Security Scan Report: loquacious-axolotl-da2098.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://loquacious-axolotl-da2098.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed phishing page impersonating Roblox on a free Netlify subdomain, collecting login credentials and exfiltrating them to Telegram and webhook.site; flagged by Google Safe Browsing for social engineering.

Risk Factors (5)
Brand impersonation of Roblox on a domain that is not roblox.com
Credential-harvesting login form (password + email/username fields)
Cross-origin credential/data exfiltration endpoints (api.telegram.org bot, webhook.site)
Google Safe Browsing Social Engineering detection
Free hosting-platform subdomain with unknown creation date and no domain reputation
Domain age information unavailable

Details

Page Title

Roblox

Scan Type

public

Domain Name Analysis

The domain name 'loquacious-axolotl-da2098.netlify.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'loquacious-axolotl-da2098'. Its registrable label 'netlify' stretches across 7 characters holding 2 vowels versus five consonants. Segmentation suggests three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

BRoblox Logo Log In Forgot password?

Page Load Overview

0.64s
Total Load Time
17 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:30 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
163.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1185.15.59.240United States
AS14907Wikimedia Foundation Inc.
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
33--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14B7163D796A304423642E4B43B65E60472A6C147970ACD647EEC73D8CF49B8A58F67CC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:T0TGZBNKCRxFh7FCztb45JbavdsYnu57HsipfC:bKCRxFh7FCztbQJbavW57MiE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3812:AQAMAQAAAAASCUIAAAABRGgRACAEgAiRQsAQBAEBggAFAAAAAgoAAQEjAgBAIOhoAMmQYABJgIMACAgAAIAEYACcCAEAAojS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:9998666799996666
Difference Hash:000008b2b2080000
Wavelet Hash:0c0c3c3c18180000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data