rblox[.]me
“Kyxn Dev — Developer Platforms”
Ringkasan bukti
This domain is flagged for elevated-risk generic phishing activity targeting software developers and platform users. Analysis indicates the site rblox.me impersonates legitimate developer services under the false pretense of a "Developer Platforms" offering, as evidenced by its page title "Kyxn Dev — Developer Platforms." The infrastructure presents multiple high-risk indicators that warrant immediate caution. Infrastructure analysis reveals the domain was registered through NAMECHEAP INC on March 29, 2026, with an anomalous future creation date suggesting potential domain spoofing techniques. It currently resolves to IP address 23.111.14.131 and employs a technology stack including Plesk, Node.js, Phusion Passenger, Nginx, and Express. Security vendor assessments show 20 out of 95 detection engines flagged the domain on VirusTotal, while it appears on one security blocklist and has been taken offline following detection. Trust scoring systems assign it a Gridinsoft score of 0/100 and Scamadviser rating of 1/100, both indicating maximum risk levels. Organizations should implement immediate mitigation measures including blocking the domain rblox.me and its associated IP 23.111.14.131 at firewall and DNS levels. Security teams should conduct credential reset procedures for any accounts that may have interacted with the domain, particularly developer credentials that could grant access to sensitive repositories or deployment systems. Additional monitoring should be implemented for the technology stack components (Node.js, Express, Nginx) which may be targeted in similar phishing campaigns. The anomalous creation date of March 2026 should be used as an additional filter criterion for detecting related malicious domains in threat intelligence feeds.
Snapshot bukti yang dikirim
- Dikirim
- Catatan buku besar
- 1
- ID kasus
PD-20260329-5BE62C- Judul halaman yang direkam
- Super_Div - Roblox
- Artefak PDF
- Bukti PDF
Teks bukti lengkap
Policy Violations: Domain Registration Agreement prohibits hacking, misuse of domain to conduct attacks, scam and fraudulent activities; AUP allows immediate suspension
Applicable Laws: CFAA 18 U.S.C. §1030, Wire Fraud 18 U.S.C. §1343, CAN-SPAM Act
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | app.injuries.lu |
malicious | Sinkholed |
| Hagezi Threat Feed | app.injuries.lu |
malicious | Sinkholed |
| Cloudflare DNS | www.robiox.com.py |
malicious | Sinkholed |
| DNS4EU | www.robiox.com.py |
malicious | Sinkholed |
| OpenDNS | www.robiox.com.py |
phishing | Phishing Block |
| DigiCert UltraDNS | www.robiox.com.py |
malicious | Sinkholed |
| Hagezi Threat Feed | www.robiox.com.py |
malicious | Sinkholed |
| Quad9 DNS | www.robiox.com.py |
malicious | Sinkholed |
| DigiCert UltraDNS | api.injuries.lu |
malicious | Sinkholed |
| Hagezi Threat Feed | api.injuries.lu |
malicious | Sinkholed |
| Cloudflare DNS | metrics.robiox.com.py |
malicious | Sinkholed |
| OpenDNS | metrics.robiox.com.py |
phishing | Phishing Block |
| DNS4EU | metrics.robiox.com.py |
malicious | Sinkholed |
| DigiCert UltraDNS | metrics.robiox.com.py |
malicious | Sinkholed |
| Hagezi Threat Feed | metrics.robiox.com.py |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
Linimasa deteksi
-
VirusTotal
14 → 20
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of rblox.me · checked Jun 26, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive