getbunni[.]app

The domain getbunni.app is a generic phishing site targeting the gaming community, specifically users of Roblox. It impersonates a free script executor tool called 'Bunni Executor' to distribute malicious software under the guise of legitimate gaming utilities. No legitimate brand or drainer kit is associated with this domain. As of the latest verification, getbunni.app has been taken offline, but it previously posed an elevated risk of credential theft or malware distribution.

Technical indicators confirm the suspicious nature of getbunni.app. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolved to the IP address 172.67.153.135, hosted on Cloudflare's network (AS13335) in the US. The SSL certificate was issued by Google Trust Services (WE1), and the observed page title was 'Bunni Executor - Free Roblox Script Executor | Download Now'. Gridinsoft assigned the domain a trust score of 0/100, further indicating its malicious intent.

Users who interacted with getbunni.app should immediately scan their devices for malware and change any credentials that may have been exposed. Enable two-factor authentication (2FA) on all gaming and financial accounts as a precaution. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts. If malware was downloaded, disconnect the device from the internet and seek professional assistance to remove it.