unique-cupcake-e5d0af[.]netlify[.]app

This domain is flagged as an elevated-risk phishing site specifically designed to deceive users seeking Robux, an in-game currency. The threat type is classified as credential harvesting with financial fraud intent, leveraging social engineering tactics to exploit victims through fake reward offers. Analysis indicates the domain unique-cupcake-e5d0af.netlify.app was registered through Netlify on May 9, 2018, and resolves to the IP address 63.176.8.218, hosted on infrastructure belonging to AS16509. Security vendor detections on VirusTotal report 20/95 flags for malicious activity, while the domain appears on one security blocklist. The SSL certificate is issued by DigiCert Inc under the DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain, though this does not mitigate the underlying threat. The page title explicitly states 'Get robux,' reinforcing the targeted phishing theme. Mitigation requires immediate blocking of the domain and associated IP address at the network perimeter. Organizations should implement real-time URL filtering to prevent access to newly identified phishing sites, particularly those mimicking gaming rewards. End users should be educated on recognizing social engineering tactics, such as unsolicited offers for in-game currency, and instructed to verify the legitimacy of such promotions through official channels. Monitoring for credential reuse across other platforms is recommended due to the high likelihood of stolen account information being exploited in secondary attacks.