v0robloxgen[.]vercel[.]app

This domain, v0robloxgen.vercel.app, is currently flagged as an active credential theft campaign targeting Roblox users. Analysis indicates the infrastructure is designed to harvest account credentials through deceptive login prompts, despite the current 404: NOT_FOUND page title suggesting temporary obfuscation or staging. The domain remains operational and poses a high risk to users seeking unauthorized in-game currency or account access. Infrastructure analysis reveals the domain resolves to the IP address 64.29.17.3, registered under Vercel, Inc. and hosted within the United States. VirusTotal detection metrics show 1 of 95 security vendors have flagged this domain, while it appears on a single security blocklist. The SSL certificate is issued by Google Trust Services (WR1), a common provider for both legitimate and malicious domains. No historical registration data is available through standard WHOIS queries, as the domain is provisioned through a platform-as-a-service provider rather than a traditional registrar. The low detection count may reflect limited exposure or evasion techniques, though the presence on a security blocklist confirms malicious classification. Current status indicates the domain remains active and capable of serving malicious content. Users are advised to avoid interaction with v0robloxgen.vercel.app and any associated links. Network administrators should implement blocking at the DNS or IP level (64.29.17.3) to prevent access. Roblox account holders should enable multi-factor authentication and monitor for unauthorized login attempts. Security teams are encouraged to correlate this domain with other Roblox-themed credential theft campaigns, particularly those leveraging cloud hosting platforms for rapid deployment and takedown evasion.