Security Scan Report: bloxbadge.netlify.app

Redirected to:
https://bloxbadge.netlify.app/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 3 countries across 14 domains to perform 88 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://bloxbadge.netlify.app/

Effective URL:
https://bloxbadge.netlify.app/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake 'Verified Badge' page on a free Netlify subdomain impersonating Roblox and soliciting a Roblox username; flagged by Safe Browsing for social engineering. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Roblox on a non-official domain (netlify.app subdomain)
Safe Browsing Social Engineering detection
Fake 'Verified Badge' claim used to harvest a Roblox username
Copied Roblox branding, assets and trademark footer
No legitimate business identity behind the host; low legitimacy score (8/100)
Domain age information unavailable

Details

Page Title

BADGE - Roblox

Scan Type

public

Domain Name Analysis

The domain 'bloxbadge.netlify.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'bloxbadge'. Its registrable label 'netlify' stretches across 7 characters holding 2 vowels versus 5 consonants. It segments into 3 words: net, li, fy. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://bloxbadge.netlify.app/

Page Load Overview

17.70s
Total Load Time
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,255 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media37% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
37%
social_media
30%

Detected Features

Search
OG: profile

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1663.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
423.32.239.27Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
423.32.239.82Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
42.21.20.133Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
418.64.211.78Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
423.32.239.9Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
418.66.107.21Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4128.116.31.3Slough, England, United Kingdom
AS22697Roblox
435.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
418.64.16.205Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8819--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T176D3FA72A2F02033509B91F6F4A47B05DA92DB17CA4A46E1B1EC23B90FD6DD3BD43459

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:u/YqwvABDELnbCw1Xko5wXV1dKXSz+LyPDWcDJFDO8YT/4O:qY9vmY++wXVSXZED3JFO8YT/z

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:130055:4EhCAiQQCMAhiIcFXAFCCBEZCARWhhsoIcBBIaA7DgRK4CJISBKIAAQE3hdSGIwIxaBK3dRZIYCRgAZIAACAYRBuB7EClFAq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101199999190101
Perceptual Hash:88f722ccdd7388cc
Difference Hash:714d717333314d71
Wavelet Hash:bdbdbdb999190101
Color Hash:#865c2d

Other Hashes

Crop Resistant:714d717333314d71

Scan History

Scan history not available

Unable to load historical scan data