v0-robloxi[.]vercel[.]app

This domain, v0-robloxi.vercel.app, is currently active and classified as a high‑risk brand‑impersonation site targeting Roblox users. The site returns HTTP 200 and presents the page title “RobuxFund – Claim Your Reward,” which aligns with the declared scam type of a fake airdrop. Infrastructure analysis shows the domain is hosted on Vercel, resolves to the IP address 64.29.17.195, and the IP is geolocated to the United States under Vercel, Inc. The TLS certificate is issued by Google Trust Services (WR1) and the server enforces HSTS, indicating a legitimate‑looking HTTPS configuration despite the malicious intent. The domain was registered through Vercel’s platform, and the same provider is identified in the technology fingerprint.

Detection services have flagged the domain: four of ninety‑one VirusTotal scanners reported it as malicious, and it appears on a single external blocklist. PhishDestroy has also listed the domain as blocked. No additional public threat‑intel feeds (e.g., OTX) or safe‑browsing checks were provided in the current data set. Because the site’s content has not been manually inspected, visual or functional details remain unverified.

Defenders should immediately block DNS resolution for v0-robloxi.vercel.app, add the IP 64.29.17.195 to network‑level deny lists, and monitor outbound connections for attempts to contact the host. Security teams are advised to update web‑filter and email‑gateway signatures with the observed page title and SSL fingerprint to catch related phishing attempts. Continuous monitoring of Vercel‑hosted subdomains is recommended, as the platform can be leveraged for rapid deployment of similar impersonation campaigns. The high risk rating reflects the combination of brand targeting, active hosting, and multiple vendor detections, and the domain should be treated as a confirmed malicious indicator until further takedown confirmation.