apprblx[.]netlify[.]app

Analysis of the domain apprblx.netlify.app, observed on July 24, 2026, indicates that the site was hosting a generic gaming‑related credential‑capture page, as evidenced by the page title “Log in to Roblox”. The infrastructure is provisioned through Netlify, with the domain registered via Netlify’s hosting platform. DNS resolution returns the IPv6 address 2a05:d014:58f:6200::259, which belongs to Amazon.com, Inc. (ASN 16509) and resolves to a location in Germany. The TLS certificate presented is a DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain issued by DigiCert Inc., confirming the use of a valid public certificate.

HTTP probing returned a 404 status, and the site is currently offline. Reputation services flag the domain as highly untrustworthy: Scamadviser assigns a trust score of 1 / 100, and PhishDestroy has listed the domain as blocked. VirusTotal reports that 16 of 95 scanning engines flagged the domain, and it appears on one external blocklist. Detected technologies include Netlify’s hosting stack and HTTP Strict Transport Security (HSTS).

The combination of a Roblox login lure, low trust scores, multiple vendor detections, and blocklist presence classifies the site as a gaming scam. Uncertainties remain regarding the exact phishing kit or any post‑exploitation payload, as no additional artefacts such as JavaScript or form parameters have been captured. Defenders should continue to block the domain at perimeter and DNS layers, monitor the associated IPv6 address for any re‑use, and update threat‑intel feeds with the observed indicators. Ongoing observation of Netlify‑hosted subdomains is recommended, as malicious actors frequently leverage such rapid‑deployment platforms for short‑lived campaigns.