Security Scan Report: robl.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 29 IPs in 2 countries across 19 domains to perform 137 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://robl.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed Roblox credential-phishing clone on robl.vercel.app: a fake Roblox login form collecting username and password, flagged by Safe Browsing for social engineering and by threat intel for phishing.

Risk Factors (5)
Brand impersonation: presents itself as the official Roblox login portal on a non-Roblox domain
Credential harvesting login form (password + email/username) on a shared hosting subdomain
Google Safe Browsing Social Engineering detection
Threat-intel phishing report on the primary domain
IDS alerts for actor-abused cloud hosting service (vercel.app) in DNS and TLS SNI
Domain age information unavailable

Details

Page Title

Roblox

Scan Type

public

Domain Name Analysis

The domain 'robl.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'robl'. Count 6 characters in 'vercel' holding 2 vowels versus four consonants. Splitting it apart reveals 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://robl.vercel.app/

Page Load Overview

5.55s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:58%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,197 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media75% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
75%
technology software
66%
download file sharing
37%
corporate
35%
corporate business
31%

Detected Features

Login Form
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
454.192.35.3Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
418.66.112.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
423.207.210.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
43.174.46.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
418.66.147.49Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
423.53.40.41Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4142.251.20.113Google · CDNUnited States
AS15169Google LLC
4142.250.154.97Google · CDNUnited States
AS15169Google LLC
13729--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17FA3E8A7FF51B432B50F42F1D016A514D112952BDA4ED890F1FCB3B82F88AE3AF52592

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:SXP1EzGZKSFciMnTy3jxQsagcBw9VuQALmsOi9aDxjjfvHW6nCRAUEpF0I7/OFVo:SXO6xf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:103531:DiAQVCMSQBJAQjiHOksYEw7IQGM5BoQBEcRlDBwYGMdGEHAgPkAEAWLBEApqQJyMBTEuM2Ak1hwAICpGZMAEGCTSCiGWICYc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fefefefefefeff
Perceptual Hash:d55513551357551d
Difference Hash:a8222a2a22020000
Wavelet Hash:001a3838f8e8fcfd
Color Hash:#d279c1

Other Hashes

Crop Resistant:a8222a2a22020000

Scan History

Scan history not available

Unable to load historical scan data