robiox[.]com[.]tg

Analysis of www.robiox.com.tg confirms it as a Roblox-themed gaming scam, currently offline but previously flagged by multiple security mechanisms. The domain, registered through NETMASTER SARL, resolved to 94.74.164.148 (AS212238 Datacamp Limited, Germany) with no SSL certificate in place. Its page title, 'Jet_Vrusko - Roblox,' explicitly ties it to the gaming platform, aligning with the 'Gaming Scam' classification provided in threat intelligence sources. Twelve of 95 security vendors on VirusTotal detected the domain as malicious, and it appeared on at least one security blocklist (PhishDestroy).

The domain's infrastructure exhibited irregularities, including unresolved nameservers (NS_NOT_FOUND), which may indicate rapid deployment tactics or misconfiguration. While the site is now offline, its prior activity and detection by multiple vendors elevate its risk profile. Defenders should treat this domain as confirmed malicious infrastructure.

Network-level blocks at 94.74.164.148 and AS212238 are recommended to prevent potential re-emergence. No evidence suggests persistence beyond the reported IP, but monitoring for re-registration or DNS changes is advised. The absence of SSL and the use of a Togo country-code top-level domain (ccTLD) further align with common phishing patterns, though no specific phishing kit or payload was identified in available data.