SafeMode - Analysis: www.is.gd

Visual Capture

No screenshot available

Detection Info

http://www.is.gd/9gWhXF/

Detected Brand

Roblox

Country

International

Confidence

100%

HTTP Status

200

Report ID

ac5ab627-3b8…

Analyzed

2026-01-18 12:04

Final URL (after redirects)

https://www.roblox.com.ht/games/75992362647444/VOID-Tap-Simulator?privateServerLinkCode=163708596890169638375525641968

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C023B67262211833A17FA2DDF159B715A1D3E74FCA825BE1B1F893660EC9C21FD0391A
CONTENT ssdeep	768:RdIsobXW10rL6GWpxoGGF+byaKosiirvrvEY3oAdLvBRIbYSb2C09diEK:z12XW10rGhTyF+xsjM6nXI0i8jiEK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b03032c7cfcd4d4d
VISUAL aHash	c7c7c3dfffffffff
VISUAL dHash	9c1f9e3e3038320a
VISUAL wHash	00838383cfcfdfc3
VISUAL colorHash	07200000048
VISUAL cropResistant	9c1f9e3e3038320a,0b3964e76e7d6509

Code Analysis

Risk Score 100/100

Threat Level BAJO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: None detected
• Target: Roblox users
• Method: Legitimate game page
• Exfil: None
• Indicators: Matches official Roblox branding, no forms or input fields
• Risk: LOW - Legitimate content

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

atob
eval
fromCharCode
unescape
hex_escape
unicode_escape
js_packer
base64_strings

🎯 Kit Endpoints

https://www.roblox.com.ht/NewLogin?returnUrl=https%3A%2F%2Fwww.roblox.com%2Fgames%2F203571125211%2FVOID-Tap-Simulator
/info/blog?locale=en_us
https://www.roblox.com/catalog?CatalogContext=1&Keyword=
https://www.roblox.com/catalog
/login?returnUrl=

📡 API Calls Detected

https://apis.
GET
https://ro.blox.com/Ebh5?pid=experiencestart_mobileweb&is_retargeting=false&af_dp=
https://help.roblox.com/hc/articles/30428367965460
get
POST