# roblox-mod-menu-for-blox-fruit.pages.dev — SUSPICIOUS > roblox-mod-menu-for-blox-fruit.pages.dev distributes a mod menu posing as a Blox Fruits hack. Users risk account theft as the page requests Roblox credentials. ## Summary PhishDestroy identifies a live phishing domain masquerading as a Roblox mod menu for the game Blox Fruits. The site lures players with fake cheats, aiming to steal Roblox account credentials and session tokens. Victims who enter their login details risk permanent account suspension, virtual-item theft, and gift-card fraud orchestrated from compromised profiles. At least one IP address and Google Trust Services SSL certificate are already in use, confirming active infrastructure. Cloudflare hosting complicates takedown efforts while the domain remains uncategorized by most scanners. This domain was flagged by PhishDestroy on 2024-05-21 with VirusTotal showing 0 detections out of 95 engines as of seed 0b8a67. The page resolves to 188.114.96.3 and is registered through Cloudflare, Inc., leveraging Google Trust Services for SSL. Analysis indicates the threat actor registered the domain within the last 48 hours and immediately began phishing via the Pages.dev platform to bypass traditional web-filtering controls. The IP address 188.114.96.3 is part of Cloudflare’s edge network, often abused for short-lived phishing campaigns targeting gaming communities due to low barrier-to-entry and high anonymity. If you visited roblox-mod-menu-for-blox-fruit.pages.dev or entered any Roblox credentials: rotate your password immediately using the official roblox.com site, enable two-step verification, and revoke unknown devices via Settings > Security. Run a malware scan on your device as injected scripts may steal cookies or session tokens. Report the account to Roblox Trust & Safety and warn friends to avoid the link. Avoid any site offering free Blox Fruits items or mod menus outside the official Roblox platform. Monitor gift-card balances and linked email for unauthorized transactions. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 188.114.96.3 ## Detection Status - VirusTotal: 0 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/d62c571c-4153-4677-bf41-877d811e1849 - PhishDestroy: https://phishdestroy.io/domain/roblox-mod-menu-for-blox-fruit.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/roblox-mod-menu-for-blox-fruit.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/roblox-mod-menu-for-blox-fruit.pages.dev/ Last updated: 2026-03-22