Security Scan Report: robiox.com.py

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 5 countries across 24 domains to perform 224 HTTP transactions. The main domain is robiox.com.py.

Submitted URL: https://robiox.com.py/users/331781736427/profile

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Typosquat robiox.com.py clones Roblox branding and profile pages on a domain reported as phishing by two feeds, with Spamhaus-listed traffic and XHR to unranked injuries.to hosts. Do not enter any credentials.

Risk Factors (5)
Typosquatted domain impersonating the Roblox brand on non-official infrastructure
Multi-feed phishing threat-intelligence match on the primary domain
HIGH IDS alerts: Spamhaus DROP-listed traffic and .to TLD DNS queries
Unranked external script/API host api.injuries.to / app.injuries.to receiving XHR traffic
Cloned Roblox profile UI and branding with Roblox trademark footer
Domain age information unavailable

Details

Page Title

INF - Roblox

Scan Type

public

Domain Name Analysis

The domain name 'robiox.com.py' uses the Paraguayan country-code top-level domain (.com.py) with no subdomain. Count 6 characters in 'robiox' with three vowels and three consonants. Word splitting yields three words: rob, i, ox. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://robiox.com.py/users/331781736427/profile

Page Load Overview

7.26s
Total Load Time
4.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:780 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business91% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
91%
entertainment media
76%
technology software
48%
corporate
35%
social_media
30%

Detected Features

Search
OG: profile
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
26202.170.75.2Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
923.207.210.68Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
923.207.210.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
923.48.23.134Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
9128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
923.207.210.91Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
9128.116.13.3Paris, Île-de-France, France
AS22697Roblox
918.64.211.103Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
923.207.210.93Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
923.48.23.185Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
22423--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T166C3D963FF14B436981F56F5E050A254C142E616DE4A88D4F0ECF3B92FC9AE3AE43516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EtWXcht1i7I67oEJl8Wj/XnIVo9Efd2cGjUK4HpBW4z7LBX+vE0E6to3mR/789pw:EYXwyL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:126338:AC3PwGxAIAUa0DwIYcJTudAIjiMAECgIJUQ5MhgAiAoAYDoh2QcNWRqcEv6g1gFmhEBdSAGBpABKHYlZikBKNqRsEciAJVKt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:66e793dfdfc3ffff
Perceptual Hash:b406c371ce9c3cce
Difference Hash:8ac8a63416961206
Wavelet Hash:000042dfc3c3dfff
Color Hash:#97bf40

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data