roblox[.]com[.]ge

The domain roblox.com.ge has been identified as a brand impersonation threat, specifically targeting the Roblox brand. This domain was registered through domenebi.ge and has been flagged for impersonating Roblox, a popular online gaming platform. The domain does not appear to be associated with any specific drainer kit.

Technical analysis reveals that the domain has a VirusTotal detection score of 22/95, indicating that a significant number of security vendors recognize it as a threat. The domain was registered through domenebi.ge and resolves to the IP address 91.240.21.8, which is located in Germany and is part of the AS59939 WIBO Baltic UAB network. The domain was created on August 21, 2025, and currently appears on four security blocklists, including PhishDestroy, OpenPhish, DiscordPhishing, and PhishingDB. The site's SSL certificate is issued by Let's Encrypt, which is a common practice for phishing sites to appear more legitimate.

The current status of roblox.com.ge is offline, suggesting that it has been taken down. However, the infrastructure used to host the domain, including the IP address and registrar, should still be monitored for any resurgence of malicious activity. While the domain is offline, it remains flagged by multiple security vendors, indicating an ongoing risk. Users are advised to avoid clicking on any links or entering credentials on any site that appears suspicious, even if it claims to be related to Roblox. Organizations and security teams should continue to monitor for similar domain registrations and take proactive measures to protect their users from brand impersonation attacks.