growgardenn2[.]netlify[.]app

The domain growgardenn2.netlify.app was registered on June 21 2026 through Netlify and is currently active. It presents a valid DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate, establishing HTTPS with HSTS enforcement. The site returns HTTP 200 for the root URL and displays the page title “Grow a Garden 2 Roblox – Free Seeds & Items Generator 2026”.

Infrastructure analysis shows the domain resolves to the IPv6 address 2a05:d014:58f:6200::259, which is announced by AS16509, Amazon.com, Inc., and geolocated to Germany. The hosting environment is identified as Netlify, and client‑side scripts include jQuery. The presence of HSTS indicates the server is configured to require secure connections.

Threat intelligence flags this site as a brand‑impersonation campaign targeting Roblox. The page mimics a Roblox generator, attempting to lure users into providing credentials or installing malicious payloads. VirusTotal has identified the domain as malicious in 1 of 95 scanners, and Gridinsoft assigns a trust score of 0 / 100. The domain appears on a single security blocklist and is listed by PhishDestroy as blocked, confirming active abuse.

Defenders should add growgardenn2.netlify.app to URL filtering and DNS block lists, monitor Netlify‑hosted subdomains for similar patterns, and enforce TLS inspection to detect credential‑harvesting forms. Incident response teams should treat any credential submissions to this site as compromised and advise affected users to reset their Roblox accounts. Continuous threat‑feed correlation is recommended to capture any future repurposing of the Netlify infrastructure for similar impersonation attempts.