robinhoodvolumebot[.]net

The domain www.robinhoodvolumebot.net was registered on July 27, 2026 through Name.com, Inc. and is currently active. DNS resolution points to the IPv4 address 188.114.97.3, and the domain is served by Cloudflare nameservers (elinore.ns.cloudflare.com and ned.ns.cloudflare.com). Threat intelligence categorises the site as a generic phishing operation and assigns a high risk rating.

VirusTotal analysis shows that eight of ninety‑one scanning engines have flagged the domain as malicious, indicating a moderate level of detection consensus. The domain is listed on at least one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing the assessment that it is being used for malicious credential‑stealing or fraud attempts. No public page title, SSL certificate details, or HTTP response codes have been disclosed, so the exact content and visual impersonation tactics remain unknown.

Defenders should treat any traffic to www.robinhoodvolumebot.net as hostile, block the domain at perimeter firewalls and DNS resolvers, and monitor for related indicators such as connections to 188.114.97.3. Ongoing observation of the Cloudflare name server configuration and any changes to the registration record is recommended, as adversaries often shift hosting or renew registrations to evade takedown efforts. Additional analysis of payloads or URLs linked from the domain, if discovered, would further clarify the phishing campaign’s scope and target selection.