robloxt[.]co

This domain, robloxt.co, poses a brand impersonation threat targeting Roblox users. The site mimics legitimate Roblox infrastructure, likely to deceive users into disclosing credentials, installing malicious software, or engaging in fraudulent transactions under the guise of the trusted gaming platform. The domain’s infrastructure and content suggest a deliberate attempt to exploit the Roblox brand for malicious purposes, including potential credential harvesting or malware distribution. Analysis indicates the domain was registered on February 21, 2026, through Spaceship, Inc., and resolves to the IP address 104.21.31.221, hosted on Cloudflare’s network (AS13335). It is currently flagged by 20 out of 95 security vendors on VirusTotal and appears on one security blocklist. The SSL certificate is issued by Google Trust Services (WE1), and the page title displayed was 'Site Maintenance,' a common tactic to obscure malicious intent while maintaining a facade of legitimacy. Users who visited robloxt.co should immediately revoke any credentials entered on the site, particularly Roblox account details. Monitor associated accounts for unauthorized activity, including in-game transactions or changes to account settings. If malware was downloaded, perform a full system scan using updated security tools. Given the domain’s elevated risk level and prior malicious activity, affected users should also consider enabling multi-factor authentication on all linked accounts to mitigate further compromise.