therobo[.]web[.]app
“THE ROBO NFT Collection | 3333 Hand-Drawn Robots”
therobo.web.app — 未验证. 品牌冒充:Discord; 诈骗类型:Crypto Drainer. 证据摘要: VirusTotal 1/89 (Gridinsoft); URLScan malicious verdict; 1 external blocklist match (ScamSniffer); PhishDestroy score 58/100. 注册商: Google Domains.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
therobo.web.app is a tenant hostname on Fastly, not a separately registered domain. PhishDestroy first observed the hostname on Sep 6, 2026. Stored content metadata identifies Discord as the apparent target. The captured page title is “THE ROBO NFT Collection | 3333 Hand-Drawn Robots”. Stored page analysis classifies the content as crypto drainer. Current evidence score: 58/100 (high).
Positive findings are stored from 3 sources: VirusTotal, ScamSniffer, and URLScan. VirusTotal recorded 1 detections among 89 engines: Gridinsoft on Sep 7, 2026 at 15:28 UTC. ScamSniffer listed the hostname in the separate external-blocklist snapshot on Sep 7, 2026 at 14:20 UTC. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Robinhood and assigned phishing as its category on Sep 6, 2026 at 17:08 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Sep 7, 2026 at 15:28 UTC.
The collector marked the hostname reachable on Sep 6, 2026 at 13:04 UTC, but did not retain the HTTP response code. Fastly is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 199.36.158.100 on AS54113 (FASTLY - Fastly, Inc., US). The IP and ASN identify shared Fastly infrastructure, not the tenant operator. The stored server header is ESF. DOM analysis on Sep 6, 2026 at 14:22 UTC returned 0/100; the source detections above were recorded separately. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. The platform TLS certificate was issued by Google Trust Services with validity through Oct 18, 2026; checked Sep 6, 2026 at 16:02 UTC.
The content indicators and 3 positive source findings support the current Discord-themed crypto drainer classification.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 4 identified
Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.
firebase.google.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of therobo.web.app · checked Sep 6, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。