Security Scan Report: zd.lc

Redirected to:
https://www.roblox.com.et/games/2753915549/Blox-Fruits?privateServerLi...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 33 IPs in 7 countries across 24 domains to perform 239 HTTP transactions. The main domain is zd.lc.

Submitted URL: https://zd.lc/nYgev

Effective URL:
https://www.roblox.com.et/games/2753915549/Blox-Fruits?privateServerLi...
Redirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Look-alike of Roblox on roblox.com.et with a phishing report from two feeds and a signup funnel on the fake domain. No credential form was captured on this page, but treat the site as hostile.

Risk Factors (5)
Typosquat/impostor domain roblox.com.et masquerading as the official Roblox site
Multi-feed phishing threat-intel match against the final domain
Phishing-flagged shortener entry domain (zd.lc) used to funnel traffic
Signup/account funnel hosted on the impersonating domain rather than roblox.com
IDS Spamhaus DROP HIGH alert on traffic
Domain age information unavailable

Details

Page Title

[🎃] Blox Fruits - Roblox

Scan Type

public

Domain Name Analysis

The domain 'zd.lc' uses the Saint Lucian country-code top-level domain (.lc) without a subdomain. Count 2 characters in 'zd' holding zero vowels versus 2 consonants. Word splitting yields 1 word: zd. No strong language cues emerged from the frequency lists.

Screenshot

RQBLOX Charts Marketplace Create Robux By Gamer Robot Inc & Maturity: Mild wy fo Favorite oq About Store Servers Description @ Halloween Event! Welcome to Blox Fruits! Become a master swordsman...

Page Load Overview

9.49s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,868 chars
Detector Agreement:60%

Website Classification

Primary Category

adult content48% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
48%
corporate
35%
technology software
35%
cryptocurrency blockchain
33%
entertainment media
26%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15202.170.75.201Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
757.131.147.220France
AS16276OVH SAS
718.66.112.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
718.64.211.118Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
73.174.46.47Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
754.192.35.108Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7142.251.14.97Google · CDNUnited States
AS15169Google LLC
734.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
23933--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A4B3C8A3BBA5B436E45F87F5A0116654C541EB1BCA0AC8D0F0ECB3782FC99E36E43516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Yn0XDHB2K6IHCZVtBUgw8lmmphflYOZIACfjMQbXheWIqeWw7ScfHSr1mfcqtKE:i0XDvmlYI45e+e37xfcS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:117018:FWmgqAnA2AVgAUCGDAUFCECQAQAAWisGIqDwEZwAkCkijA8hAuJ0cgEGWggsgEQEwQ4+QcLcISLSApETAOGPgBKEqJkCCAhA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c787c3c7ffffffff
Perceptual Hash:b03232cfcdcd49c9
Difference Hash:8e0c8e0e36361e38
Wavelet Hash:028783c3c3c3cfcf
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data