Security Scan Report: robl.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 27 IPs in 3 countries across 19 domains to perform 137 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://robl.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Cloned Roblox login page on robl.vercel.app harvesting usernames and passwords; flagged by Safe Browsing for social engineering and by threat intel for phishing. Do not enter credentials.

Risk Factors (6)
Impersonation of Roblox (roblox.com) on the unrelated host robl.vercel.app
Brand-styled login form collecting username/email/phone and password
Google Safe Browsing Social Engineering detection
Threat-intel phishing report on the primary domain
Instant-publish hosting subdomain (vercel.app) with unknown actual creation date
Repo-style 'robl' subdomain chosen to mimic the Roblox brand
Domain age information unavailable

Details

Page Title

Roblox

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'robl.vercel.app' is registered and includes subdomain 'robl'. Its registrable label 'vercel' stretches across 6 characters containing 2 vowels alongside 4 consonants. Segmentation suggests two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://robl.vercel.app/

Page Load Overview

5.28s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,197 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media75% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
75%
technology software
66%
download file sharing
37%
corporate
35%
corporate business
31%

Detected Features

Login Form
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
554.192.35.100Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
595.101.61.30Akamai · CDNWarsaw, Mazovia, Poland
AS20940Akamai International B.V.
523.53.40.48Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
52.21.20.133Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5192.178.183.97Google · CDNUnited States
AS15169Google LLC
518.66.147.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
523.53.40.75Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5142.250.154.101Google · CDNUnited States
AS15169Google LLC
13727--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17FA3E8A7FF51B432B50F42F1D016A514D112952BDA4ED890F1FCB3B82F88AE3AF52592

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:SXP1EzGZKSFciMnTy3jxQsagcBw9VuQALmsOi9aDxjjfvHW6nCRAUEpF0I7/OFVo:SXO6xf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:103531:DiAQVCMSQBJAQjiHOksYEw7IQGM5BoQBEcRlDBwYGMdGEHAgPkAEAWLBEApqQJyMBTEuM2Ak1hwAICpGZMAEGCTSCiGWICYc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fefefefefefeff
Perceptual Hash:d55513551357551d
Difference Hash:a8222a2a22020000
Wavelet Hash:00183838faeafcfd
Color Hash:N/A

Other Hashes

Crop Resistant:a8222a2a22020000

Scan History

Scan history not available

Unable to load historical scan data