gabvd[.]netlify[.]app

The domain gabvd.netlify.app is currently active and poses a phishing threat by impersonating Roblox, a popular online gaming platform. It promises users unlimited Robux, a virtual currency in Roblox, to lure victims into providing sensitive information. This site is hosted on Amazon infrastructure with an IP address located in Germany.

Despite having zero detections on VirusTotal, this domain is not safe. The lack of detections highlights its freshness, as phishing domains often exploit the gap between registration and antivirus database updates. PhishDestroy's early detection pipeline captures such threats during this crucial pre-propagation window, allowing for timely intervention.

The site is already listed on one public blocklist, specifically PhishDestroy's, and has a platform risk score of 68 out of 100, indicating a significant threat level. The abuse score is relatively low at 19 out of 100, suggesting limited reports of malicious activity thus far. However, its active status and the promise of free Robux make it a potential target for unsuspecting Roblox users.

The domain is registered through Netlify and secured with an SSL certificate issued by DigiCert Inc. This gives it a veneer of legitimacy, potentially misleading users into trusting it. The combination of a well-known brand impersonation and a credible hosting setup makes gabvd.netlify.app a concerning phishing operation that requires immediate attention.