robloxdoorslobby[.]pages[.]dev

Analysis of robloxdoorslobby.pages.dev indicates this domain is under investigation for phishing activity targeting users of the Roblox platform. The domain is hosted on Cloudflare infrastructure, resolving to IP address 172.66.44.125 and using Cloudflare nameservers (mustafa.ns.cloudflare.com and sneh.ns.cloudflare.com). Registration details confirm Cloudflare, Inc. as the registrar, consistent with the hosting provider.

As of July 29, 2026, the domain appears on one security blocklist and is actively blocked by PhishDestroy, suggesting recent detection by at least one anti-phishing vendor. No detections were reported by the 91 vendors that scanned the domain on VirusTotal, though this absence does not confirm safety. The domain's content has not been fully analyzed, so the specific phishing mechanism—such as credential harvesting, fake in-game currency offers, or account takeover attempts—remains unconfirmed.

Defenders should treat this domain as high-risk due to its presence on a security blocklist and association with a known gaming brand. Organizations are advised to block the domain at the DNS or proxy level, monitor for connections to the IP 172.66.44.125, and alert users about potential phishing attempts linked to Roblox-themed domains. Further investigation is required to determine the full scope of the threat and any associated infrastructure.