SafeMode - Analysis: roblox.com.ge

Captura Visual

Informações de Detecção

https://roblox.com.ge/games/75861116014995/Obby-2-vibe-New-Poses-REAL?privateServerLinkCode=56754948957177697591926115511284

Detected Brand

Roblox

Country

International

Confiança

100%

HTTP Status

200

Report ID

196cdd2f-b15…

Analyzed

2026-01-02 00:07

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T12903C972A1206C37616FA3D6F515B70691D3E70ECB8297E2A1F863760AD9C31FD1341A
CONTENT ssdeep	384:d+XXB1fD6Wdy+pvLN8rYiMQh4xWSgFAG+ow72iyTFD8AbZeQylnEF1/1LCmcAxJi:dgXB1Ny2QeFgu17byh8A1F9NpBxJ8m8

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b03011cbc7cfc54f
VISUAL aHash	c7c783dffffffffe
VISUAL dHash	9c1f2e0e020051d4
VISUAL wHash	06c7c3c7ffff0000
VISUAL colorHash	07047000000
VISUAL cropResistant	9c1f2e0e020051d4,3d1e5fcce6e686c4

Análise de Código

Risk Score 95/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Kit de phishing para roubo de credenciais do Roblox
• Alvo: Usuários do Roblox
• Método: Formulário falso que rouba credenciais de usuário
• Exfil: Dados enviados para /search
• Indicadores: Desajuste de domínio (roblox.com.ge), JavaScript ofuscado, detecção de envio de formulário JavaScript
• Risco: ALTO - Roubo imediato de credenciais

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

atob
eval
fromCharCode
unescape
hex_escape
unicode_escape
base64_strings

🎯 Kit Endpoints

https://roblox.com.ge/catalog?CatalogContext=1&Keyword=
/login?returnUrl=5807716026081448
/catalog
https://roblox.com.ge/info/blog?locale=en_us

📡 API Calls Detected

GET
https://en.help.roblox.com/hc/articles/7997207259156
POST
https://ro.blox.com/Ebh5?pid=experiencestart_mobileweb&is_retargeting=false&af_dp=
get
https://apis.