# cerulean-entremet-a1aeb4.netlify.app — MALICIOUS

> Alert: cerulean-entremet-a1aeb4.netlify.app is actively used for phishing scams. Stay safe by learning how to identify and avoid this threat.

## Summary
PhishDestroy identifies cerulean-entremet-a1aeb4.netlify.app as an active phishing domain posing a high risk to internet users. This threat is significant because it employs social engineering tactics designed to deceive victims into providing sensitive personal or financial information. Such attacks can lead to identity theft, financial loss, and compromised online accounts, making awareness and caution critical for users encountering this domain.

Analysis shows that cerulean-entremet-a1aeb4.netlify.app is hosted via Netlify, with its DNS resolving to the IP address 63.176.8.218. The domain has been flagged by multiple security services, including Google Safe Browsing which categorizes it as a social engineering threat, and 16 out of 95 VirusTotal security vendors have also identified malicious activity associated with this site. Despite these detections, the domain remains active, indicating ongoing attempts to exploit unsuspecting users.

Users are strongly advised to avoid interacting with cerulean-entremet-a1aeb4.netlify.app or any unsolicited links directing to it. If encountered, do not enter any personal or login information. Employ updated antivirus and anti-phishing tools, and verify the legitimacy of websites independently before providing sensitive data. Reporting suspicious sites to security organizations can help protect the wider community from these fraudulent schemes.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 200)
- Page title: Log in to Roblox

## Domain Intelligence
- Registered: 2026-03-05 01:07:02
- Registrar: Netlify
- IP: 63.176.8.218
- Nameservers: NS_NOT_FOUND

## Detection Status
- VirusTotal: 19 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "Criminal IP", "CyRadar", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Gridinsoft", "Kaspersky", "Lionic", "Netcraft", "OpenPhish", "Sophos", "VIPRE", "Webroot", "alphaMountain.ai"]
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Live Page Content
- Meta description: Login to your Roblox account or sign up to create a new account.

### Page Text
Log in to Roblox Skip to Main Content Charts Marketplace Create Robux Charts Marketplace Create Robux in Experiences in People in Marketplace in Communities in Creator Store Sign Up Log In Login to Roblox Username/Email/Phone Password Log In Forgot Password or Username? login with Another Logged In Device About Us Jobs Blog Parents Buy Gift Cards Help Terms Accessibility Privacy Your Privacy Choices Sitemap ©2026 Roblox Corporation. Roblox, the Roblox logo and Powering Imagination are among our registered and unregistered trademarks in the U.S. and other countries. Close

### External Scripts
- https://ssl.google-analytics.com/ga.js
- https://js.rbxcdn.com/9bc4b17f1f2bafccec81a464524f3932280b78644b1b3f9a9120c53b3a5463ba-EnvironmentUrls.js
- https://js.rbxcdn.com/a3fe79f1bfdd96b7f0ad20eab2de7a05.js
- https://js.rbxcdn.com/5c8a2ba3737908f693394045e81ebd71c77cde6f87550ea51f7833e8c98200ae.js
- https://js.rbxcdn.com/2f0fd0c2760ff1898187af6df3b764f4b08f77a315d0a33654f105f61b0ea6d0.js
- https://js.rbxcdn.com/4a4e9e2baef63e69b1972dd39fefc9dae2ab00ac95b6f02b9e7516159d9dd4cf-HeaderScripts.js
- https://js.rbxcdn.com/f85ce090699c1c3962762b8a2f8b252f0f2a7d0424c146f41d6c5abbf0147a57.js
- https://js.rbxcdn.com/efe2904fed755a0337bf98072cc144b9c2e1af66b0db357f3570a08f3aa099dc-Theme.js
- https://roblox.com/js/hsts.js?v=3
- https://js.rbxcdn.com/1d87d1231072878a0f6164e84b8cfa6f90a1b31b18ba5d8f410b947d4b029fe8.js

### Form Fields
- Password
- button
- search
- username
- Search
- search-bar
- Username/Email/Phone
- password
- text

### External Links
- https://cerulean-entremet-a1aeb4.netlify.app/upgrades/robux?ctx=navpopover
- https://cerulean-entremet-a1aeb4.netlify.app/info/about-us?locale=en_us
- https://create.roblox.com/
- https://cerulean-entremet-a1aeb4.netlify.app/sitemap?locale=en_us
- https://cerulean-entremet-a1aeb4.netlify.app/catalog?CatalogContext=1&Keyword=
- https://cerulean-entremet-a1aeb4.netlify.app/account/signupredir?returnUrl=https%3A%2F%2Fcerulean-entremet-a1aeb4.netlify.app%2F
- https://cerulean-entremet-a1aeb4.netlify.app/my/account#!/privacy?locale=en_us
- https://cerulean-entremet-a1aeb4.netlify.app/info/privacy?locale=en_us
- https://cerulean-entremet-a1aeb4.netlify.app/info/terms?locale=en_us
- https://cerulean-entremet-a1aeb4.netlify.app/info/jobs?locale=en_us
- https://www.roblox.com/login/forgot-password-or-username
- https://cerulean-entremet-a1aeb4.netlify.app/search/users?keyword=
- https://cerulean-entremet-a1aeb4.netlify.app/info/accessibility?locale=en_us
- https://cerulean-entremet-a1aeb4.netlify.app/info/parents?locale=en_us
- https://cerulean-entremet-a1aeb4.netlify.app/login?returnUrl=https%3A%2F%2Fcerulean-entremet-a1aeb4.netlify.app%2F

## Evidence
- Screenshot: https://i.ibb.co/wFP3n3Sm/89286f52e894.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/a2d3f598-1912-41ed-8f74-75f70bc4d6c7
- PhishDestroy: https://phishdestroy.io/domain/cerulean-entremet-a1aeb4.netlify.app/

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/cerulean-entremet-a1aeb4.netlify.app/
Last updated: 2026-03-14