# rbxflip.xyz — SUSPICIOUS

> rbxflip.xyz identified as active Roblox gift card phishing site. Only 1 of 95 VirusTotal vendors flagged it. Check the full report.

## Summary
PhishDestroy identifies rbxflip.xyz as a live Roblox gift card phishing domain designed to trick users into entering account credentials. The site poses as a fake Roblox reward generator, luring visitors with the promise of free Robux in exchange for gift card codes or personal information. Scammers commonly use this tactic to harvest valid gift card PINs or account details, which are then sold or used to fund other fraudulent activities. Once obtained, stolen gift card funds can be immediately transferred out, leaving victims with no recourse. The page may also deploy browser-based attacks or redirect users to additional malicious sites.


This domain was flagged by only 1 out of 95 VirusTotal security vendors as of the latest scan. The domain was registered on March 16, 2026 and is hosted by NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for accommodating high-risk registrations. The site uses a Let’s Encrypt SSL certificate and resolves to IP address 188.114.97.3, a cloud hosting infrastructure increasingly favored by phishing campaigns for its anonymity and speed. These combined indicators point to a recently activated, lightly monitored phishing operation actively targeting vulnerable users.


If you visited rbxflip.xyz or entered any information, immediately disconnect from the internet and scan your device using a trusted antivirus tool. Do not use saved passwords or autofill forms on this site. Change your Roblox account password immediately using a different device, and enable two-factor authentication. Contact Roblox Support and report the incident. If you provided gift card codes, contact the issuing retailer (e.g., Amazon, Walmart) to report fraud and request a chargeback if within the refund window. Avoid clicking any links received after visiting this site, as they may lead to further compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-16 15:47:20
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b0278b74-4e5a-4f82-8586-6b8e0114206f
- PhishDestroy: https://phishdestroy.io/domain/rbxflip.xyz/
- LLM endpoint: https://phishdestroy.io/domain/rbxflip.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rbxflip.xyz/
Last updated: 2026-03-23