robloxc[.]com[.]es

Analysis of robloxc.com.es shows it was registered on 14 December 2025 and currently resolves to 172.67.129.177, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The domain uses Cloudflare’s DNS service (chuck.ns.cloudflare.com, kara.ns.cloudflare.com) and serves content over HTTP/3, presenting a Google Trust Services / WE1 SSL certificate that is valid for the host name. The only visible page title returned by the web server is “Site Maintenance”, which does not provide functional content but is commonly used by malicious operators to hide phishing or scam pages behind a maintenance banner. Google Safe Browsing has marked the domain as a social‑engineering threat, and VirusTotal reports that 20 out of 93 scanned security vendors flag the domain as malicious.

AlienVault OTX lists the domain in seven separate threat‑intel pulses, and it appears on one public security blocklist. The domain is also listed as blocked by PhishDestroy. The intelligence consistently categorises the activity as a gaming‑related brand impersonation targeting Roblox users, matching the supplied scam type “Gaming Scam”. While the technical infrastructure—Cloudflare hosting, valid SSL, and the maintenance page title—does not on its own prove malicious intent, the convergence of multiple independent detection sources, the Google Safe Browsing flag, and the specific branding claim indicate a high‑confidence malicious operation.

No additional content, such as credential‑capture forms or redirects, has been publicly disclosed, leaving the exact user‑facing behavior uncertain. Defenders should add robloxc.com.es to network‑level blocklists, enforce DNS‑based filtering, and monitor for any outbound connections to the associated IP address. Continuous re‑evaluation is advised in case the site publishes active phishing or credential‑stealing pages.