wwvv-roblox[.]com

The domain wwvv-roblox.com was registered on June 12, 2025 through Web Commerce Communications Limited and is currently resolved to the IP address 185.186.25.80, which belongs to AS213772 BK Customers and is geolocated in Lithuania. The domain is hosted on Cloudflare infrastructure, as indicated by the authoritative nameservers carla.ns.cloudflare.com and troy.ns.cloudflare.com. No TLS certificate was observed for the site, meaning HTTPS connections are not supported. The page title returned by the HTTP response is "Roblox", matching the declared brand target of Roblox and confirming the intent to impersonate that brand.

The domain is listed on two independent security blocklists, PhishDestroy and DiscordPhishing, and has been cited in three AlienVault OTX threat‑intel pulses. VirusTotal analysis shows that 16 of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion of abuse. Gridinsoft assigned a trust score of 0 out of 100, indicating a lack of credibility. The domain’s current operational status is offline, which may be temporary or a takedown response.

Because the domain leverages a legitimate brand name in its title and resolves to a Cloudflare‑served IP without encryption, it is likely used for credential‑harvesting or other gaming‑related scams. Defenders should continue to block the domain at perimeter filters, monitor DNS queries for the associated IP and nameservers, and update detection signatures to include the observed indicators. Additional investigation of any recent traffic to the IP or associated hostnames is recommended to determine if the infrastructure is being reused for other malicious campaigns.