bloxfruit[.]link

PhishDestroy has identified bloxfruit.link as a confirmed phishing site with an elevated risk level. This domain is specifically designed to steal login credentials from users of the popular gaming platform Roblox, likely by impersonating the official Blox Fruits game or related services. The site is now offline, but during its active period, it posed a significant threat to unsuspecting players.

Technical analysis reveals several red flags. The domain was created on May 23, 2026, which is in the future, suggesting a data anomaly or a deliberate attempt to evade detection. It is registered through Spaceship, Inc., a known registrar for suspicious domains. VirusTotal data shows that 1 out of 95 security vendors flagged this domain as malicious, indicating low but notable detection. Additionally, the domain appears on one security blocklist and is listed in one AlienVault OTX threat intelligence pulse, confirming its association with phishing campaigns. The site's current status is offline, likely due to takedown efforts.

To stay safe, Roblox players should always verify URLs before entering login credentials. Never click on links from unsolicited messages or third-party sites claiming to offer free in-game items. Use a reputable password manager to avoid reusing passwords, and enable two-factor authentication on your Roblox account for an extra layer of security. If you have already entered your details on this site, change your password immediately and monitor your account for unauthorized activity.