EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

No screenshot available

Detection Info

http://www.lnk.ink/robIox.com-users-4517528126-Profile
Detected Brand
Roblox
Country
International
Confidence
100%
HTTP Status
200
Report ID
8cae53cb-122…
Analyzed
2026-01-05 01:02
Final URL (after redirects)
https://www.roblox.com.ml/users/6987631675/profile

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T14B63957292102437617B79D9F165771AA2D3C70FCA8246E1A2FC939A0FDACE1F81744E
CONTENT ssdeep
1536:qajXWn9rbVN+1hOUDNBYuOUertZFHcHiHjH2HKHKHKHKHKHKHKHKHKHKTwG8mg:5jXWpVNovpquOB8CDWqqqqqqqqqqTwf

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
b4471343c9bcccbc
VISUAL aHash
0000d3ffc7ffc7ff
VISUAL dHash
e8c8363016162d0c
VISUAL wHash
0000d3dfc3c3c7df
VISUAL colorHash
072000002c0
VISUAL cropResistant
e8c8363016162d0c

Code Analysis

Risk Score 100/100
Threat Level BAJO
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: No threat detected - Legitimate Roblox profile page
• Target: Roblox user
• Method: Displaying the user's profile, showing connections and badges
• Exfil: No data exfiltration detected
• Indicators: Official Roblox logo, profile information, and badges
• Risk: LOW - Legitimate website content

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • js_packer
  • base64_strings

🎯 Kit Endpoints

  • https://www.roblox.com/catalog/2510235063/null
  • https://www.roblox.com/catalog/3381456332/null
  • /login?returnUrl=1456563967724250
  • https://www.roblox.com.ml/info/blog?locale=en_us
  • https://www.roblox.com.ml/catalog?CatalogContext=1&Keyword=
  • https://www.roblox.com/catalog/86499716/null
  • https://www.roblox.com/catalog/2510236649/null
  • https://www.roblox.com/catalog/301823806/null
  • https://www.roblox.com/catalog/10236597746/null
  • https://www.roblox.com/catalog/301824116/null
  • https://www.roblox.com/catalog/86499698/null
  • https://www.roblox.com/catalog/2510230574/null
  • https://www.roblox.com/catalog/301823492/null
  • https://www.roblox.com/catalog/2510240941/null
  • /catalog
  • https://www.roblox.com/catalog/2510233257/null
  • https://www.roblox.com/catalog/2510238627/null
  • https://www.roblox.com/catalog/10027149516/null
  • https://www.roblox.com/catalog/2510242378/null

📡 API Calls Detected

  • get
  • GET
  • https://ro.blox.com/Ebh5?
  • babylonjs
  • https://apis.
  • https://help.roblox.com/hc/articles/30428367965460
  • POST

📤 Form Action Targets

  • /search

Scan History for www.lnk.ink

Found 7 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.