feji[.]in

This domain, feji.in, poses as a legitimate Roblox game page titled Grow a Garden to deceive users into entering their account credentials. The site mimics Roblox's branding and interface, tricking victims into believing they are accessing an official game portal. Once credentials are entered, they are captured by threat actors for unauthorized account access, in-game item theft, or further malicious activities such as spreading malware or conducting financial fraud using compromised accounts. Analysis indicates this domain was registered on March 21, 2025, through Porkbun LLC, a registrar commonly used for both legitimate and malicious domains. The site is flagged by 17 out of 95 security vendors on VirusTotal, and it appears on two security blocklists: PhishDestroy and PhishingDB. Infrastructure analysis reveals the domain resolves to IP address 104.21.40.217, hosted on Cloudflare's network (AS13335), which is frequently leveraged to obscure the true origin of phishing infrastructure. The SSL certificate is issued by Google Trust Services, adding a superficial layer of legitimacy to the fraudulent site. If a user visited feji.in and entered their credentials, immediate action is required to mitigate risk. First, change the password for the affected Roblox account and enable multi-factor authentication if not already active. Review the account for unauthorized transactions, item deletions, or unfamiliar linked devices. Check connected email accounts for password reset attempts or suspicious activity, as compromised credentials may be used to pivot to other services. Monitor financial accounts if payment methods are linked to the Roblox account. Users should also scan their devices for malware, as some phishing pages deploy additional payloads. Report the incident to Roblox support and consider notifying local cybersecurity authorities if significant financial or personal data loss occurs.