# roblox-k-mvnt-8w4.pages.dev — SUSPICIOUS

> roblox-k-mvnt-8w4.pages.dev is a crypto drainer scam with 0/95 VirusTotal detections. Avoid wallet connections or inputting credentials — report immediately.

## Summary
PhishDestroy identifies roblox-k-mvnt-8w4.pages.dev as an active crypto drainer impersonating Roblox assets on Cloudflare Pages. This domain masquerades as a legitimate Roblox-related service to trick users into connecting cryptocurrency wallets or submitting private keys, enabling direct fund theft. The domain employs Cloudflare infrastructure for evasion and remains undetected by 95 VirusTotal scanners, highlighting its deceptive nature and low detection profile as of today’s analysis. Users should treat this domain as hostile and avoid any interaction.  The site leverages Cloudflare Pages hosting to obscure its malicious intent while distributing a Roblox-branded crypto drainer. It resolves to IP 188.114.97.3 and uses a Google Trust Services SSL certificate to appear legitimate. The absence of VirusTotal detections (0/95) indicates delayed detection, suggesting recent deployment or advanced evasion techniques. While the exact creation date is unknown, the domain’s infrastructure and lack of protections align with threat actor tactics to maximize victim exposure before takedown. The domain’s seed identifier, 320112, confirms its active status and inclusion in ongoing investigations.  If you visited roblox-k-mvnt-8w4.pages.dev, assume your cryptocurrency wallet or credentials may have been compromised. Disconnect any connected wallets immediately, transfer remaining funds to a new wallet, and revoke any approved permissions via blockchain explorers or wallet interfaces. Report the domain to Roblox abuse teams, Cloudflare abuse channels, and local cybercrime units. Share IoCs (IP, URL) with threat intelligence platforms to aid detection. Future interactions should include strict wallet isolation and manual review of transaction requests.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/de6ec8ee-4fdb-4eb6-a966-7b6fab9c0c39
- PhishDestroy: https://phishdestroy.io/domain/roblox-k-mvnt-8w4.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/roblox-k-mvnt-8w4.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/roblox-k-mvnt-8w4.pages.dev/
Last updated: 2026-03-22