rbxu[.]site

This domain, www.rbxu.site, registered through NAMECHEAP INC on December 06, 2025, is currently under investigation for generic phishing activity. It resolves to IP address 142.251.127.121, which is associated with Google (likely Google services infrastructure). The domain uses nameservers dns1.registrar-servers.com and dns2.registrar-servers.com, typical of NAMECHEAP registrar operations. VirusTotal scan results from 91 vendors show zero detections as of the report date, but this absence of detections does not confirm safety.

The domain appears on one security blocklist from PhishDestroy, which classifies it as a phishing threat. No Safe Browsing, OTX, or SSL certificate data is provided. The page title and exact content have not been analyzed, so the specific brand or site type is unknown. The domain remains active, meaning it is still accessible and potentially serving malicious content.

Defenders should treat this as a confirmed phishing threat based on the PhishDestroy blocklist entry, despite the low detection rate on other platforms. Recommended actions include blocking the domain at network and email gateways, monitoring for any associated IP address changes, and reporting it to additional security vendors for broader coverage. The domain's registration through a common registrar and its hosting on Google infrastructure do not inherently indicate legitimacy; phishing actors frequently use such services to evade initial detection.