Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://www.roblox.tc/users/2085250390/profile
Detected Brand
Roblox
Country
International
Confidence
100%
HTTP Status
200
Report ID
5a63f5ed-beb…
Analyzed
2026-01-24 11:44
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T15463757291102837517B79DAF164B71AA2D3C70FCA8256E1A2F8939A0FD6CE1FC1744E |
|
CONTENT
ssdeep
|
1536:arKXWn9rba4+dA9p8xoYuOF22Z57Hb7HD7H/7Hy7Hv7H37HE7H37Hn7HF7H37HPZ:aKXW9a4rnSVuOT777j7f7S7P7X7k7X7z |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b4164363d19cbcbc |
|
VISUAL
aHash
|
0000d3ffc3c3ffff |
|
VISUAL
dHash
|
e8e83630161e0006 |
|
VISUAL
wHash
|
0000c3dfc3c3ffe3 |
|
VISUAL
colorHash
|
07201010080 |
|
VISUAL
cropResistant
|
e8e83630161e0006 |
Code Analysis
Risk Score
100/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Credential harvesting phishing kit
• Target: Roblox users internationally
• Method: Fake login form stealing user credentials
• Exfil: Data sent to unknown server
• Indicators: Domain mismatch, obfuscated JavaScript, form submission
• Risk: HIGH - Immediate credential theft
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- atob
- eval
- fromCharCode
- unescape
- hex_escape
- unicode_escape
- js_packer
- base64_strings
🎯 Kit Endpoints
- /catalog
- https://www.roblox.com/catalog/12995020128/null
- https://www.roblox.com/catalog/12995014400/null
- https://www.roblox.com/catalog/12995015868/null
- https://www.roblox.com/catalog/2510235063/null
- https://www.roblox.com/catalog/607702162/null
- https://www.roblox.com/catalog/2510242378/null
- https://www.roblox.com/catalog/12995018829/null
- https://www.roblox.tc/catalog?CatalogContext=1&Keyword=
- https://www.roblox.com/catalog/2510230574/null
- https://www.roblox.com/catalog/301811432/null
- https://www.roblox.com/catalog/10647852134/null
- https://www.roblox.com/catalog/10638267973/null
- https://www.roblox.com/catalog/2510233257/null
- https://www.roblox.com/catalog/607785314/null
- https://www.roblox.com/catalog/2510236649/null
- https://www.roblox.tc/info/blog?locale=en_us
- https://www.roblox.com/catalog/12995017412/null
- https://www.roblox.com/catalog/2510238627/null
- /login?returnUrl=3581548782210
- https://www.roblox.com/catalog/2510240941/null
📡 API Calls Detected
- https://help.roblox.com/hc/articles/30428367965460
- POST
- https://ro.blox.com/Ebh5?
- get
- GET
- babylonjs
- https://apis.
📤 Form Action Targets
- /search
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for www.roblox.tc
Found 10 other scans for this domain
-
https://www.roblox.tc/games/87206555365816/Dollhou...
https://www.roblox.tc/games/109983668079237/Steal-...
https://www.roblox.tc/communities/263300135/game
https://www.roblox.tc/login?returnUrl=616118108536...
https://www.roblox.tc/login?returnUrl=616118108536...
https://www.roblox.tc/
https://www.roblox.tc/users/4608697529/profile
https://www.roblox.tc/games/1537690962/Bee-Swarm-S...
https://www.roblox.tc/games/131623223084840/Escape...
https://www.roblox.tc/users/9045653516/profile
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.