rdd-roblox[.]pages[.]dev

PhishDestroy identifies the domain rdd-roblox.pages.dev as a Roblox-themed account drainer impersonating the popular gaming platform. This fraudulent site is designed to steal Roblox credentials and session tokens, tricking users into entering sensitive login information under the guise of a legitimate Roblox page. The threat actor leverages Cloudflare Pages for hosting, providing a veneer of legitimacy while obfuscating the true nature of the site. This domain represents a drainer kit tailored to exploit Roblox users, exploiting their trust in the platform to harvest accounts for resale or malicious activities. This domain was flagged by PhishDestroy with a generic phishing threat type and remains under investigation. Technical indicators include 0/95 detections on VirusTotal, registration through Cloudflare, Inc., and an SSL certificate issued by Google Trust Services. The domain resolves to IP address 172.66.47.24, a known Cloudflare edge server. While the exact creation date is not publicly disclosed, the domain is actively serving malicious content. Google Safe Browsing (GSB) has not yet flagged this domain, and blocklist data shows no current listings as of this assessment. As of the latest analysis, rdd-roblox.pages.dev remains active and poses an ongoing threat to Roblox users. PhishDestroy advises immediate avoidance of this domain and recommends users report the site to Roblox and their browser’s security teams. The current risk level is under investigation, but users should treat this as a high-risk domain due to its Roblox impersonation and drainer capabilities. Remaining risk includes potential credential theft, account hijacking, and further propagation of the drainer kit. Users are urged to verify URLs carefully, enable two-factor authentication on their Roblox accounts, and report suspicious links to platform moderators.