Security Scan Report: www.roblox.com.ml

Site favicon
Submitted: Sep 15, 2026, 2:19:44 AMCompleted: Sep 15, 2026, 2:20:18 AMpubliccompleted

This website contacted 22 IPs in 5 countries across 24 domains to perform 233 HTTP transactions. The main domain is roblox.com.ml and was registered 13 years ago.

Submitted URL: https://www.roblox.com.ml/users/374231218556/profile

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

roblox.com.ml is a typosquat impersonating Roblox, flagged for phishing by multiple feeds, with HIGH IDS alerts. Do not enter credentials or interact.

Risk Factors
Impersonation of Roblox brand on the non-official domain roblox.com.ml
.ml free TLD typosquat of a top-10K brand
Multi-source corroborated phishing threat-intelligence match on the primary domain
HIGH-severity IDS alerts including Spamhaus DROP-listed traffic and POSTs to suspicious .ml domains
Custom API host apis.roblox.com.ml and unrelated third-party domains (injuries.to) loaded by the page
Domain age information unavailable

Details

Page Title

Tengkorak - Roblox

Scan Type

public

Domain Name Analysis

The domain 'www.roblox.com.ml' uses the .com.ml country-code top-level domain; it also runs on subdomain 'www'. Its registrable label 'roblox' stretches across 6 characters split between 2 vowels and four consonants. Word splitting yields one word: roblox. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.roblox.com.ml/users/374231218556/profile

Page Load Overview

11.29s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:910 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate business90% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
90%
entertainment media
68%
technology software
42%
corporate
35%
social_media
30%

Detected Features

Search
OG: profile
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2331.56.209.148Netherlands
AS209373Swissnet LLC
10128.116.46.3Singapore, Singapore
AS22697Roblox
10128.116.56.3Ashburn, Virginia, United States
AS22697Roblox
102.20.245.170Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
1018.66.112.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10128.116.2.3United States
AS22697Roblox
10128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
1018.66.112.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1023.194.190.149Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
23322--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19CE3E977FB14B436AC5F66F5A110A618C102B656DE4688D8B0DCF3B52FC9BF3AA83405

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:LKXGdiLJf9AiQQJlW6JjXGcEK2fdLI/4oHUpfw47zdeBM78C/tmo89Tifqf4VoNM:+XhJY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:152832:RoEIphQgxSxKIAYFKCZpxLRR6AoUgAVIpVVFpFKAQLsCEE0McIMIZAYBhlggIJCQQW6YXFQxAIUDERgJAMJZkMAFiFBAwohN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:6ee6d3dfc3c3ffff
Perceptual Hash:f516c3619a9c6c96
Difference Hash:aac8b63416121e02
Wavelet Hash:0000c2dfc3c3cfff
Color Hash:#ac5396

Other Hashes

Crop Resistant:aac8b63416121e02

Scan History

Scan history not available

Unable to load historical scan data