roblox-login.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of roblox-login.vercel.app
This domain appears to host a webpage styled to resemble the Roblox login experience, including Roblox branding, navigation labels, and account sign-in fields. The page title is "Roblox," and the screenshot shows a login form asking for username, email, phone, and password, alongside links pointing to the legitimate Roblox website.
Based on the domain name and visible content, this does not appear to be an official Roblox-owned domain. Instead, it appears to be a third-party page deployed on Vercel infrastructure that imitates a gaming platform login portal. Multiple web-classification sources categorize it as phishing or fraud-related, while one broader classifier labels it under information technology and another under gaming due to the Roblox-themed content.
Safety Assessment for roblox-login.vercel.app
This website shows several indicators commonly associated with credential-harvesting pages. The domain name closely resembles Roblox branding while using a third-party subdomain, and the screenshot shows a login form presented as if it were an official Roblox sign-in page. In scan results, 13 out of 91 security engines flagged the URL, largely with phishing-related verdicts, and one threat database also listed it for phishing at the time of this scan.
The malware scan did not detect malicious files, which can happen when a page is focused on social engineering rather than malware delivery. However, the absence of flagged files does not offset the stronger phishing signals from multiple security engines and the visible imitation of a well-known gaming brand. The domain's IP address was also listed on one mail-reputation blocklist, which is a weaker signal on its own but adds minor caution.
Based on these findings, this website may pose potential risks to visitors, particularly anyone asked to enter account credentials.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 64.29.17.131 in the United States. It presents a valid SSL/TLS certificate issued by Google Trust Services, with expiry shown in late 2026. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional integrity layer.
From a technical standpoint, the page appears to be a Next.js deployment using standard static assets and no flagged iframes. The main concern is not the TLS setup or hosting platform, but the apparent misuse of a cloud-hosted subdomain to imitate a branded login page.
Share your experience with this website. Was it safe? Did you encounter any issues?