buxgifts[.]click

buxgifts.click has been identified as a phishing domain targeting users seeking to add Robux to their accounts. The domain uses a deceptive page titled 'Add Robux' to lure users into providing sensitive information under the guise of offering in-game currency associated with a popular gaming platform. This tactic is a common method used to exploit players looking for free or discounted in-game items.

The domain was created on February 26, 2026, and is registered through Dynadot LLC. It resolves to IP address 91.218.49.169, located in Ukraine and operated by AS6698 Virtual Systems LLC. The site's legitimacy is undermined by a VirusTotal score, where 23 out of 95 security vendors have flagged it as suspicious. Furthermore, it is listed on one security blocklist and has been blocked by a security service known to specialize in phishing deterrence. The SSL certificate used is issued by Let's Encrypt, which is often utilized by malicious sites due to its free nature.

Currently, buxgifts.click is offline following intervention from a blocking entity. Although the immediate threat is mitigated, the fact that the domain was operational for a period signifies potential exposure risk to users who interacted with the site before it was taken down. Continuous monitoring of similar domains is advised, and users should remain cautious of unsolicited offers related to gaming currencies, particularly those promising free or additional items without credible verification.