99roblox[.]blogspot[.]com

Analysis of 99roblox.blogspot.com indicates an active brand‑impersonation campaign targeting Google. The site is hosted on Blogger and resolves to IP 142.250.195.129, which belongs to AS15169 Google LLC and is geolocated in Germany. The domain was registered through the Blogger service, uses an SSL certificate issued by Google Trust Services / WE2, and returns HTTP 200 with a page title of "99ROBLOX (Visual Only)". Detected technologies include Blogger, Java, Python, OpenGSE, Sovrn, ShareThis, DTScout, and 33Across. The domain appears on one security blocklist (PhishDestroy) and received a Gridinsoft trust score of 0 / 100. Although VirusTotal has not flagged the site, the absence of detections does not constitute evidence of safety. Nameserver information is unavailable. Defenders should treat the domain as malicious, enforce URL filtering to block access, consider adding the IP address to network deny lists, and monitor outbound connections to the associated Google infrastructure for anomalous activity. Continuous observation is advised, as the campaign remains active and under investigation, and further content analysis may reveal additional indicators of compromise.