# rbxshader.xyz — SUSPICIOUS

> rbxshader.xyz is a Roblox-themed phishing site flagged by 2 of 95 VirusTotal vendors. Avoid entering credentials and report this fraudulent domain immediately.

## Summary
PhishDestroy identifies rbxshader.xyz as an active Roblox-themed phishing domain with an elevated risk level.

This domain was flagged by 2 of 95 VirusTotal security vendors, registered through PDR Ltd. d/b/a PublicDomainRegistry.com, resolves to IP address 104.21.60.75, and was created on March 26, 2026. The domain holds a valid Let's Encrypt SSL certificate, indicating active deployment but no inherent trustworthiness.

The domain poses as a Roblox-related service, likely targeting users seeking shader modifications or enhancements for Roblox gameplay. Attackers commonly exploit such enticing offers to harvest login credentials or distribute malware. Given the fresh domain creation date (March 26, 2026) and low initial blocklist presence, users should exercise extreme caution and avoid interacting with this site. Immediate actions include blocking the domain at the network level, reporting it to Roblox security teams, and warning the Roblox community. Users who may have already entered credentials should change their Roblox account password immediately and enable two-factor authentication.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-26 20:41:42
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.60.75

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/99200e2c-7252-4c44-a3a1-048f1dd06fc4
- PhishDestroy: https://phishdestroy.io/domain/rbxshader.xyz/
- LLM endpoint: https://phishdestroy.io/domain/rbxshader.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rbxshader.xyz/
Last updated: 2026-03-29