Phishing detection: roblox.com.bi

Roblox
https://roblox.com.bi/users/133565866456/profilemalwarenetworkrat Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain roblox.com.bi1 CT host on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 179.43.172.109
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://roblox.com.bi/users/133565866456/profilemalwarenetw…
urlscan Wayback archive.today
Cert YR2
crt.sh Censys Google CT
Phishunt analysis Beta
21 low suspicionheuristic risk score · not a probability
Keyword matchBrand impersonation in pathOpenPhish
13 signals fired · detector v2.0.0
AI analysis AIBeta
Malware delivery

Impersonates Roblox by placing the brand name before a Burundi ccTLD on Swiss bulletproof hosting by Private Layer INC. The URL path references a malware network and RAT, suggesting this site distributes malware under a Roblox profile guise. Flagged malicious by OpenPhish.

OpenPhishBrand impersonation in pathCountry mismatch
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-22 · confidence 58%
Domain & Network
Whois
Network
IP 179.43.172.109
Country SwitzerlandSwitzerland
Hosting Private Layer INC
ASN AS51852
TLS Cert YR2
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-22 14:06 UTC  ·  Last refreshed 2026-08-22 14:06 UTC