get4blox[.]net

This domain, get4blox.net, poses as a repository for free Roblox scripts, including tools labeled Delta Executor and Forest Script. Analysis indicates it is designed to harvest user credentials by tricking players into entering their account details on fraudulent login portals. The site specifically targets the Roblox gaming community, exploiting trust in script-sharing platforms to collect sensitive information for unauthorized access or account theft. Infrastructure analysis reveals multiple red flags confirming malicious intent. The domain was registered on April 21, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar frequently associated with high-risk domains. Security vendors on VirusTotal flagged the domain, with 4 out of 95 detecting it as malicious. Additional indicators include its presence on two security blocklists (PhishDestroy and OISD), a Gridinsoft trust score of 0/100, and inclusion in one AlienVault OTX threat intelligence pulse. The domain resolved to the IP address 185.66.142.51 and used a Let’s Encrypt SSL certificate, a common tactic to appear legitimate. Users who visited get4blox.net should take immediate action to secure their accounts. If any credentials were entered, change the password for the affected Roblox account and enable multi-factor authentication. Scan the device used to access the site for malware, as phishing pages may deploy additional payloads. Monitor the account for unauthorized activity and report any suspicious transactions to the platform. Avoid reusing passwords across services, as compromised credentials may be tested elsewhere.