rbxmods[.]st
rbxmods.st 피싱 및 보안 점검
“RBXMods - The #1 Roblox Tools Service in 2024”
rbxmods.st — 마지막으로 알려진 활성 (HTTP 200). 사기 유형: Gaming Scam. 증거 요약: VirusTotal 12/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); Spamhaus DBL_SPAM; PhishDestroy score 100/100. 등록기관: ST Registry.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
Analysis of rbxmods.st, registered through ST Registry on July 16, 2025, indicates an elevated‑risk gaming scam targeting Roblox users. The site served HTTP 200 responses and presented the page title "RBXMods - The #1 Roblox Tools Service in 2024," suggesting a fraudulent claim of providing Roblox utilities. Infrastructure inspection shows the domain resolves to 51.89.59.170, an IP located in Germany and associated with AS16276 OVH SAS. The host runs Ubuntu with Apache HTTP Server and enforces HSTS, and it presents a Let's Encrypt certificate (E7) for TLS termination.
Threat intel sources note that AlienVault OTX has referenced the domain in two separate pulses, and PhishDestroy has already blocked it. It appears on one external security blocklist, and Gridinsoft assigned a trust score of 1 out of 100, underscoring its malicious reputation. VirusTotal scans recorded 12 detections out of 95 participating security vendors, reinforcing the consensus that the domain is malicious. Nameservers ns1.eggywall.cc and ns2.eggywall.cc are authoritative for the zone.
Current status is offline, but historical evidence confirms that the domain was actively used for a gaming‑related phishing campaign. Defenders should add the domain and its associated IP address to deny‑list rules, monitor DNS queries for the listed nameservers, and ensure that any outbound connections to the OVH‑hosted IP are blocked. Continuous scanning of the IP range for similar patterns is advised, along with verification of any internal logs for attempts to access rbxmods.st before the takedown.
보안 신호
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 3 identified
Most widely used open-source HTTP server software.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
VirusTotal 분석
보관된 증거
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of rbxmods.st · checked Mar 2, 2026
증거 및 외부 보고서
이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.