roblox[.]tc

This domain, roblox.tc, poses a brand impersonation threat specifically targeting Roblox users. Analysis indicates the site is designed to mimic legitimate Roblox login or account management pages, potentially tricking visitors into disclosing credentials, personal information, or installing malicious software under the guise of official Roblox services. The use of a similar domain name (roblox.tc) exploits user trust in the Roblox brand, increasing the likelihood of successful deception, particularly among younger or less security-aware users. Evidence supporting the malicious nature of this domain includes detection by 21 out of 95 security vendors on VirusTotal, as well as its presence on two security blocklists. The domain was registered on February 21, 2026, through NICTC A.S., and resolves to the IP address 179.43.150.242, hosted in Switzerland under AS51852 (Private Layer INC). The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the risk, as encrypted connections are commonly exploited in phishing campaigns to appear legitimate. The page title, 'Ultima,' further suggests an attempt to obscure the site's true purpose. Users who visited roblox.tc should immediately revoke any credentials entered on the site and monitor their Roblox accounts for unauthorized activity. If financial or personal information was submitted, affected individuals should consider placing fraud alerts on their credit files. Devices used to access the domain should undergo a full security scan to detect potential malware. Additionally, network administrators are advised to block the domain and its resolving IP (179.43.150.242) at the perimeter to prevent further access. Given the domain's current offline status, users should remain vigilant for similar impersonation attempts using other domains or IPs associated with the same infrastructure.