Security Scan Report: www.roblox.rw

Site favicon
Submitted: Completed: publiccompleted
This website contacted 31 IPs in 9 countries across 20 domains to perform 238 HTTP transactions. The main domain is roblox.rw and was registered 3 weeks ago.

Submitted URL: https://www.roblox.rw/games/142823291/Murder-Mystery-2?privateServerLinkCode=60869683094735370675006673192210

AI Security Verdict

Confirmed Scam

Confidence: 86%

9
Risk Score

Unauthorized Roblox clone on roblox.rw using Roblox branding, meta tags, and assets, with four phishing feed reports and a malware-flagged hosting IP. Do not log in or run any installer.

Risk Factors (5)
Impersonation of the Roblox brand on a non-official domain (roblox.rw) copying Roblox page structure, meta tags, and installer instructions
Four phishing threat-intel matches (two domain, two URL) targeting the scanned domain
Domain is not present in Cisco Umbrella top 1M while claiming to be a major gaming brand
Circular redirect detected during capture
Hosting IP associated with a malware-family indicator (rhadamanthys)
Domain age information unavailable

Details

Page Title

Murder Mystery 2- Roblox

Scan Type

public

Domain Name Analysis

You're looking at domain 'www.roblox.rw' on the .rw country-code top-level domain and includes subdomain 'www'. The registrable portion 'roblox' spans 6 characters split between 2 vowels and four consonants. Splitting it apart reveals 1 word: roblox. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.roblox.rw/games/142823291/Murder-Mystery-2?privateServerLinkCode=60869683094735370675006673192210

Page Load Overview

5.98s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:52%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,395 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
adult content
32%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
28179.43.182.61Rümlang, Zurich, Switzerland
AS51852Private Layer INC
718.66.112.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
718.64.211.111Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
73.174.46.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
795.101.171.132Akamai · CDNBerlin, State of Berlin, Germany
AS20940Akamai International B.V.
754.192.35.90Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7142.251.20.97Google · CDNUnited States
AS15169Google LLC
7128.116.31.3Slough, England, United Kingdom
AS22697Roblox
718.66.112.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23831--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E8D31AA3BB95B433E45B83F9A0227544D450D517C90AC884F0FCB3B82FC9EE3AA53956

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+qn7Xc0KClnOqwfdlDTW0/hMkIxC97dDfa9Mc:J7Xc0KChOqwfdlDTW0JuxCbDfm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:135382:YMAGsyFCQUAy5KkoAFMlErB+BQOMAGSIi4lhUBIAQBwEEAhzkmYOYUUAIh1LEEFAq0l6IEgAMcgQHCZLBEKAQIwT0Si2DCAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b03043cfcd4d6ccd
Difference Hash:9e0c1e1e301c1a02
Wavelet Hash:02878383c7cfcfc3
Color Hash:#d22d9b

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data