Security Scan: Going on a Bear Hunt 🐻- Roblox

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c415d2f9-c5d9-4af8-a45c-ff50b7afec7f Domain and IP registration (RDAP)/api/v1/rdap/c415d2f9-c5d9-4af8-a45c-ff50b7afec7fHow often this domain was scanned/api/v1/domain/stats/roblox.rw Scan history for this domain/api/v1/domain/history/roblox.rw?limit=15

This website contacted 8 IPs in 4 countries across 10 domains to perform 221 HTTP transactions. The main domain is roblox.rw and was registered 1 month ago.

Submitted URL: https://www.roblox.rw/games/6733528409/Going-on-a-Bear-Hunt?privateServerLinkCode=11040290185766545005746312904812&game_id=6733528409&game_name=Going-on-a-Bear-Hunt

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

roblox.rw impersonates Roblox on a 22-day-old lookalike domain, pushes an executable 'installer' download, and its hosting IP is flagged for Rhadamanthys malware. Avoid; do not run downloads.

Risk Factors (5)

Brand impersonation of Roblox on the lookalike domain roblox.rw

Domain only 22 days old (VERY_NEW) and unranked in Cisco Umbrella

Threat-intel match for the Rhadamanthys malware family on the site's own IP:port (single-source, unverified)

Domain-level phishing report (single-source, unverified)

Inline scripts use encoding/decoding functions

Domain age information unavailable

Details

Page Title

Going on a Bear Hunt 🐻- Robloxother network

Scan Type

public

Domain Name Analysis

Within the .rw country-code top-level domain, 'www.roblox.rw' is registered; it also runs on subdomain 'www'. The registrable portion 'roblox' spans 6 characters with two vowels and four consonants. Breaking it apart gives one word: roblox. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

N/A

Total Load Time

809 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:59%

Script:Latin

Direction:ltr

Detection Details

Text Length:2,270 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content44% confidence

Type: spa

Method: ml+structural

All Detected Categories

adult content

44%

corporate

35%

entertainment media

28%

Detected Features

OG: game

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
32	179.43.182.61	Rümlang, Zurich, Switzerland	AS51852Private Layer INC
27	95.101.171.76Akamai · CDN	Berlin, State of Berlin, Germany	AS20940Akamai International B.V.
27	23.207.210.96Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
27	95.100.248.150Akamai · CDN	Berlin, State of Berlin, Germany	AS20940Akamai International B.V.
27	128.116.44.3	Frankfurt am Main, Hesse, Germany	AS22697Roblox
27	96.16.53.138Akamai · CDN	Haarlem, North Holland, Netherlands	AS20940Akamai International B.V.
27	54.192.35.109Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
27	142.251.110.97Google · CDN	United States	AS15169Google LLC
0	8	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18FD31AA3BB957437E46B82F9A0127554D550D917CA0AC8C0F0FCB3B82FC9EE36A43956

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Kqby0X63T0K7ZVtBUgw8lmmphglWOqLix9c9VdLajMkfXWF3Ebq5w7ScfHSNKDfK:Kq20Xc0KmlWOqWzc9Vd1F3xG7dDfaBMc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:135639:QcwJASAi2I5YTAQeIEUTRBmkJAg2aAKADJRIXBAUamESGMQAJQaIIweICwhmQkAKAsaJaDiErwIYGQJEBvEdsZgkHEiiR4gy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff

Perceptual Hash:b03011cfcfcc65c7

Difference Hash:9e1c9e9e203c181a

Wavelet Hash:02828283dfcfcfe3

Color Hash:#6653ac

Other Hashes

Crop Resistant:9e1c9e9e203c181a,79ce0f8fcf4b7a3e

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: www.roblox.rw