system-roblox[.]com

The domain system-roblox.com is currently offline but was observed resolving to the IPv4 address 151.247.193.142. The host resides in the Autonomous System AS399486 (12651980 CANADA INC.) and its IP geolocation reports France. Nameserver delegation points to ns1.eggywall.cc and ns2.eggywall.cc, both of which are commonly associated with malicious hosting infrastructure. Registration records show the domain was created on March 06, 2026 through NiceNIC International Group Co., Limited, indicating a recent registration typical of throwaway domains used in brand‑impersonation campaigns. No TLS certificate is presented, leaving the site accessible only via HTTP, which further reduces trust signals.

Analysis of public threat feeds reveals that system-roblox.com is flagged by two of ninety‑four VirusTotal scanners, and it appears on a single security blocklist. The site is listed by PhishDestroy as a blocked entity, confirming that defensive feeds have already taken action. The page title returned by the server is “system-roblox.com/”, providing no additional context about the content. The domain is explicitly associated with a Roblox brand impersonation and classified as a gaming‑related scam, suggesting that any malicious payload would likely target Roblox users with credential‑stealing or account‑takeover tactics.

Defenders should add the domain and its resolved IP address to outbound and inbound filtering rules, enforce DNS sinkholing for the identified nameservers, and monitor for any future resolution to the same IP or ASN. Because the site lacks SSL, any attempt to serve malicious content over HTTPS would require a new certificate, which can be detected through certificate transparency logs. Continuous observation of the registrar NiceNIC International Group Co., Limited for bulk registrations may reveal related infrastructure. Until the domain is taken down, security operations should treat any traffic to system-roblox.