rbxclaimpets[.]com

Analysis of rbxclaimpets.com indicates active infrastructure linked to a crypto drainer phishing campaign as of July 27, 2026. The domain was registered through Cloudflare, Inc., and utilizes Cloudflare nameservers (abby.ns.cloudflare.com, ian.ns.cloudflare.com), a common pattern observed in phishing operations leveraging Cloudflare's privacy and proxy services to obscure hosting details. The domain currently returns an HTTP 302 redirect status, suggesting it may be part of a multi-stage redirection chain designed to evade detection or dynamically serve malicious payloads. VirusTotal data shows that 7 out of 91 security vendors flag this domain as malicious, though the specific detection categories (e.g., phishing, malware, or crypto-related threats) are not detailed in the available intelligence.

The domain also appears on at least one security blocklist, corroborating its classification as high-risk. The presence of a unique seed identifier (30aca7) may indicate tracking by threat intelligence platforms, though its specific purpose remains unconfirmed. Defenders should prioritize blocking rbxclaimpets.com at the DNS and network levels, particularly in environments where cryptocurrency transactions or Roblox-related activities are common, as the domain name suggests a potential lure targeting users of the Roblox platform.

The use of Cloudflare nameservers and registrar services complicates traditional WHOIS-based attribution, but the domain's active status and detection by multiple vendors justify immediate mitigation. Further investigation into associated IP addresses, SSL certificates, or redirect chains may reveal additional infrastructure components. No brand-specific content or page details are currently available for analysis, limiting conclusions about the exact social engineering tactics employed.