pro-titanx4-rbx[.]netlify[.]app

On July 24 2026 the domain pro-titanx4-rbx.netlify.app was identified as a malicious site that attempts to lure victims with the page title “Get robux”. The domain was registered through Netlify on 20 October 2025 and is hosted on Netlify’s infrastructure, as indicated by the presence of Netlify technology and HSTS headers. DNS resolution points to the IPv6 address 2600:1f18:16e:df01::258, which belongs to ASN 14618 operated by Amazon.com, Inc., confirming that the site is served from Amazon’s cloud platform. The TLS certificate presented is a DigiCert Global G2 RSA SHA-256 certificate issued in 2020, which is a legitimate public‑trusted certificate and does not on its own indicate malicious intent. HTTP probing returned a 404 status code, and the site is currently listed as offline, suggesting that the phishing page has been taken down or is no longer reachable.

VirusTotal analysis shows that 17 of 95 scanning engines flagged the domain as malicious, providing independent corroboration of its threat profile. The domain appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, indicating that at least one remediation provider has taken action against it. Nameserver records are hosted with nsone.net (dns1.p04.nsone.net and dns2.p04.nsone.net), a reputable DNS provider, which further confirms that the infrastructure is legitimate but being abused. The evidence points to a classic “Get robux” lure, likely targeting users of the Roblox platform, although no additional page content was captured to verify the exact phishing workflow.

Because the site is presently offline, immediate mitigation is limited to updating perimeter defenses. Organizations should ensure that outbound filtering blocks the domain and that any previously cached URLs are purged from internal browsers.