robloxrewards[.]store

This domain, www.robloxrewards.store, is identified as a phishing site specifically designed to impersonate Roblox reward programs. Analysis indicates the site is currently offline, but it previously operated under the guise of offering free in-game rewards to deceive users into disclosing account credentials or personal information. The threat type is classified as credential harvesting through brand impersonation, with Roblox as the targeted platform. Infrastructure analysis reveals the domain was registered through HOSTINGER operations, UAB, and resolves to the IP address 142.251.13.121. It was flagged by 5 of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. The domain appears on two security blocklists, including PhishDestroy and OISD, and was created on April 16, 2026. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting users. The page title, 'Roblox Free Rewards Locker,' directly aligns with common phishing tactics used to exploit user trust in reward-based promotions. As of the latest assessment, www.robloxrewards.store has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the infrastructure may resurface under a different domain or IP address. Organizations and users are advised to block the domain and its associated IP at the network level. Security teams should monitor for similar phishing campaigns targeting gaming platforms, particularly those leveraging reward-themed lures. End-users should be educated on verifying the authenticity of reward offers and scrutinizing domain names for irregularities before entering credentials.