v0rblx[.]vercel[.]app

This site poses as a Roblox-branded login page but is actually a crypto drainer designed to steal account credentials and cryptocurrency wallets. Once a user enters their personal information, the site captures and transmits it to threat actors, who can then drain any linked digital assets. The fraudulent page is hosted on Vercel, a legitimate platform, making it harder for casual visitors to detect its malicious intent.

PhishDestroy identified this threat through multiple indicators. The SSL certificate is issued by Google Trust Services, which is typical for phishing sites hiding behind legitimate CDNs. VirusTotal data shows 1 out of 95 security vendors have flagged this domain, confirming its malicious reputation. The domain was created through Vercel's infrastructure and remains active, resolving to IP address 64.29.17.195. It also appears on one security blocklist, further corroborating its dangerous nature.

If you have visited this site, immediately change your Roblox password and any other accounts where you used the same credentials. Enable two-factor authentication on all accounts. Scan your device with updated antivirus software and monitor your financial accounts for unauthorized transactions. Report the site to Vercel and your email provider to help others avoid this threat.