buxgame[.]netlify[.]app

PhishDestroy identifies buxgame.netlify.app as a high-risk Roblox phishing domain actively impersonating the legitimate gaming platform to steal user credentials. This fraudulent site leverages Netlify's hosting infrastructure to appear legitimate, while using a spoofed SSL certificate from DigiCert Inc to further deceive visitors. The domain resolves to IP address 63.176.8.218, which hosts a replica of the Roblox login interface designed to harvest user credentials for malicious purposes. This domain was flagged by 21 out of 95 security vendors on VirusTotal, indicating widespread recognition of its malicious nature. The domain is registered through Netlify, a legitimate hosting provider that has been abused to host this phishing content. The fraudulent page is specifically designed to mimic Roblox's login portal, tricking users into entering their credentials which are then captured by attackers. The presence of an SSL certificate adds a false sense of security, making the scam more convincing to potential victims. Users who visited buxgame.netlify.app should immediately change their Roblox account password and enable two-factor authentication if they entered any credentials on the site. Additionally, users should scan their devices for malware and be cautious of any unexpected account activity. Report any suspicious activity to Roblox support and avoid interacting with this domain or similar sites in the future. Always verify URLs carefully and use official Roblox channels for account access.