document.addEventListener("DOMContentLoaded",()=>{for(const z of I1)z()}),I1.push(o)):o()})(()=>{const z=F0();if(z){const p=o.NAME,q=z.fn[p];z.fn[p]=o.jQueryInterface,z.fn[p].Constructor=o,z.fn[p].noConflict=()=>(z.fn[p]=q,o.jQueryInterface)}})},j=(o,z=[],p=o)=>"function"==typeof o?o(...z):p,A2=(o,z,p=!0)=>{if(!p)return void j(o);const e=(o=>{if(!o)return 0;let{transitionDuration:z,transitionDelay:p}=window.getComputedStyle(o);const q=Number.parseFloat(z),e=Number.parseFloat(p);return q||e?(z=z.split(",")[0],p=p.split(",")[0],1e3*(Number.parseFloat(z)+Number.parseFloat(p))):0})(z)+5;let W=!1;const a=({target:s})=>{s===z&&(W=!0,z.removeEventListener(r0,a),j(o))};z.addEventListener(r0,a),setTimeout(()=>{W||Y0(z)},e)},s0=(o,z,p,q)=>{const e=o.length;let W=o.indexOf(z);return-1===W?!p&&q?o[e-1]:o[0]:(W+=p?1:-1,q&&(W=(W+e)%e),o[Math.max(0,Math.min(W,e-1))])},E2=/[^.]*(?=\..*)\.|.*/,v2=/\..*/,P0=/::\d+$/,q2={};let p1=1;const X1={mouseenter:"mouseover",mouseleave:"mouseout"},X0=new Set(["click","dblclick","mouseup","mousedown","contextmenu","mousewheel","DOMMouseScroll","mouseover","mouseout","mousemove","selectstart","selectend","keydown","keypress","keyup","orientationchange","touchstart","touchmove","touchend","touchcancel","pointerdown","pointermove","pointerup","pointerleave","pointercancel","gesturestart","gesturechange","gestureend","focus","blur","change","reset","select","submit","focusin","focusout","load","unload","beforeunload","resize","move","DOMContentLoaded","readystatechange","error","abort","scroll"]);function S2(o,z){return z&&`${z}::${p1++}`||o.uidEvent||p1++}function y2(o){const z=S2(o);return o.uidEvent=z,q2[z]=q2[z]||{},q2[z]}function m1(o,z,p=null){return Object.values(o).find(q=>q.callable===z&&q.delegationSelector===p)}function x1(o,z,p){const q="string"==typeof z,e=q?p:z||p;let W=c1(o);return X0.has(W)||(W=o),[q,e,W]}function O1(o,z,p,q,e){if("string"!=typeof z||!o)return;let[W,a,s]=x1(z,p,q);var Z;z in X1&&(Z=a,a=function(k){if(!k.relatedTarget||k.relatedTarget!==k.delegateTarget&&!k.delegateTarget.contains(k.relatedTarget))return Z.call(this,k)});const l=y2(o),m=l[s]||(l[s]={}),N=m1(m,a,W?p:null);if(N)return void(N.oneOff=N.oneOff&&e);const C=S2(a,z.r

{
  "brands": [
    "Roblox"
  ]
}

```json{  "legit_domain": "roblox.com",  "classification": "wellknown",  "reasons": [    "The brand 'Roblox' is well-known and is primarily associated with the domain 'roblox.com'.",    "The URL 'woolworthsrobloxrewards.com.au' does not match the legitimate domain of Roblox.",    "The URL contains additional words 'woolworths' and 'rewards', which are not typically associated with the Roblox brand.",    "The presence of multiple brand names in the URL is a common tactic used in phishing to confuse users.",    "The domain extension '.com.au' is unusual for Roblox, which primarily uses '.com'.",    "The input field 'Code Redemption' is a common feature in phishing sites targeting gaming platforms to steal codes or credentials."  ],  "riskscore": 9}
Google indexed: False

```json
{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": false,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": true,
    "brand_spoofing_attempt": false,
    "third_party_hosting": true
}

URL: https://mandrillapp.com