Security Scan Report: www.roblox.com.ml

Site favicon
Submitted: Completed: publiccompleted
This website contacted 32 IPs in 7 countries across 24 domains to perform 223 HTTP transactions. The main domain is roblox.com.ml and was registered 1 year 1 month ago.

Submitted URL: https://www.roblox.com.ml/users/187621307399/profile

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Lookalike roblox.com.ml clones Roblox branding and UI on a .ml domain, is corroborated by multi-source phishing threat-intel and IDS alerts. Do not enter credentials; report.

Risk Factors (5)
Impersonation of Roblox Corporation's brand and trademarks on a non-official lookalike domain (roblox.com.ml)
Multi-source corroborated phishing threat-intel match on the primary domain
IDS alerts for HTTP POST and DNS/TLS activity toward suspicious *.ml domains
Unranked domain claiming to be a top-tier global gaming platform
Full cloned login/social platform UI designed to harvest user trust on a throwaway TLD
Domain age information unavailable

Details

Page Title

Raww - Roblox

Scan Type

public

Domain Name Analysis

Within the .com.ml country-code top-level domain, 'www.roblox.com.ml' is registered with subdomain 'www'. The registrable portion 'roblox' spans 6 characters containing two vowels alongside 4 consonants. Tokenizing the label suggests one word: roblox. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.roblox.com.ml/users/187621307399/profile

Page Load Overview

8.96s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:717 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business93% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
93%
entertainment media
73%
technology software
40%
corporate
35%
social_media
30%

Detected Features

Search
OG: profile
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
37202.170.75.2Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
62.22.89.56Akamai · CDNVienna, Vienna, Austria
AS20940Akamai International B.V.
618.64.211.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
63.174.46.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
654.192.35.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
6128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
6104.109.143.159Akamai · CDNHaarlem, North Holland, Netherlands
AS20940Akamai International B.V.
618.66.112.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
22332--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C3C3DA63FF14B436981F56F5E050A254C142EA16DE4A88D4F0ECF3B92FC9AE3AE43516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vOxXchl1iiy6zoVJl8Wzjd42EXGIof/c9UKHVpJj47zRBFC9t/o9Tvtny3zm8x0v:vsXwPs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:122782:LCJHcOgHAFV6JRkXKEAAlYsAqgaCJQEqWIAgIAFAIZBCEIg1sI1OYDoQEUimqHBCBgIIEZhA4UBEisCQD6Cq9Agmr1CIATo3

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2266d3dfc3c3ffff
Perceptual Hash:e4139373999c6c9c
Difference Hash:aac8a6362606260a
Wavelet Hash:000042dfc3c3dfff
Color Hash:#e0ca6c

Other Hashes

Crop Resistant:aac8a6362606260a

Scan History

Scan history not available

Unable to load historical scan data