Security Scan Report: www.roblox.com.ml

Site favicon
Submitted: Completed: publiccompleted
This website contacted 29 IPs in 7 countries across 26 domains to perform 232 HTTP transactions. The main domain is roblox.com.ml and was registered 1 year 1 month ago.

Submitted URL: https://www.roblox.com.ml/games/103314723870400/Sword-Fighting?privateServerLinkCode=742150801944867693299128222270

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Roblox site on roblox.com.ml impersonating Roblox Corporation; multiple multi-source phishing indicators of compromise and IDS alerts confirm malicious intent.

Risk Factors (5)
Brand impersonation of Roblox Corporation on a non-official domain
Multiple phishing indicators of compromise on the primary domain
Suspicious .ml free TLD with no established reputation
IDS alerts for suspicious .ml domain traffic, including an HTTP POST
Unranked domain claiming to represent a top-10K brand
Domain age information unavailable

Details

Page Title

Sword Fighting | Play on Roblox

Scan Type

public

Domain Name Analysis

The domain 'www.roblox.com.ml' uses the .com.ml country-code top-level domain and includes subdomain 'www'. The second-level label 'roblox' is 6 characters long with 2 vowels and four consonants. It segments into one word: roblox. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.roblox.com.ml/games/103314723870400/Sword-Fighting?privateServerLinkCode=742150801944867693299128222270

Page Load Overview

10.21s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:947 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business62% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
62%
corporate
35%
entertainment media
33%
phishing/scam
20%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8202.170.75.2Frankfurt am Main, Hesse, Germany
AS219067Chiara Conti
818.66.112.18Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
818.64.211.111Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
83.174.46.121Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8128.116.21.3Amsterdam, North Holland, Netherlands
AS22697Roblox
823.44.215.187Akamai · CDNPrague, Prague, Czech Republic
AS20940Akamai International B.V.
854.192.35.109Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
818.66.112.38Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
818.66.112.62Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
23229--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13BA385A3BB14F436D95F87F5A051A654C141AB17CE4AC8D4F0ECB3B82F88AE36E43516

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:o6XcXgIldmqJ06zotilW8zdoKGf9IUE/XcjH2V4pJj47zRBF49t/o9vTm3ytmm8V:bX0t7mqJU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:104803:NSxk4CIJMwDoCTA0oiRTLOCYjGIEIGMFAgkQCACAOZCCEJk4JAC0JKGEABBcQWJ67qGMB6AFIErQiMRFEMwAkBJkxExAJjBg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b03012cfcdcd4dcd
Difference Hash:9e1c9e1e201a2e0c
Wavelet Hash:02868282dee2deff
Color Hash:#931f3c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data