# roblox-neck-accessory-id-codes.pages.dev — SUSPICIOUS

> PhishDestroy identifies roblox-neck-accessory-id-codes.pages.dev as an active credential harvesting site.

## Summary
PhishDestroy’s forensic analysis identifies roblox-neck-accessory-id-codes.pages.dev as an active credential harvesting domain posing as a Roblox accessory code generator. The site leverages a spoofed Roblox interface to trick users into submitting their login credentials, which are then exfiltrated to attacker-controlled servers. No known drainer kit signatures were detected during initial analysis, suggesting a lightweight but effective phishing template.


Technical indicators confirm elevated risk: the domain was registered via Cloudflare, Inc., resolves to IP 172.66.47.43, and operates under a Let’s Encrypt SSL certificate. VirusTotal analysis returned a detection score of 1/95 security vendors as of seed ebc2a1, indicating limited but growing awareness. The domain is hosted on Cloudflare Pages, a platform often abused for rapid deployment and evasion of takedown efforts.


This domain remains active and poses a persistent threat to Roblox users seeking free in-game items. While PhishDestroy continues to monitor and report this threat, users are strongly advised to avoid interacting with any links or pages associated with roblox-neck-accessory-id-codes.pages.dev. Immediate action includes disabling saved credentials on the domain, enabling two-factor authentication on Roblox accounts, and reporting suspicious activity to Roblox support. Remaining risk is elevated due to the domain’s active status and Cloudflare’s resilient hosting infrastructure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.43

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ef9ecfcd-1dc3-4dd9-877e-5a4f024738cf
- PhishDestroy: https://phishdestroy.io/domain/roblox-neck-accessory-id-codes.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/roblox-neck-accessory-id-codes.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/roblox-neck-accessory-id-codes.pages.dev/
Last updated: 2026-03-22