win-robux22[.]blogspot[.]com

This domain, win-robux22.blogspot.com, is under investigation for hosting a phishing scheme targeting users with a fraudulent Robux giveaway. Infrastructure analysis reveals the domain was registered through Google Blogger and is currently offline, returning an HTTP 404 status. The page title 'Lakoni' was detected, though its exact content and visual elements remain unanalyzed. The domain resolves to IP 142.250.195.129, hosted on Google LLC's AS15169 in Germany, and uses an SSL certificate issued by Google Trust Services (WE2).

Technologies detected include Blogger, Java, Python, Tailwind CSS, OpenGSE, DTScout, Cloudflare Browser Insights, and HTTP/3, suggesting a mix of blogging and tracking tools. The domain appears on one security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0/100, indicating high risk. No nameservers were found, which may point to recent takedown efforts or misconfiguration. While VirusTotal shows no detections from 91 vendors, this absence does not confirm safety, as phishing domains often evade initial scans.

Defenders should treat this domain as malicious based on its presence on a blocklist, low trust score, and association with a known phishing tactic (fake Robux giveaways). Monitoring for reappearance under similar subdomains or Blogger URLs is recommended, as threat actors frequently reuse infrastructure. No concrete evidence links this domain to a specific phishing kit or campaign beyond the Robux giveaway classification.