Security Scan Report: roblox.com.bi

Site favicon
Submitted: Completed: publiccompleted
This website contacted 34 IPs in 7 countries across 20 domains to perform 251 HTTP transactions. The main domain is roblox.com.bi and was registered 7 months ago.

Submitted URL: https://roblox.com.bi/games/125479550217058/vivid-memory-cozy-house-showcaseRP?privateServerLinkCode=29345276426732758372287653021292

AI Security Verdict

Confirmed Scam

Confidence: 82%

9
Risk Score

roblox.com.bi is a typosquat impersonating Roblox (brand, layout, og:site_name) with a phishing threat-intel hit and a Rhadamanthys malware indicator on its own IP. Do not trust or interact.

Risk Factors (5)
Brand impersonation of Roblox on a non-official typosquat domain
Phishing threat-intelligence match on the primary domain
Malware (Rhadamanthys) indicator on the site's own IP:port
Unranked domain presenting a major brand identity
3 redirects in the capture chain
Domain age information unavailable

Details

Page Title

vivid memory - cozy house [showcase/RP]- Roblox

Scan Type

public

Domain Name Analysis

Domain 'roblox.com.bi' uses the .com.bi country-code top-level domain without a subdomain. Count 6 characters in 'roblox' holding two vowels versus 4 consonants. Word splitting yields 1 word: roblox. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://roblox.com.bi/games/125479550217058/vivid-memory-cozy-house-showcaseRP?privateServerLinkCode=29345276426732758372287653021292

Page Load Overview

29.39s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,234 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media48% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
48%
corporate
35%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20179.43.182.61Rümlang, Zurich, Switzerland
AS51852Private Layer INC
718.66.112.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
723.207.210.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
72.16.164.73Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
7128.116.31.3Slough, England, United Kingdom
AS22697Roblox
718.64.211.77Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
754.192.35.83Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
7142.251.110.97Google · CDNUnited States
AS15169Google LLC
718.66.112.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
718.66.112.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
25134--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A9D3F8A3BBA57437A46B82F9A0127554D551E517C90ACC80F0FCB3B82FC9EE36E13952

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4fSXc0Kzl8oY0nl9MwO2nSNvBuM77DfBBMc:46Xc0Kz+oY0nl9MwO2nSNvBu4DfT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:136456:hWAQAYAZCkJ0IJMAJD5BjOYIugoIICqA5gLEUNJCRiuIgCzCAnkUMBKkVxxYoucCgsMXEVAEMIjBoMEBM5iACGAGAVlwgBgN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b03013cfcfcc4ccd
Difference Hash:9e1e9e1e203c1e3a
Wavelet Hash:02828283dfc7c7df
Color Hash:#e06c6c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data