Snell — is it a scam?

https://roblox.com.bn/games/920587237/-Adopt-Me?privateServerLinkCode=98380238867913609504631492904372

urlsandbox · completed · 13495 msjson

Malveillant

malicious

https://roblox.com.bn/games/920587237/-Adopt-Me?privateServerLinkCode=98380238867913609504631492904372 est classé MALVEILLANT avec une confiance de 92 %. Éléments déterminants : déjà signalé par 1 source; code exécuté après déchiffrement; données encodées dans l'adresse. À décharge : nom de forme ordinaire. 5 technique(s) ATT&CK identifiée(s). Action recommandée : blocage et diffusion des indicateurs.

Risk score

100/ 100

above danger threshold

Confidence

92%

concurring sources

Coverage

100%

sources actually queried

Indicators

extracted from the render

ATT&CK techniques

across 3 tactics

Ouverture de la page
+0 msNavigation
https://roblox.com.bn/games/920587237/-Adopt-Me?privateServerLinkCode=98380238867913609504631492904372
Résolution DNS : roblox.com.bn
+368 msDNS
179.43.172.109
HTTPS → roblox.com.bn
+368 msConnection
179.43.172.109:443 · 198.9 Ko · 13126 ms
Résolution DNS : css.rbxcdn.com
+2176 msDNS
3.164.206.97, 3.164.206.73, 3.164.206.95, 3.164.206.19
HTTPS → css.rbxcdn.com
+2176 msConnection
3.164.206.97:443 · 287.2 Ko · 11318 ms
HTTPS → css.rbxcdn.com
+2184 msConnection
3.164.206.97:443 · 6.0 Ko · 61 ms
HTTPS → css.rbxcdn.com
+2188 msConnection
3.164.206.97:443 · 6.0 Ko · 64 ms
HTTPS → css.rbxcdn.com
+2199 msConnection
3.164.206.97:443 · 6.0 Ko · 62 ms
HTTPS → css.rbxcdn.com
+2206 msConnection
3.164.206.97:443 · 6.0 Ko · 62 ms
HTTPS → css.rbxcdn.com
+2208 msConnection
3.164.206.97:443 · 6.0 Ko · 60 ms
Résolution DNS : static.rbxcdn.com
+2214 msDNS
3.164.68.35, 3.164.68.53, 3.164.68.75, 3.164.68.60
HTTPS → static.rbxcdn.com
+2214 msConnection
3.164.68.35:443 · 22.3 Ko · 11280 ms
Résolution DNS : js.rbxcdn.com
+2222 msDNS
3.164.68.51, 3.164.68.88, 3.164.68.91, 3.164.68.28
HTTPS → js.rbxcdn.com
+2223 msConnection
3.164.68.51:443 · 2104.3 Ko · 11271 ms
HTTPS → static.rbxcdn.com
+2223 msConnection
3.164.68.35:443 · 6.0 Ko · 50 ms
HTTPS → js.rbxcdn.com
+2235 msConnection
3.164.68.51:443 · 6.0 Ko · 103 ms
HTTPS → js.rbxcdn.com
+2344 msConnection
3.164.68.51:443 · 1.5 Ko · 107 ms
HTTPS → js.rbxcdn.com
+2348 msConnection
3.164.68.51:443 · 1.5 Ko · 103 ms
HTTPS → js.rbxcdn.com
+2369 msConnection
3.164.68.51:443 · 1.5 Ko · 82 ms
HTTPS → js.rbxcdn.com
+2370 msConnection
3.164.68.51:443 · 6.0 Ko · 77 ms
Résolution DNS : tr.rbxcdn.com
+2381 msDNS
108.156.22.73, 108.156.22.47, 108.156.22.71, 108.156.22.8
HTTPS → tr.rbxcdn.com
+2381 msConnection
108.156.22.73:443 · 821.9 Ko · 11113 ms
HTTPS → css.rbxcdn.com
+2383 msConnection
3.164.206.97:443 · 1.5 Ko · 11111 ms
HTTPS → css.rbxcdn.com
+2405 msConnection
3.164.206.97:443 · 1.5 Ko · 11089 ms
HTTPS → css.rbxcdn.com
+2412 msConnection
3.164.206.97:443 · 6.0 Ko · 11082 ms
Résolution DNS : images.rbxcdn.com
+3139 msDNS
108.156.22.60, 108.156.22.37, 108.156.22.66, 108.156.22.16
HTTPS → images.rbxcdn.com
+3139 msConnection
108.156.22.60:443 · 90.3 Ko · 10355 ms
Résolution DNS : roblox.com
+5431 msDNS
128.116.5.3
HTTPS → roblox.com
+5431 msConnection
128.116.5.3:443 · 7.6 Ko · 8063 ms
Résolution DNS : ssl.google-analytics.com
+5472 msDNS
216.58.201.8, 2a00:1450:4010:c03::61
HTTPS → ssl.google-analytics.com
+5472 msConnection
216.58.201.8:443 · 24.5 Ko · 8022 ms
HTTPS → css.rbxcdn.com
+5476 msConnection
3.164.206.97:443 · 303.2 Ko · 8018 ms
HTTPS → css.rbxcdn.com
+5651 msConnection
3.164.206.97:443 · 0.0 Ko · 7843 ms
Résolution DNS : ecsv2.roblox.com
+8112 msDNS
128.116.13.3
HTTPS → ecsv2.roblox.com
+8112 msConnection
128.116.13.3:443 · 7.9 Ko · 5382 ms
Résolution DNS : lms.roblox.com
+10470 msDNS
128.116.13.3
HTTPS → lms.roblox.com
+10470 msConnection
128.116.13.3:443 · 8.0 Ko · 3024 ms
HTTPS → images.rbxcdn.com
+13145 msConnection
108.156.22.60:443 · 14.9 Ko · 82 ms
Fin de l'analyse
+13495 msNavigation
13495 ms
Formulaire de saisie
undatedForm
destination : /search
Code déchiffré puis exécuté
undatedScript
Motif eval/Function nourri par atob/unescape — signature de kit
Erreur console
undatedConsole
Failed to load resource: the server responded with a status of 404 ()
Erreur console
undatedConsole
Refused to execute script from 'https://roblox.com.bn/js/utilities/bundleVerifier.js?v=2f89a5fa99eb4cb3591ea59b884e458d' because its MIME type ('text/html') is not executable, and strict MIME type che
Erreur console
undatedConsole
Failed to load resource: the server responded with a status of 404 ()
Erreur console
undatedConsole
Failed to load resource: the server responded with a status of 404 ()
Erreur console
undatedConsole
Refused to execute script from 'https://roblox.com.bn/rotating-client-service/v1/prelude/latest' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.
Erreur console
undatedConsole
Failed to load resource: the server responded with a status of 404 ()
Erreur console
undatedConsole
Refused to execute script from 'https://roblox.com.bn/game/QueryPreserver.js' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.
Erreur console
undatedConsole
TypeError: Cannot read properties of undefined (reading 'marginLeft') at t.default (https://js.rbxcdn.com/4b4ed339879e21ebd989965a4ade1a7d6f3181871df8d816198c1cdc73b629d5.js:17:28899) at t.Bad
Erreur console
undatedConsole
Access to XMLHttpRequest at 'https://lms.roblox.com/recipe?iteration=0' from origin 'https://roblox.com.bn' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the r
Erreur console
undatedConsole
Failed to load resource: net::ERR_FAILED

The page, as seen from the sandbox

Screenshot of the analysed page, taken in an isolated environment

inert image · hover to reveal