rjx[.]netlify[.]app

This domain, rjx.netlify.app, is actively hosting a phishing page targeting Roblox users with a fake "Grow Garden Roblox Generator" tool. The site is designed to deceive visitors into entering their Roblox account credentials, which are then harvested by threat actors for unauthorized access, account theft, or financial fraud. Such phishing schemes often exploit the popularity of gaming platforms to trick users into disclosing sensitive login details under the guise of in-game rewards or generators.

Analysis indicates the domain was registered on June 14, 2026, through Netlify, a legitimate hosting provider often abused for phishing infrastructure. The SSL certificate, issued by DigiCert Inc, provides a false sense of security while the site remains malicious. Security vendors have flagged this domain, with 3 out of 95 engines on VirusTotal detecting it as malicious. Additionally, the domain appears on one security blocklist and resolves to the IP address 35.157.26.135, which may be part of a broader phishing network.

If you or someone you know visited rjx.netlify.app and entered Roblox credentials, immediate action is required. First, change the Roblox account password using a secure device and enable two-factor authentication. Next, review the account for unauthorized purchases or changes. Monitor linked email accounts for suspicious activity, as compromised credentials may be used to target other services. Report the incident to Roblox support and consider filing a report with local cybersecurity authorities or anti-phishing organizations to aid in tracking and mitigating the threat.