rbxliy[.]com

This domain, rbxliy.com, operates as a Roblox-themed phishing portal designed to deceive users into believing they can obtain free in-game currency (RBX). Analysis indicates the site employs social engineering tactics, presenting itself as a legitimate giveaway platform with the page title 'FREE RBX EVERYDAY.' The objective is to harvest user credentials, payment details, or deploy malicious scripts under the guise of a reward system, potentially leading to account compromise or financial fraud.

Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain was registered on May 07, 2025, through Dynadot Inc, a registrar frequently associated with newly created phishing sites. It resolves to the IP address 91.223.82.8 and is secured with a Let's Encrypt SSL certificate (YR1), a common tactic to appear legitimate. VirusTotal reports 18 out of 95 security vendors flagging this domain as malicious, while it appears on one additional security blocklist. The domain has since been taken down, but residual risks may persist for users who engaged with it prior to deactivation.

Users who visited rbxliy.com should take immediate action to mitigate potential exposure. If any credentials or payment information were entered, affected accounts should be secured by changing passwords and enabling multi-factor authentication. System scans using updated security tools are recommended to detect any installed malware or unauthorized scripts. Users should also monitor financial statements for unauthorized transactions and report any suspicious activity to relevant platforms or authorities. Given the domain's recent creation and rapid takedown, vigilance is advised against similar phishing attempts using comparable domains or tactics.