rbxhelper.xyz Threat Intelligence and Information

Host Location

Screenshot

Dig Results

• Got answer:
• -»HEADER«- opcode: QUERY, status: NOERROR, id: 224
• flags: qr rd ra QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
• OPT PSEUDOSECTION:
• EDNS: version: 0, flags: udp: 1432
• QUESTION SECTION:
• rbxhelper.xyz. IN A
• ANSWER SECTION:
• rbxhelper.xyz. 297 IN A 104.21.3.105
• rbxhelper.xyz. 297 IN A 172.67.130.145
• Query time: 0 msec
• SERVER: 192.168.1.153(192.168.1.1) (UDP)
• WHEN: Sat Mar 28 00:15:14 UTC 2026
• MSG SIZE rcvd: 74

Whois Data

• Domain Name: RBXHELPER.XYZ
• Registry Domain ID: D626695080-CNIC
• Registrar URL: https://publicdomainregistry.com
• Updated Date: 2026-03-26T12:02:54.0Z
• Creation Date: 2026-02-15T14:07:26.0Z
• Registry Expiry Date: 2027-02-15T23:59:59.0Z
• Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
• Registrar IANA ID: 303
• Name Server: ELLIOTT.NS.CLOUDFLARE.COM
• Name Server: LOVE.NS.CLOUDFLARE.COM
• DNSSEC: unsigned
• Registrar Abuse Contact Email: abuse@publicdomainregistry.com
• Registrar Abuse Contact Phone: +1.2013775952
• https://www.centralnicregistry.com/support/information/rdap «<
• blacklisted. All data is (c) CentralNic Ltd (https://www.centralnicregistry.com)

SSL Certificate Information

• Certificate:
• Data:
• Version: 3 (0x2)
• Serial Number:
• 7c:d8:0a:37:89:c2:94:42:11:27:58:ac:a4:e7:4e:86
• Signature Algorithm: ecdsa-with-SHA256
• Issuer: C = US, O = Google Trust Services, CN = WE1
• Validity
• Not Before: Feb 15 13:38:08 2026 GMT
• Not After : May 16 14:36:41 2026 GMT
• Subject: CN = rbxhelper.xyz
• Subject Public Key Info:
• Public Key Algorithm: id-ecPublicKey
• Public-Key: (256 bit)
• pub:
• 04:28:cc:39:79:c6:cc:f9:14:e7:ef:fe:ec:1c:b3:
• 77:64:f2:a8:3f:71:47:a6:6e:48:23:27:72:ba:db:
• b7:ad:95:16:53:b3:5a:4e:42:53:1b:db:42:57:e5:
• 5e:15:e7:82:db:87:e5:fa:96:6d:fd:2c:d4:bd:de:
• 7e:f5:00:ad:38
• ASN1 OID: prime256v1
• NIST CURVE: P-256
• X509v3 extensions:
• X509v3 Key Usage: critical
• Digital Signature
• X509v3 Extended Key Usage:
• TLS Web Server Authentication
• X509v3 Basic Constraints: critical
• CA:FALSE
• X509v3 Subject Key Identifier:
• 02:45:A4:23:F7:E1:D1:DF:95:44:EE:55:CC:52:CD:B0:25:2B:FF:CF
• X509v3 Authority Key Identifier:
• 90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
• Authority Information Access:
• OCSP - URI:http://o.pki.goog/s/we1/fNg
• CA Issuers - URI:http://i.pki.goog/we1.crt
• X509v3 Subject Alternative Name:
• DNS:rbxhelper.xyz, DNS:*.rbxhelper.xyz
• X509v3 Certificate Policies:
• Policy: 2.23.140.1.2.1
• X509v3 CRL Distribution Points:
• Full Name:
• URI:http://c.pki.goog/we1/c9egY9ikPsU.crl
• CT Precertificate SCTs:
• Signed Certificate Timestamp:
• Version : v1 (0x0)
• Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
• 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
• Timestamp : Feb 15 14:38:09.617 2026 GMT
• Extensions: none
• Signature : ecdsa-with-SHA256
• 30:45:02:21:00:87:C9:58:34:12:04:6B:BD:11:88:8F:
• 7D:58:B9:36:65:28:86:62:C8:89:7C:F9:E8:00:1F:02:
• B4:80:B7:61:4A:02:20:13:2B:FB:74:0B:CC:FA:6E:B9:
• 13:09:1A:F7:24:5D:B3:C3:80:7C:B5:A2:CB:5D:19:E5:
• 44:FB:FB:74:65:A5:D1
• Signed Certificate Timestamp:
• Version : v1 (0x0)
• Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
• DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
• Timestamp : Feb 15 14:38:09.480 2026 GMT
• Extensions: none
• Signature : ecdsa-with-SHA256
• 30:46:02:21:00:B7:26:6E:23:00:20:7B:AC:26:82:DE:
• 2D:31:3D:81:D3:DB:FD:33:AB:71:49:04:90:AE:37:81:
• 61:91:6A:D3:CF:02:21:00:C7:5C:14:B9:4E:C4:A5:A5:
• 8C:57:7E:4C:F4:CC:B3:78:F7:11:E3:BB:32:0C:92:76:
• 2F:22:64:CD:4A:2B:3D:B8
• Signature Algorithm: ecdsa-with-SHA256
• Signature Value:
• 30:46:02:21:00:e2:12:44:23:ab:19:0f:c9:ae:16:be:62:92:
• c7:28:0f:19:a3:53:21:c8:73:32:4e:d3:fa:80:b9:82:f9:d1:
• 99:02:21:00:eb:00:f6:0c:30:de:76:c6:6d:d3:96:cf:d7:c8:
• ce:12:70:f3:88:d1:ea:64:e0:6f:39:0c:da:3b:58:08:6c:42

Additional Links

*** Virustotal ***

*** WayBackMachine ***