EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of www.roblox.tc

Detection Info

https://www.roblox.tc/users/5036852248/profile
Detected Brand
Roblox
Country
International
Confidence
100%
HTTP Status
200
Report ID
6d7769c5-c84…
Analyzed
2026-01-18 00:15

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T10C73877292502437617B79DAF064771AA2D3C74FCA8246E1A2FC939A0FD6CE1F81744E
CONTENT ssdeep
1536:dMFXWn9rzF9+P3IXez+YuO0eAniZw7Hg7Hz7HR7Ho7HH7Ho7Hv7HJ7HT7Hy7H57d:mFXWJF9uUKruO8z7A7T7x7I7n7I7P7pK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b0475363cb9ccc3c
VISUAL aHash
0000dbffc3c3c7ff
VISUAL dHash
e8c836301e161c1e
VISUAL wHash
0000d3dfc3c3c7ef
VISUAL colorHash
07201008080
VISUAL cropResistant
e8c836301e161c1e

Code Analysis

Risk Score 100/100
Threat Level BAJO
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Potential Data Breach due to unofficial roblox.tc domain.
• Target: Roblox account credentials.
• Method: Unofficial Roblox domain requesting login details.
• Exfil: No Data.
• Indicators: Unofficial Roblox domain with input forms.
• Risk: LOW - Risk of phishing and stolen credentials.

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • js_packer
  • base64_strings

🎯 Kit Endpoints

  • https://www.roblox.com/catalog/129583880217526/null
  • https://www.roblox.com/catalog/12686701348/null
  • https://www.roblox.com/catalog/439945661/null
  • https://www.roblox.com/catalog/658833139/null
  • https://www.roblox.com/catalog/15093053680/null
  • https://www.roblox.com/catalog/658832807/null
  • https://www.roblox.com/catalog/4987796488/null
  • /login?returnUrl=9004583604115399
  • https://www.roblox.com/catalog/139607718/null
  • https://www.roblox.com/catalog/131592085/null
  • https://www.roblox.com/catalog/126354114956642/null
  • https://www.roblox.tc/info/blog?locale=en_us
  • https://www.roblox.com/catalog/6550129/null
  • https://www.roblox.com/catalog/11573370910/null
  • https://www.roblox.com/catalog/17240241324/null
  • https://www.roblox.com/catalog/16318947445/null
  • https://www.roblox.tc/catalog?CatalogContext=1&Keyword=
  • /catalog
  • https://www.roblox.com/catalog/111361303850697/null
  • https://www.roblox.com/catalog/4637151279/null
  • https://www.roblox.com/catalog/117863280989654/null
  • https://www.roblox.com/catalog/124133969040178/null
  • https://www.roblox.com/catalog/628771505/null
  • https://www.roblox.com/catalog/18852737131/null

📡 API Calls Detected

  • get
  • https://help.roblox.com/hc/articles/30428367965460
  • babylonjs
  • GET
  • https://ro.blox.com/Ebh5?
  • POST
  • https://apis.

📤 Form Action Targets

  • /search

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Roblox
https://www.robiox.com.ps/users/8863269273/profile
May 21, 2026

Scan History for www.roblox.tc

Found 10 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.