page-roblox[.]com

page-roblox.com was registered on 16 July 2025 through Dynadot LLC and resolves to the Amazon‑owned address 216.198.79.1 (AS16509, United States). The domain uses Cloudflare’s edge services with HTTP/3 enabled and presents a Google Trust Services / WE1 TLS certificate, indicating a valid HTTPS configuration. HTTP requests return status 200 and the page title is identical to the domain string, providing no additional context. The site is classified as a Gaming Scam targeting the Roblox brand, and its intent is to impersonate Roblox as indicated by the brand target field.

VirusTotal analysis shows that 17 of 95 security scanners have flagged the domain, reflecting a moderate detection rate. Independent blocklist monitoring reports that the domain is listed on one security blocklist and has been blocked by the PhishDestroy service. AlienVault OTX references the domain in two separate threat‑intel pulses, corroborating its malicious reputation. The name servers ns1.dyna‑ns.net and ns2.dyna‑ns.net are also associated with Dynadot’s default DNS infrastructure.

Current observations confirm that the domain remains active as of 23 July 2026. No additional content or behavioral details have been disclosed, leaving the specific phishing page layout and credential‑capture mechanisms unknown. Defenders should block resolution of page-roblox.com at the network perimeter, add the IP 216.198.79.1 to deny‑list rules, and ensure that endpoint protection solutions incorporate the 17 VirusTotal detections. Monitoring for any future changes to the hosting provider, TLS certificate, or HTTP status is recommended, as alterations could indicate a shift in the underlying infrastructure.