Security Scan Report: urlz.li

Redirected to:
https://www.roblox.ly/users/2101656425/profile
Site favicon
Submitted: Completed: publiccompleted
This website contacted 32 IPs in 8 countries across 27 domains to perform 325 HTTP transactions. The main domain is urlz.li.

Submitted URL: https://urlz.li/khrlLrkx

Effective URL:
https://www.roblox.ly/users/2101656425/profile
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

A lookalike of Roblox (roblox.ly, reached via shortener urlz.li) cloning Roblox's profile page and trademarks, with phishing threat-intel and a signup funnel to a non-official domain — do not enter credentials.

Risk Factors (5)
Impersonation of a different entity's brand (Roblox) on a domain that is not Roblox's official domain
Lookalike domain roblox.ly deceptively similar to roblox.com, unranked in Cisco Umbrella top 1M
Phishing threat-intelligence reports on both the final domain and the entry shortener (single-source, unverified)
Signup redirect link steering users to create accounts on the impersonating host
HIGH-severity IDS alert (Spamhaus DROP listed traffic)
Domain age information unavailable

Details

Page Title

TomyamBEDAWW320z - Roblox

Scan Type

public

Domain Name Analysis

Domain 'urlz.li' uses the .li country-code top-level domain and has no subdomain. The core label 'urlz' covers 4 characters with one vowel and 3 consonants. Segmentation suggests two words: url, z. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

ROBLOX Charts Marketplace Create Robux Q Search 3D TomyamBEDAWW 320z f@ @TomyamBEDAWW320z Aad Connection Ni 242 Connections — 85KFollowers — 100Following hi my friends trading with me more Abo...

Page Load Overview

6.16s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,537 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate business80% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
80%
entertainment media
77%
technology software
71%
documentation technical
66%
social media network
61%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15202.170.75.201Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
10136.144.245.122Groningen, Groningen, Netherlands
AS20857Signet B.V.
1018.66.112.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1018.64.211.63Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
103.174.46.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
1018.64.211.77Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1054.192.35.108Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10192.178.183.97Google · CDNUnited States
AS15169Google LLC
10128.116.31.3Slough, England, United Kingdom
AS22697Roblox
32532--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18904E873FB546037A82F6AF6A0546718D142E607DE4645D4B0ECF3B51FCAEE3A94340A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:32X+G68iqaVglV8uOQ7Q7V7u7n7V7s7I7C7v797+7L7B7h777W7p1z0YTapoW6WP:GX/NaVglV57Q7V7u7n7V7s7I7C7v797E

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:182161:BJZoKD3hGp4gACBiAIYgZFFigVBjhGkCsAgAIOlKVAAGCMQCJ+QLgisABDgBEUA0MwDLwAEwoCogCVDQwjQ8IABEzAAFQMgi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000c3dfdfc3ffff
Perceptual Hash:b4064761999cbdd9
Difference Hash:ecccb6341e1e2606
Wavelet Hash:000002dfcfc3ffeb
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data