speedarbgft[.]click

This domain, speedarbgft.click, is flagged as a brand impersonation threat targeting Roblox users, specifically promoting fraudulent gift card or in-game currency offers. Registered on July 1, 2025, through HOSTINGER operations, UAB, the domain resolved to IPv6 address 2a02:4780:27:2005:0:3232:6cbe:7, hosted on AS47583 (Hostinger International Limited, France). The page title, "شحن روبلوكس مجانا" (Arabic for "Free Roblox Recharge"), directly aligns with the scam type classified as a gaming scam. As of July 25, 2026, the domain appears offline, though its infrastructure remains registered. Analysis indicates minimal detection coverage: only 1 security blocklist (PhishDestroy) and 2 of 93 vendors on VirusTotal flagged it as malicious.

The SSL certificate, issued by ZeroSSL RSA Domain Secure Site CA, does not provide additional trust signals, as the Gridinsoft trust score is 0/100. No evidence links or HTTP response headers were provided for further analysis, limiting visibility into potential redirection chains or backend frameworks. Defenders should treat this domain as a confirmed but low-volume threat. The Arabic-language lure and Roblox branding suggest targeting of Middle Eastern or multilingual user bases.

While offline, the domain could resurface; monitoring for DNS reactivation or IP reassignment is recommended. Blocklist inclusion and registrar details (Hostinger) may aid in tracking related infrastructure. No indicators confirm persistence mechanisms, such as subdomains or connected IPs, but the IPv6 address and ASN provide pivot points for network-level detection. Given the limited vendor detections, manual verification of related domains (e.g., similar naming patterns or shared hosting) may uncover additional threats.