www-roblox-com-frr-users-6048717178[.]vercel[.]app

This domain, www-roblox-com-frr-users-6048717178.vercel.app, is flagged as a high-risk brand impersonation targeting Roblox. The domain remains active as of July 12, 2026, and is currently resolving to the IP address 64.29.17.195. The domain was created on August 22, 2025, and has been identified by several security vendors and blocklists. Google Safe Browsing has flagged the domain for social engineering, indicating that it is likely being used to deceive users into providing sensitive information. VirusTotal reports that 22 out of 95 security vendors have flagged this domain, suggesting a significant level of concern among the security community. The domain is also blocked by PhishDestroy, PhishingDB, and OISD, which further corroborates its malicious nature. The site is hosted on Vercel, a popular web development platform, and uses an SSL certificate from Google Trust Services, which might lend a false sense of security to unsuspecting users. Analysis of the domain's infrastructure reveals that it employs HSTS, a security feature that enforces secure connections, which can make the site appear more legitimate to users. The exact content of the site has not yet been fully analyzed, but the page title 'Connexion à Roblox' suggests that it is designed to mimic Roblox's login page. Defenders should treat this domain with caution and consider implementing DNS-based blocking or web filtering to prevent access. Additionally, network administrators should monitor for any attempts to access this domain and educate users about the risks of brand impersonation and the importance of verifying URLs before entering any credentials. The Gridinsoft trust score of 0/100 indicates a complete lack of trust in the domain, and defenders should use this information to prioritize their mitigation efforts.