# boblixtools.lol — MALICIOUS

> boblixtools.lol is linked to phishing activity. Avoid interacting with this domain to safeguard your personal information and devices.

## Summary
PhishDestroy identifies boblixtools.lol as a domain engaged in generic phishing activities, classifying it with a medium risk level. The domain was registered on February 16, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, raising concerns due to its recent creation and suspicious intent detected by phishing heuristics tied to seed d36921.

Technical analysis reveals that boblixtools.lol resolves to IP address 188.114.96.3 and appears on one security blocklist. VirusTotal scan results flag the domain by 8 out of 95 security vendors, signaling notable detection by multiple threat intelligence sources. These indicators suggest the domain is part of an infrastructure used to deceive users into divulging sensitive information through fraudulent means.

Currently, boblixtools.lol remains active and continues to pose a threat to internet users. PhishDestroy advises immediate caution to avoid interaction with this domain. Security teams should consider blocking access and monitoring for related phishing attempts to mitigate risk. Users are urged to report any suspicious activity linked to this domain to strengthen collective defenses.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: BLUYS Script Execution - Advanced Roblox Script Executor

## Domain Intelligence
- Registered: 2026-03-05 15:07:02
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: jim.ns.cloudflare.com meera.ns.cloudflare.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "G-Data", "Seclookup", "VIPRE"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbe6c-5080-707f-8dab-f90252066a4d.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/boblixtools.lol
- PhishDestroy: https://phishdestroy.io/domain/boblixtools.lol/
- LLM endpoint: https://phishdestroy.io/domain/boblixtools.lol/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/boblixtools.lol/
Last updated: 2026-03-16