Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
No screenshot available
Detection Info
https://inlnk.co/Rfufe
Detected Brand
Roblox
Country
International
Confidence
100%
HTTP Status
200
Report ID
50903c0d-f1b…
Analyzed
2026-01-13 12:49
Final URL (after redirects)
https://www.roblox.com.ml/users/450327411/profile
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B173967292102437617B79DAF164771AA2D3D70FCA8256E1A2F8939A0FD6CE1FC1740E |
|
CONTENT
ssdeep
|
1536:XIOXWnfrNyM+O0NQ3QPYuOheIJZ37Hz7Ha7HT7Hc7H57Hv7HP7H07HS7Hb7HP7Hk:4OXWpyMaSAguOF7T767z787Z7P7v7U7X |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b446433199cdbcbc |
|
VISUAL
aHash
|
0000d3ffc3c7ffff |
|
VISUAL
dHash
|
e8c83630be1e0006 |
|
VISUAL
wHash
|
0000c3dfc3c3ffe3 |
|
VISUAL
colorHash
|
070010100c0 |
|
VISUAL
cropResistant
|
e8c83630be1e0006 |
Code Analysis
Risk Score
100/100
Threat Level
BAJO
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Potential redirection to malicious site through a link shortener.
• Target: Roblox users.
• Method: Utilizing a shortened URL (inlnk.co) that may redirect to a phishing website.
• Exfil: Potentially collecting user credentials or sensitive information if the redirected site is malicious.
• Indicators: Use of a link shortener which obscures the final destination, domain age is over one year.
• Risk: LOW - Potential redirection to a malicious site depends on the destination of the link shortener.
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- js_packer
- base64_strings
🎯 Kit Endpoints
- https://www.roblox.com/catalog/78705808188544/null
- https://www.roblox.com.ml/catalog?CatalogContext=1&Keyword=
- /catalog
- https://www.roblox.com/catalog/15093053680/null
- https://www.roblox.com/catalog/134805528759116/null
- https://www.roblox.com/catalog/15281139898/null
- https://www.roblox.com/catalog/837011741/null
- https://www.roblox.com/catalog/93993406355955/null
- /login?returnUrl=568278933330048
- https://www.roblox.com/catalog/18538146480/null
- https://www.roblox.com/catalog/4390891467/null
- https://www.roblox.com.ml/info/blog?locale=en_us
- https://www.roblox.com/catalog/18538133604/null
- https://www.roblox.com/catalog/133585142312184/null
- https://www.roblox.com/catalog/123695349157584/null
- https://www.roblox.com/catalog/14497478168/null
- https://www.roblox.com/catalog/127094847813921/null
- https://www.roblox.com/catalog/11573370910/null
- https://www.roblox.com/catalog/128475661806875/null
- https://www.roblox.com/catalog/619528412/null
- https://www.roblox.com/catalog/16290603910/null
📡 API Calls Detected
- babylonjs
- https://help.roblox.com/hc/articles/30428367965460
- GET
- https://ro.blox.com/Ebh5?
- POST
- https://apis.
- get
📤 Form Action Targets
- /search
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for inlnk.co
Found 10 other scans for this domain
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.