Phishing detection: roblox.rw

Roblox
https://roblox.rw/login.php Access site
Screenshot
Screenshot of roblox.rw
Investigate
Domain roblox.rw2 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 179.43.182.61
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://roblox.rw/login.php
urlscan Wayback archive.today
Cert YR1
crt.sh Censys Google CT
Phishunt analysis Beta
31 medium suspicion suspiciousheuristic risk score · not a probability
Why?
  • +4.5 Brand in title
  • +4.1 Site cluster
  • +4.0 Young domain
  • +3.7 Keyword match
  • +3.4 Shared IP cluster
  • +3.0 OpenPhish
  • +2.2 Country mismatch
  • +1.3 Brand typo
  • +0.9 Young certificate
  • +0.7 Brand in cert SAN
  • +0.7 Unrecognised DNS provider
  • +0.6 Brand impersonation in path
  • +0.6 Registrar reputation
  • +0.6 Suspicious TLD
  • +0.4 Credential path
  • +0.3 Free CA
  • +0.2 Long domain
  • +0.2 Executable page
  • +0.1 External scripts
22 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Roblox-branded login page served from a .rw lookalike domain at a login.php path, hosted in Switzerland. Likely steals Roblox account credentials. The brand appears in the page title while the host is unrelated to Roblox; listed by OpenPhish.

Brand impersonation in pathCredential pathOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-06 · confidence 75%
Domain & Network
Whois
Registrar Inzozi Solution Limited
Network
IP 179.43.182.61
Country SwitzerlandSwitzerland
Hosting Private Layer INC
ASN AS51852
TLS Cert YR1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-06 13:02 UTC  ·  Last refreshed 2026-10-07 21:30 UTC