Security Scan Report: startschoolrewards.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 4 domains to perform 19 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://startschoolrewards.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 93%

10
Risk Score

Fake Roblox login page on a Netlify subdomain impersonating Roblox and harvesting account credentials, with HIGH IDS alerts for obfuscated JavaScript. Do not enter any login details.

Risk Factors (5)
Brand impersonation of Roblox on a domain that is not roblox.com
Credential-harvesting login form (username/email + password) on a free shared hosting subdomain
HIGH IDS alerts for obfuscated JavaScript (ET WEB_CLIENT Obfuscated Javascript // ptth x2)
Subdomain on hosting platform (.netlify.app) with unknown, potentially brand-new creation date
Unranked / no domain reputation while presenting itself as a major brand's login page
Domain age information unavailable

Details

Page Title

Log in to Roblox

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'startschoolrewards.netlify.app' is registered and includes subdomain 'startschoolrewards'. The registrable portion 'netlify' spans 7 characters split between 2 vowels and 5 consonants. Word splitting yields three words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

RQ@BLOX Charts Marketplace Create Robux @ Search A aN Login to Roblox i t+ Powered by Netlify & Sher - BD oa “ AboutUs Jobs Blog Parents GiftCards Help Terms Accessibility Privacy Your Privacy C...

Page Load Overview

8.02s
Total Load Time
487 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:496 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business91% confidence
Type: webapp
Method: ml+structural

All Detected Categories

corporate business
91%
entertainment media
69%
technology software
40%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
463.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
3104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
354.192.35.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
335.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
354.192.35.90Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
196--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15982C66255F242A7202FF59C37E677DA38638307E302DBC4B9AD57D40F86C472963A58

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:RKhqHAkCEjclRFS1TLrgLENyWu4fRDk8WeHEjHkvcYJ8tKqz1DW52VurfIvE:RKmPh3Dk8WuEjHkvYtKqg24t

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19277:oMYxVswZFIifk0NDSmRKghgBkARY7oQIGwJfkGySgUAWUEK0VQKwXHAJUkJChG/1AQYjIrXAmMEJYYaAEggQJgcTphTIFAQx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:73181a3b1cfe1018
Perceptual Hash:8c8d66e0caa5f4da
Difference Hash:e77132f2b0b6e371
Wavelet Hash:f11c1e7b1cfe101c
Color Hash:N/A

Other Hashes

Crop Resistant:e77132f2b0b6e371

Scan History

Scan history not available

Unable to load historical scan data