roblox-com[.]ru

The domain roblox-com.ru has been identified as a brand impersonation threat targeting Roblox, with an elevated risk level. This site attempted to deceive users by presenting a page titled 'kokushibo - Roblox', indicating an attempt to steal login credentials or personal information. No specific crypto drainer kit was identified, but the impersonation of a well-known gaming platform like Roblox poses significant risk to users, particularly younger audiences.

Technical indicators paint a clear picture of the domain's malicious nature. VirusTotal reports that 12 out of 95 security vendors flag this domain, a strong signal of its dangerous intent. The domain resolves to IP address 156.229.125.173 and was registered on February 21, 2026, a relatively recent creation date typical of phishing sites. It appears on one security blocklist and is linked to one threat intelligence pulse on AlienVault OTX. The SSL certificate is rated R10, indicating low trust. Google Safe Browsing status was not mentioned, but the domain's appearance on blocklists suggests it may have been flagged.

Currently, the domain is offline, indicating that hosting providers or authorities have taken action to disrupt its operation. However, the remaining risk is that similar domains may appear in the future, or that users who previously visited the site may still be exposed to phishing attempts via email or other channels. PhishDestroy recommends that users who have interacted with roblox-com.ru change their Roblox passwords immediately and enable two-factor authentication. Always verify the official Roblox domain (roblox.com) and avoid logging in through third-party links or lookalike domains.