# rbxshaders.pro — SUSPICIOUS

> PhishDestroy identifies rbxshaders.pro as a Roblox brand impersonation domain used for credential theft. VirusTotal detection count currently stands at 0/95.

## Summary
PhishDestroy identifies rbxshaders.pro as an active Roblox brand impersonation domain operating under a generic phishing threat vector. The domain masquerades as a legitimate Roblox-related service, specifically targeting users with deceptive branding to harvest credentials. Given the domain's recent creation, lack of detections, and unresolved status, immediate caution is warranted as the threat level remains under investigation but is confirmed active.

This domain was flagged by PhishDestroy with the following technical indicators: registered on March 22, 2026, resolving to IP address 188.114.96.3, and using a Let's Encrypt SSL certificate. The domain is registered through PDR Ltd. d/b/a PublicDomainRegistry.com, and currently shows 0 detections out of 95 on VirusTotal, indicating it has not yet been widely recognized as malicious. No entries were found on public blocklists or threat intelligence feeds at this time, and domain trust scores remain unverified due to its recent registration.

To mitigate risks associated with this Roblox brand impersonation scam, users should avoid entering any credentials or personal information into this domain. Verify the legitimacy of any Roblox-related URL by cross-referencing with official Roblox domains (e.g., roblox.com, rbx.shaders.pro is not an official domain). Report this domain to Roblox’s fraud reporting channels and update local blocklists. Use browser extensions that detect impersonation attempts and monitor accounts for unauthorized access following any interaction with suspicious domains.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-22 19:29:49
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ac615cd7-8653-431b-9ac0-c55599214d62
- PhishDestroy: https://phishdestroy.io/domain/rbxshaders.pro/
- LLM endpoint: https://phishdestroy.io/domain/rbxshaders.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rbxshaders.pro/
Last updated: 2026-03-30