Security Scan Report: www.roblox.rw

Redirected to:
https://www.roblox.rw/404
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 5 countries across 9 domains to perform 155 HTTP transactions. The main domain is roblox.rw and was registered 1 month ago.

Submitted URL: https://www.roblox.rw/games/5593925613/Countryball-World

Effective URL:
https://www.roblox.rw/404
Redirected

AI Security Verdict

High Risk

Confidence: 84%

8
Risk Score

An unranked 22-day-old domain posing as Roblox with copied meta tags, Roblox CDN assets and a 'Create Robux' lure; reported as phishing and its host IP carries a stealer indicator. Not the official Roblox site.

Risk Factors (6)
Impersonation of the Roblox brand on a non-official domain (roblox.rw vs roblox.com)
Very new domain (22 days old) appearing as a major established brand
Unranked / no domain reputation despite claiming to be Roblox
Domain reported as phishing by threat intelligence (single-source)
Host IP flagged with a rhadamanthys malware indicator (single-source)
Robux/marketplace lure typical of gaming-currency scams
Domain age information unavailable

Details

Page Title

Roblox

Scan Type

public

Domain Name Analysis

The domain 'www.roblox.rw' uses the .rw country-code top-level domain; it also runs on subdomain 'www'. Its registrable label 'roblox' stretches across 6 characters with two vowels and 4 consonants. Word splitting yields one word: roblox. Average segment length settles at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.roblox.rw/games/5593925613/Countryball-World

Page Load Overview

2.56s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,401 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
technology software
26%

Detected Features

Search
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
23179.43.182.61Rümlang, Zurich, Switzerland
AS51852Private Layer INC
1223.207.210.68Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1218.64.211.118Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1223.48.23.134Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
12128.116.5.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
1223.207.210.87Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
12128.116.13.3Paris, Île-de-France, France
AS22697Roblox
12128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
1223.207.210.93Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
122.22.89.56Akamai · CDNVienna, Vienna, Austria
AS20940Akamai International B.V.
15512--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DD9395A3FB14E436AC4F56F5A114A654C042BA26DE1989E4F0ECB3742F88BF36E43516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:BRXM8RsC6pS6WIlJ67yezzdBcmXGjwE2UKfJoIZ2S8cCBpUsndMU+NCrt3otyE4a:/XMe6pVl47yezzdBcmXGjwE2UKfJoIZH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:90101:BAAgFwYAAEgwCEN1DzBQsfNCGgNJIAEQNIIlCaAJKCMgAwqgCoBkoCmSYRBqgAA4Me9YROCgAQAFSLwOAIEaAHKGpgx4oAD3

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7effffe7efff0000
Perceptual Hash:d7aa55a85723d50c
Difference Hash:8c00080c4a0045c4
Wavelet Hash:00fee6e6e7ff0000
Color Hash:#61d22d

Other Hashes

Crop Resistant:8c00080c4a0045c4

Scan History

Scan history not available

Unable to load historical scan data