roblox[.]com[.]bi

This domain roblox.com.bi was registered on 19 May 2026 through Afriregister1 and resolves to 188.114.97.3, a Cloudflare‑owned address located in Canada. DNS resolution uses the Cloudflare name servers abby.ns.cloudflare.com and lamar.ns.cloudflare.com, and the site presents a valid Let’s Encrypt/E7 certificate. HTTP requests receive a 302 redirect, indicating an immediate forward to another location. Infrastructure fingerprints show Plesk control panel, AngularJS front‑end framework, and HTTP/3 support behind Cloudflare. The page title returned is “Roblox”, matching the targeted brand. Reputation services assign a Scamadviser score of 1 / 100 and a Gridinsoft score of 0 / 100. VirusTotal reports 19 of 92 scanners flagging the domain as malicious. It appears on two public blocklists and is listed by PhishDestroy and OpenPhish as a credential‑phishing site impersonating Roblox. The current status is active. No detailed content analysis is available, so the exact phishing payload and credential‑capture mechanisms remain unknown. Defenders should block the domain at perimeter filters, monitor for outbound connections to 188.114.97.3, and consider sinkholing the associated IP range. Continuous re‑scan of the URL and correlation with user reports are advised to detect any evolution of the threat.