roblox-tools[.]icu

This domain carries an elevated risk level due to its specific targeting of Roblox users through a ChatKey unlocking phishing scheme. PhishDestroy identified this as a generic phishing threat, but the page title—ChatKey — разблокировка чата Roblox—reveals a focused lure promising chat unblocking, a common technique to harvest credentials or deliver malware.

Technical analysis shows the domain was created on May 22, 2026, and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP 188.114.96.3, with an SSL certificate issued by Let's Encrypt (type YE2). VirusTotal flags it as malicious by 15 out of 95 security vendors, and it appears on one security blocklist. AlienVault OTX includes it in one threat intelligence pulse, indicating active tracking by the security community. The domain is currently offline, but its infrastructure remains a risk.

For users who may have interacted with this domain, immediate steps include changing Roblox account passwords and enabling two-factor authentication. Scan devices for any downloaded files or extensions, and monitor for unauthorized access. PhishDestroy recommends blocking the domain at the network level and reporting it to Roblox support to prevent similar attacks. The combination of a newly registered domain, low trust signals, and specific Roblox branding underscores the need for vigilance against gaming-related phishing campaigns.