roblox[.]com[.]bo

This domain, roblox.com.bo, is actively flagged as a high-risk phishing site impersonating the Roblox brand. Infrastructure analysis reveals it resolves to 128.116.44.3, an IP address geolocated in Germany under AS22697, which is associated with Roblox's legitimate infrastructure. However, the domain itself is not part of Roblox's official network, as indicated by its nameservers (ns1.eggywall.cc and ns2.eggywall.cc), which are linked to known malicious hosting providers. The site returns an HTTP 301 redirect, suggesting it may be part of a larger redirection chain designed to evade detection or lead victims to credential harvesting pages. The page title explicitly displays 'Roblox,' confirming the intent to impersonate the gaming platform. The domain appears on two security blocklists and has been documented in two AlienVault OTX threat intelligence pulses, indicating prior detection by the security community. While 14 of 95 security vendors on VirusTotal flag this domain, the absence of an SSL certificate further reduces its legitimacy. Gridinsoft assigns it a trust score of 0/100, reinforcing its classification as malicious. Defenders should treat this domain as part of a gaming scam operation, likely targeting Roblox users through credential theft or fraudulent transactions. No evidence suggests the site has been taken down as of July 12, 2026. Immediate blocking at the DNS or network level is recommended, along with monitoring for related infrastructure using the same nameservers or IP range.