effulgent-phoenix-778ccd[.]netlify[.]app

This domain, effulgent-phoenix-778ccd.netlify.app, is actively engaged in brand impersonation targeting Roblox, a widely used gaming platform. Analysis indicates the site is designed for credential theft, presenting users with a fraudulent login page titled 'Connexion à Roblox' to harvest account credentials. The infrastructure remains operational as of the latest verification. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Name.com, Inc. (Netlify). It resolves to IP address 35.157.26.135, hosted on Amazon.com, Inc. (AS16509) infrastructure located in Germany. The domain is flagged by 19 of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly categorizing it as phishing. A DigiCert Global G2 TLS RSA SHA256 2020 CA1 SSL certificate is present, adding a superficial layer of legitimacy. The domain appears on one security blocklist, and additional protections such as PhishDestroy have blocked access. The site remains active and poses a significant risk to users attempting to access Roblox through unofficial channels. Users are strongly advised to avoid interaction with this domain and verify all login portals through official Roblox channels. Organizations should update blocklists to include this domain and its associated IP address. Monitoring for similar Netlify-hosted subdomains impersonating gaming platforms is recommended to mitigate further credential theft attempts.