99rob[.]netlify[.]app

This report analyzes the threat associated with the domain 99rob.netlify.app. The site's page title was "Roblox," indicating it was designed to impersonate the Roblox gaming platform. As a gaming scam, the site's primary threat was likely to trick users into providing login credentials or personal information under the guise of a legitimate Roblox service.

Technical evidence confirms the malicious nature of this domain. VirusTotal flagged the site with 12 out of 95 detections, with specific flags from Criminal IP, alphaMountain.ai, BitDefender, CyRadar, and Fortinet. The domain is registered through Netlify and resolves to IP address 2600:1f18:16e:df01::258, hosted in the United States on AS14618 (Amazon.com, Inc.). The SSL certificate was issued by DigiCert Inc, using the DigiCert Global G2 TLS RSA SHA256 2020 CA1. The domain is on one blocklist and has a ScamAdviser trust score of 1 out of 100, indicating very low trustworthiness.

The site is currently down or offline, which neutralizes its immediate threat. However, the risk level remains high due to the confirmed malicious detections and low trust score, as the domain could be reactivated or used for future attacks. Users should avoid any interaction with this domain.