robloxsupport[.]com

The domain robloxsupport.com is currently flagged as a high‑risk generic phishing site. Registration was performed through MarkMonitor Inc., a registrar commonly used for legitimate brand assets, which may aid evasion. The domain uses four nameservers that belong to the official Roblox infrastructure (nspx1.roblox.com, nspx2.roblox.net, nspx3.roblox.us, nspx4.roblox.co.uk), suggesting intentional mimicry of the brand’s DNS hierarchy. DNS resolution points to the IPv4 address 100.56.72.172, and the web server returns HTTP 200 with the page title "Roblox", indicating that a web service is actively hosted. VirusTotal reports three positive detections out of ninety‑one scanners, and AlienVault OTX includes the domain in one threat pulse, reinforcing the suspicion of malicious activity. The domain was created on 14 August 2018 and remains active as of the assessment date. Publicly available evidence does not disclose the exact payload or page layout, so the specific phishing technique employed remains unknown. Defenders should presume that the site is intended to harvest credentials or other sensitive data related to the Roblox brand. Immediate mitigation steps include adding robloxsupport.com to DNS blocklists, filtering outbound HTTP/S traffic to the resolved IP address 100.56.72.172, and monitoring for any authentication attempts to Roblox services originating from internal hosts. Continuous threat‑intel feeds should be consulted for updates, and any observed attempts to contact the domain should be logged and investigated.