Security Scan Report: www.roblox.rw

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 4 countries across 10 domains to perform 215 HTTP transactions. The main domain is roblox.rw and was registered 1 month ago.

Submitted URL: https://www.roblox.rw/games/135256222236321/Bunny-64-HORROR?privateServerLinkCode=11040290185766545005746312904812&game_id=135256222236321&game_name=Bunny-64-HORROR

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Non-official clone of the Roblox site on a 22-day-old domain, presenting Roblox's brand and installer prompts; domain flagged for phishing and its IP for Rhadamanthys malware (both single-source). No forms, but do not download or run anything.

Risk Factors (5)
Impersonation of the Roblox brand on the non-official domain roblox.rw
Domain only 22 days old and unranked
Phishing threat-intel report on the primary domain (single-source, unverified)
Rhadamanthys malware-family indicator on the site's own IP:port (single-source, unverified)
Prompts users to download and run an executable via 'Roblox Protocol' dialogs
Domain age information unavailable

Details

Page Title

Bunny 64 [HORROR]- Robloxother network

Scan Type

public

Domain Name Analysis

Within the .rw country-code top-level domain, 'www.roblox.rw' is registered with subdomain 'www'. The second-level label 'roblox' is 6 characters long with 2 vowels and 4 consonants. Tokenizing the label suggests one word: roblox. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.roblox.rw/games/135256222236321/Bunny-64-HORROR?privateServerLinkCode=11040290185766545005746312904812&game_id=135256222236321&game_name=Bunny-64-HORROR

Page Load Overview

N/A
Total Load Time
535 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:927 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media72% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
72%
technology software
61%
download file sharing
51%
corporate
35%
documentation technical
35%

Detected Features

OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33179.43.182.61Rümlang, Zurich, Switzerland
AS51852Private Layer INC
2695.101.171.78Akamai · CDNBerlin, State of Berlin, Germany
AS20940Akamai International B.V.
2623.207.210.83Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2695.100.248.144Akamai · CDNBerlin, State of Berlin, Germany
AS20940Akamai International B.V.
26128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
2696.16.53.138Akamai · CDNHaarlem, North Holland, Netherlands
AS20940Akamai International B.V.
2654.192.35.108Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
26142.251.110.97Google · CDNUnited States
AS15169Google LLC
08--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11A63FAA2FBF06432A45782F5A522B504DA51D517C60ECC80F0ECB3BC1FD9DE3AA5395A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:KqPFYX63T0K3ZVtBUgw8lmmphqOqLLihJqNwdScfHSj:Kq9YXc0KwOqaySdg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:73228:EIWIAESwFEHJYAEgZmQWwQEmOBpYQA2ki0kSQFcoTKB8RMZiHCRwYgoQAFaEg6EwhT5BgFAAZiEKAaPYQimDkukESMjILgBF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c2c783c3dfffdfcf
Perceptual Hash:bc3c12d3d3456d49
Difference Hash:b63c36363e1a3a36
Wavelet Hash:02c3c3c3c6c3dfc3
Color Hash:#2dd24e

Other Hashes

Crop Resistant:b63c36363e1a3a36

Scan History

Scan history not available

Unable to load historical scan data