rbx025k[.]blogspot[.]hk

This site, rbx025k.blogspot.hk, presented itself with the page title "Get Robux," indicating it was a scam designed to deceive users into believing they could obtain the virtual currency for the online game Roblox. The threat posed is credential harvesting or fraud, as such sites typically trick victims into providing login credentials or completing surveys that generate illicit revenue for the operator.

Technical evidence confirms the malicious nature of the site. VirusTotal analysis shows it was flagged by 13 out of 95 security vendors, including alphaMountain.ai, BitDefender, CRDF, CyRadar, and ESET. The domain is listed on two blocklists. It was registered on 2010-11-27 through MarkMonitor, Inc. and resolves to IP address 192.178.155.132, hosted in the United States by AS15169 Google LLC. The site uses an SSL certificate from Google Trust Services (WE2) and its nameservers are ns1.google.com, ns2.google.com, ns3.google.com, and ns4.google.com.

The site is currently down or offline, which neutralizes the immediate threat it posed. However, given the high detection rate and its classification as a Robux scam, the risk level remains significant if the site becomes active again, as it targets users of a popular gaming platform.