roblox-mortem-metallum-infinite-health[.]pages[.]dev

This domain is flagged as a Roblox cheat script phishing site targeting users seeking unauthorized game advantages. The threat type involves distributing fraudulent 'infinite health' scripts for Roblox's Mortem Metallum experience, likely delivering malware or credential harvesters under the guise of game modifications. Current risk level remains under investigation due to limited detection coverage. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on April 16, 2026, resolving to IP address 188.114.96.3 (Cloudflare network, Canada). VirusTotal shows 0/95 detections, indicating no antivirus engines have flagged the domain at this time. The site appears on one security blocklist (PhishDestroy) and uses a Let's Encrypt SSL certificate (serial E8). Despite its recent creation, the domain remains active and presents a convincing facade for Roblox-related content. Mitigation requires immediate blocking of the domain and associated IP (188.114.96.3) at network perimeter devices. Security teams should monitor for connections to this infrastructure, particularly from endpoints with Roblox installed. User education should emphasize that third-party game scripts often contain malicious payloads, even when hosted on seemingly legitimate platforms. Network traffic analysis should focus on any downloads from this domain, as they likely contain executable components disguised as game modifications.