galaxybrainrots[.]com

Analysis of galaxybrainrots.com indicates it is a brand impersonation domain targeting Roblox users, classified as a gaming scam. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and resolved to the IP address 34.149.120.3, hosted on Google LLC's infrastructure (AS396982) in the United States. Nameservers point to ns1.siteground.net and ns2.siteground.net, and the detected technologies include Nginx and Google Analytics. The page title, 'phant (LIMITED) Claim Strawberry Ele,' suggests an attempt to lure users with the promise of exclusive in-game items, a common tactic in Roblox-related phishing schemes. The domain is currently offline, but prior to takedown, it was flagged by at least one security blocklist and detected by 5 of 93 vendors on VirusTotal.

PhishDestroyer lists it as blocked, and Gridinsoft assigns a trust score of 0/100. The SSL certificate is issued by Let's Encrypt (R13), which is typical for both legitimate and malicious sites. No evidence of a phishing kit or additional infrastructure details is available, and the exact content of the site remains unanalyzed beyond the page title. Defenders should treat this domain as confirmed malicious infrastructure.

Historical resolution data for 34.149.120.3 may reveal additional related domains, and passive DNS or certificate transparency logs could provide further context. If this domain was encountered in logs or user reports, it should be blocked at the network and endpoint levels. Given the gaming scam classification and Roblox impersonation, security teams should also monitor for similar domains using variations of 'limited,' 'claim,' or in-game item names in their page titles or URLs. No further action is required for this domain as it is offline, but retrospective analysis of its activity period may be warranted.