Security Scan Report: www.roblox.rw

Site favicon
Submitted: Completed: publiccompleted
This website contacted 30 IPs in 9 countries across 20 domains to perform 228 HTTP transactions. The main domain is roblox.rw and was registered 1 month ago.

Submitted URL: https://www.roblox.rw/games/139410450104051/-chat-with-ai-emiko?privateServerLinkCode=99699307865578090390768087611154

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

roblox.rw clones a Roblox experience page with Roblox branding on a 42-day-old non-official domain, carries a single-source phishing report, and urges users to run a downloaded 'RobloxPlayer.exe'. Avoid.

Risk Factors (5)
Brand impersonation of Roblox on a non-official, 42-day-old domain
Single-source phishing threat-intel match on the primary domain
Deceptive hostname pattern (roblox.rw vs roblox.com) with full Roblox page clone
Lure text directing users to download and run a 'RobloxPlayer.exe' installer
Domain unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

Chat with AI Emiko!- Roblox

Scan Type

public

Domain Name Analysis

The domain name 'www.roblox.rw' uses the .rw country-code top-level domain and includes subdomain 'www'. The core label 'roblox' covers 6 characters containing two vowels alongside 4 consonants. Segmentation suggests 1 word: roblox. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.roblox.rw/games/139410450104051/-chat-with-ai-emiko?privateServerLinkCode=99699307865578090390768087611154

Page Load Overview

5.26s
Total Load Time
3.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,261 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(96%)🇮🇹it(3%)🇪🇸es(2%)

Website Classification

Primary Category

technology software44% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
44%
adult content
42%
corporate
35%
documentation technical
26%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1143.174.46.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
38172.67.180.38Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3818.66.112.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1154.192.35.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
718.64.211.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
73.174.46.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
723.194.190.91Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
754.192.35.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7142.251.20.97Google · CDNUnited States
AS15169Google LLC
718.66.112.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
22830--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T146C3FAA3FBA5B436E45B82F990227544D551D917CA09CC80F0FCB3B82FC8EE36A53956

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:+qwmpHvvX63T0KoZVtBUgw8lmmph/l7OqLHeCYDGFpzjMYmXatT0qew7ScfHSNKy:+qZXXc0K4l7OqrNYDYLtT/7dDfa1Mc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:127961:AAatqxWGSsB7g4CihJARu8yJNQg4i0IAAK2b9CKQAAQiGCqhgCQMKCIQIAQiwQYyELLcISEQgQMMW1MhTUSAsyIBSgkhJkLY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b03092cfcf4565cd
Difference Hash:9e1c9e0e201c1e16
Wavelet Hash:02828383dfcfc3cf
Color Hash:07000408040

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data