rbxmaster[.]com

This domain, rbxmaster.com, is under investigation for brand impersonation targeting the Sui cryptocurrency platform. Analysis indicates the infrastructure is designed to deceive users by mimicking legitimate services, potentially facilitating unauthorized access to sensitive credentials or digital assets. The threat type aligns with known tactics used in crypto-related fraud, where attackers exploit trust in established brands to execute phishing or drainer schemes. Infrastructure analysis reveals the following technical indicators: the domain was registered on April 17, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.96.3. It is associated with a Let's Encrypt SSL certificate and employs technologies such as Cloudflare Browser Insights, Cloudflare, and HTTP/3. Despite its deceptive design, the domain has not been flagged by VirusTotal (0/95 detections) and holds a Gridinsoft trust score of 0/100. It appears on one security blocklist and was recently taken offline, though its prior activity remains a concern. To mitigate risks associated with this brand impersonation threat, users and organizations should implement the following measures: immediately block the domain rbxmaster.com and its resolving IP 188.114.96.3 at the network level. Monitor for any attempts to re-register or re-host the domain, as attackers may revive it under similar names. Educate users about the risks of interacting with unsolicited links or pages claiming affiliation with Sui or other cryptocurrency platforms. Verify domain registration dates and SSL certificates when accessing sensitive services, and report any suspicious activity to relevant security teams or threat intelligence platforms for further analysis.