# rbxtool.pro — SUSPICIOUS

> rbxtool.pro is a newly registered Roblox account phishing site. Only 0/95 security tools flagged it so far. Check the full report.

## Summary
PhishDestroy identifies rbxtool.pro as a dedicated Roblox account phishing portal designed to harvest user credentials and session tokens. The site mimics official Roblox login interfaces to trick players into entering their usernames, passwords, or 2FA codes, which are then captured by attackers for account takeover. This is a classic credential-harvesting campaign targeting the gaming community, particularly Roblox users seeking free tools or exploits. The domain was flagged as active on March 14, 2026, and remains under active investigation due to escalating user reports and emerging behavioral patterns. No antivirus engine on VirusTotal currently detects it, and it operates with a valid Let's Encrypt SSL certificate to appear legitimate.  This domain was flagged with a threat type of generic_phishing and is currently under investigation. It was registered on March 14, 2026, through Registrar of Domain Names REG.RU LLC, a common choice for short-lived malicious domains. The site resolves to IP address 158.160.116.199, which hosts multiple low-reputation domains associated with gaming scams. Despite zero detections on VirusTotal (0/95 engines), the site's recent creation date and lack of reputation suggest high-risk potential. The use of Let's Encrypt certificates is a tactic to bypass browser warnings and gain user trust.  If you visited rbxtool.pro, immediately change your Roblox password and enable two-factor authentication if not already active. Review your account activity for unauthorized logins or purchases. Clear browser cookies and scan your device with a reputable antivirus tool. Avoid entering any credentials on this domain. Report the site to Roblox support and your browser’s security team. Do not interact further with the domain to prevent potential malware downloads or additional credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-14 13:15:34
- Registrar: Registrar of Domain Names REG.RU LLC
- IP: 158.160.116.199

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/48179e40-d1be-4f93-b88c-519cb69ba733
- PhishDestroy: https://phishdestroy.io/domain/rbxtool.pro/
- LLM endpoint: https://phishdestroy.io/domain/rbxtool.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rbxtool.pro/
Last updated: 2026-03-29