Security Scan Report: s4w.in

Redirected to:
https://www.roblox.et/users/6300126234/profile
Site favicon
Submitted: Completed: publiccompleted
This website contacted 29 IPs in 7 countries across 27 domains to perform 324 HTTP transactions. The main domain is s4w.in and was registered 19 years ago.

Submitted URL: https://s4w.in/recwU

Effective URL:
https://www.roblox.et/users/6300126234/profile
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

10
Risk Score

Lookalike domain roblox.et reproduces Roblox branding and assets while posing as the official site; both it and the redirecting shortener carry multi-source phishing intelligence. Avoid and report.

Risk Factors (4)
Brand impersonation of Roblox on a non-official, unranked lookalike domain (roblox.et)
Multi-source phishing indicators of compromise against the scanned domain and the redirecting shortener
Domain-change redirect from a shortener with a phishing reputation directly into the impersonating page
HIGH IDS alert: ET DROP Spamhaus DROP Listed Traffic Inbound group 58
Domain age information unavailable

Details

Page Title

HMM_IsMYNAME2 - Roblox

Scan Type

public

Domain Name Analysis

The domain name 's4w.in' uses the Indian country-code top-level domain (.in) with no subdomain. The second-level label 's4w' is 3 characters long containing zero vowels alongside 2 consonants; bonus characters include one digit. Tokenizing the label suggests 3 words: s, 4, w. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

R&BLOX Charts Marketplace Create Robux Q Search 3D HMM_IsMYNAME2 & Add Connection «= @HMM_IsMYNAME 521Connections 200 Followers 201 Following Designer * owner of artificial. 100K sales. more Ab...

Page Load Overview

11.43s
Total Load Time
5.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,580 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media83% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
83%
corporate business
78%
social media network
75%
technology software
75%
documentation technical
67%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16202.170.75.201Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
11188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1123.207.210.93Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1118.64.211.93Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1123.216.77.31Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
11128.116.31.3Slough, England, United Kingdom
AS22697Roblox
1195.101.35.72Palermo, Sicily, Italy
AS6762TELECOM ITALIA SPARKLE S.p.A.
1123.207.210.91Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
11142.251.20.97Google · CDNUnited States
AS15169Google LLC
11128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
32429--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DF04E973FB546037A82F69F6A0546718D142E607DE4645D4B0ECF3B91FCAEE3AA4340A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:VmX+o68iB3HMriiuO+7Q7V7u7n7V7s7I7C7v797+7L7B7h777W7kJbRbkCys3eIC:IXlE3HMrix7Q7V7u7n7V7s7I7C7v797v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:184306:RgQICXkS2D06AmAyoCiJlWBAAWIguAEEIBBAtBkwTEBGXisHDaA04MKBtFtEDiDCIpgMHDjQ0qgEE8LyfLB7NQTVZEFBEiMB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000d3dfffc3cfcf
Perceptual Hash:b0461367999cfc99
Difference Hash:e8c8b6341e16181a
Wavelet Hash:0000c2dfcfc3cfcf
Color Hash:N/A

Other Hashes

Crop Resistant:e8c8b6341e16181a

Scan History

Scan history not available

Unable to load historical scan data