roblox[.]net[.]pk

This domain, roblox.net.pk, is identified as a high-risk phishing site designed to impersonate the legitimate Roblox platform. The site presents a fraudulent login interface under the page title 'Immortal,' aiming to harvest user credentials, payment details, or other sensitive information. Analysis indicates the domain specifically targets Roblox players, exploiting the platform's popularity to deceive victims into entering their account details on a counterfeit page. Infrastructure analysis reveals the domain was registered on April 03, 2026, and is hosted on IP address 91.240.21.5, located in Germany under the provider Hooray Solutions Corp. The domain appears on one security blocklist and is flagged by Google Safe Browsing as phishing. VirusTotal reports 20 out of 95 security vendors detecting the domain as malicious. The SSL certificate is issued by Let's Encrypt with the identifier E7, which does not mitigate the inherent risk posed by the domain. Users who accessed roblox.net.pk should immediately change their Roblox account passwords and enable multi-factor authentication if not already active. Any credentials entered on the site should be considered compromised. Additionally, users should scan their devices for malware using updated security tools, as phishing sites may distribute malicious payloads. If financial information was submitted, affected parties should contact their financial institutions to monitor for unauthorized transactions and consider placing fraud alerts on their accounts.