Security Scan Report: www.roblox.rw

Redirected to:
https://www.roblox.rw/games/89018178970518/Countryball-Wars?privateSer...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 30 IPs in 6 countries across 20 domains to perform 241 HTTP transactions. The main domain is roblox.rw and was registered 1 month ago.

Submitted URL: https://www.roblox.rw/games/89018178970518/Countryball-Wars?privateServerLinkCode=11040290185766545005746312904812&game_id=89018178970518&game_name=Countryball-Wars

Effective URL:
https://www.roblox.rw/games/89018178970518/Countryball-Wars?privateSer...
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Lookalike roblox.rw reproduces a Roblox game page and installer prompts; phishing and infostealer reputation reports plus clear Roblox brand impersonation on a non-official domain make it unsafe to join or download from.

Risk Factors (5)
Brand impersonation of Roblox on a lookalike .rw domain
Phishing reputation reports against the primary domain roblox.rw
Malware-family (rhadamanthys) reputation report against the site's own IP address
Fake installer download workflow presented as the official Roblox client
Unranked domain posing as a major gaming platform
Domain age information unavailable

Details

Page Title

Countryball Wars! ⚔️- Roblox

Scan Type

public

Domain Name Analysis

Domain 'www.roblox.rw' uses the .rw country-code top-level domain, featuring subdomain 'www'. The core label 'roblox' covers 6 characters split between 2 vowels and 4 consonants. Segmentation suggests one word: roblox. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

R&BLOX Charts Marketplace Create Robux (Q Search fp) (Login) 'g Countryball Wars! *K By MorphForge Maturity: Moderate Favorite Ke 296 | About Store Servers Description Fight countries as balls...

Page Load Overview

6.75s
Total Load Time
3.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:55%
Script:Latin
Direction:ltr

Detection Details

Text Length:2,197 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
OG: game
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9179.43.182.61Rümlang, Zurich, Switzerland
AS51852Private Layer INC
823.207.210.93Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
895.101.171.49Akamai · CDNBerlin, State of Berlin, Germany
AS20940Akamai International B.V.
82.21.20.140Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
8128.116.44.3Frankfurt am Main, Hesse, Germany
AS22697Roblox
899.84.152.75Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
82.16.106.11Akamai · CDNAmsterdam, North Holland, Netherlands
AS20940Akamai International B.V.
8142.251.110.97Google · CDNUnited States
AS15169Google LLC
8128.116.13.3Paris, Île-de-France, France
AS22697Roblox
823.207.210.68Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
24130--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B8D30AA3BB95B437E86B83F9A0217554D550D517C90AC880F0FCB3B82FC5EE3AA43956

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+qPmXc0KhloOqADUVYvLJU9fT7dDfaBMc:JOXc0KhSOqADUVYvLJU9f1DfK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:134612:sqGRBUBoEwwAIlmkABIAsgK4YAK0jjIAbBywk9R5AAJTdCUgmpADJVUwABkLgDx0iQAM6bAAXGUCYguA0IWYAEyWSAkmgSQN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c7ffffffff
Perceptual Hash:b030cecfcd6d6541
Difference Hash:9e0c9e1e200a3a36
Wavelet Hash:028682c2cfc3dfcf
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data