www.roblox.com - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned www.roblox.com and returned a benign verdict (score 0). The page resolved to 104.18.3.63 on Cloudflare, Inc. in US. The domain was registered 8238 days ago through MarkMonitor Inc.. 7 domains and 1 IP were contacted, over 100 HTTP requests. 2 malware samples communicate with this URL (Note). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 15%
- Scanned URL:
https://www.roblox.com/mobileapi/userinfo - Domain: www.roblox.com · IP: 104.18.3.63 · AS13335 · US
- Server: cloudflare
- Page title: Roblox
- HTTP status: 404 · text/html; charset=utf-8
- Registrar: MarkMonitor Inc. · domain age 8238 days · created 2004-01-30
- TLS issuer: C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36 · valid to Dec 24 23: · subject C=US, ST=California, O=Roblox Corporation, CN=cloudflare.roblox.com
- Evidenced operator: Roblox Corporation
- HTTP requests captured: 100
- Scan tier: fast · observed 2026-08-20 10:55:27 UTC
Malware communicating with this URL (2)
These samples were observed contacting or being served from www.roblox.com. Each links to its full analysis.
- Note - referenced ·
25e1577ccee5bc33d5273e5d4aec9442· first seen 2026-08-20 - 4519161.pdf - referenced ·
9db03c05ff7fd2c2deea01dbf06c47f1· first seen 2026-08-12
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Cloudflare Insights
Contacted infrastructure
- 104.18.3.63 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- www.roblox.com
- images.rbxcdn.com
- css.rbxcdn.com
- static.rbxcdn.com
- js.rbxcdn.com
- roblox.com
- static.cloudflareinsights.com
- 104.18.3.63
- https://www.roblox.com/mobileapi/userinfo
- https://images.rbxcdn.com/905bd722ee0a6ceda3caacde54c0b081.png
- https://www.roblox.com/js/utilities/bundleVerifier.js?v=91dceb4978eda412b09842312dd6cbaa
- https://images.rbxcdn.com/e854eb7b2951ac03edba9a2681032bba.ico
- https://css.rbxcdn.com/c322b91ca81a7865f4c49ac675d1ab14df2cdec6479bc4a7fe8af14dc5291044-FoundationCss.css
- https://css.rbxcdn.com/cbc004c933c81fb07d6c57dd882001686ae4f26f1f13134ea1b138d7866af876-ReactStyleGuide.css
- https://css.rbxcdn.com/d2eaca6faaaa8d6fa2d157344f4ab73259728ecda54ed1cc6f2d7362a77b5983-StyleGuide.css
- https://css.rbxcdn.com/3e19a797e2ce0522.woff2
- https://css.rbxcdn.com/7f3ddcb5a3796526.woff2
- https://css.rbxcdn.com/5f8b8d5d1962b747.woff2
- https://css.rbxcdn.com/77cbcd18c888e0f1.woff2
- https://css.rbxcdn.com/ef552f4ac70dd3209c70b94a377f66e3828905b9672bb67c661122403a6d15b7-Builder.css
Other scans of www.roblox.com (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - benign ·
https://www.roblox.com/ - 22 Aug 2026 - suspicious ·
https://unscathed-roblox.wiki/
Questions about www.roblox.com
- Is www.roblox.com safe?
- The scan of www.roblox.com on 20 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with www.roblox.com?
- 2 analysed samples communicate with this URL, including Note.
- How was www.roblox.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.roblox.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan