httpp-www-roblox[.]co

PhishDestroy identifies httpp-www-roblox.co as a targeted credential harvesting site masquerading as the legitimate Roblox platform. The domain employs a deceptive homoglyph variation of the official Roblox URL, tricking users into entering their username and password under the false pretense of account verification or reward redemption. This specific phishing campaign is designed to compromise Roblox accounts, potentially leading to unauthorized purchases, identity theft, or further exploitation of the victim's digital footprint.

Technical analysis reveals that the domain was registered on June 05, 2026, through DYNADOT LLC, a registrar not commonly associated with legitimate Roblox operations. The site resolves to IP address 79.143.180.137 and uses a Let's Encrypt SSL certificate issued to YR2—a common tactic to appear secure. Alarmingly, 12 out of 95 security vendors on VirusTotal flagged this domain as malicious, and it appears on 1 security blocklist. Additionally, AlienVault OTX reports it in 2 threat intelligence pulses, confirming its active use in phishing campaigns.

If a user has visited httpp-www-roblox.co and entered credentials, immediate action is crucial. The user should change their Roblox password and enable two-factor authentication on the account. It is also advisable to run a full antivirus scan to detect any potential malware, and monitor for suspicious activity on any other accounts that share the compromised credentials. PhishDestroy strongly recommends avoiding any interaction with this domain and reporting it to relevant cybersecurity authorities.