ruubloxxa[.]blogspot[.]com

The domain ruubloxxa.blogspot.com is currently listed as offline but retains a set of observable indicators that merit continued monitoring by defensive teams. The site was hosted on the Google Blogger platform and resolved to the IP address 172.253.122.132, which belongs to AS15169 Google LLC and is geolocated in Germany. The TLS certificate presented by the host is issued by Google Trust Services under the WE2 intermediate, confirming that the connection would have been encrypted if the site were reachable. An HTTP request returned a 404 status code, indicating that the specific page path referenced by the scanner was not found at the time of probing. The page title that was captured, "Roblox generator 2026," aligns with a common phishing lure that promises free in‑game currency or items for the Roblox brand.

The domain is flagged by three out of ninety‑one VirusTotal scanners, demonstrating that a minority of security vendors have identified malicious characteristics associated with the site. It appears on one public blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the perception of phishing intent. The Gridinsoft trust score of 0 out of 100 further reflects a lack of confidence in the domain’s legitimacy. Nameserver information could not be retrieved (NS_NOT_FOUND), which limits visibility into the domain’s DNS configuration.

While the offline status prevents active exploitation at present, the combination of a deceptive page title, low trust score, partial vendor detections, and blocklist listings suggests that the domain was used to host a phishing campaign targeting Roblox users. Defenders should continue to block the domain at perimeter filters, update URL filtering rules to include the full hostname, and monitor for any re‑registration or resurrection of the site.