Security Scan Report: hilarious-toffee-a61e94.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://hilarious-toffee-a61e94.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake French-language Roblox login page on a random netlify.app subdomain that collects usernames and passwords for the impersonated brand Roblox. Do not enter credentials; report it.

Risk Factors (5)
Impersonation of the Roblox brand (login UI, logo/name, copyright notice) on a domain that is not roblox.com
Credential-capturing login form (username + password) on a shared hosting-platform subdomain
Hostname is a random Netlify tenant name with no relation to the impersonated brand
Domain reputation unranked in Cisco Umbrella, and hosting-platform subdomain age is unknown
IDS hunting alerts flagging this Netlify host as a possible phishing landing
Domain age information unavailable

Details

Page Title

Connexion à Roblox

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'hilarious-toffee-a61e94.netlify.app' is registered; it also runs on subdomain 'hilarious-toffee-a61e94'. Count 7 characters in 'netlify' split between two vowels and 5 consonants. Tokenizing the label suggests three words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Q Connexion à Roblox Identifiant/E-mail/Téléphone Mot de passe Connexion Mot de passe ou nom d'utilisateur oublié ? Envoyez-moi un code unique par email Connexion rapide Vous n'avez pas de comp...

Page Load Overview

0.27s
Total Load Time
20 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:374 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business95% confidence
Type: static
Method: ml+structural

All Detected Categories

corporate business
95%
entertainment media
57%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
235.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
0128.116.31.3Slough, England, United Kingdom
AS22697Roblox
063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
23--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T129D186D776B316417212C9A963A7075A3129E103C106C96DBBD0E27DCF85AC5EAF2B8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:RTGOBBuT1uC9p732ghr9hOrq0zH8ZebD/phbDAZLUt8IB6YsObGC:61uC9pqgx9h5HFbqqC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6708:gEfUogBCgAHJISFxgIihAAKBgkKAAJiAgAjJAQjEg+gCtKAACJGsiBUUR0TQFSQUCwIASHwBBDADiEUxhQgjAkJiYgAAQgEM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9918181818000000
Perceptual Hash:88aaa2abababaaaa
Difference Hash:51b2333232301000
Wavelet Hash:ffd8d8d838380000
Color Hash:N/A

Other Hashes

Crop Resistant:51b2333232301000

Scan History

Scan history not available

Unable to load historical scan data