roblox-studio-toolbelt-plugin-download[.]pages[.]dev

PhishDestroy has identified roblox-studio-toolbelt-plugin-download.pages.dev as a confirmed phishing site, currently under investigation but already flagged by one security blocklist. The threat is generic phishing, likely aiming to trick Roblox users into entering their login credentials or downloading malicious files under the guise of a plugin toolbelt.

This domain was created on April 16, 2026, and is registered through Cloudflare Pages, resolving to IP 188.114.96.3. It uses a Let's Encrypt SSL certificate (E7) to appear legitimate. VirusTotal shows 0 out of 95 detections, meaning it has not yet been widely flagged by antivirus engines, but its presence on a security blocklist and the suspicious page title 'Get a Fast Roblox Studio Toolbelt Plugin Download' strongly indicate malicious intent.

Users should never visit this site or provide any personal information. If they have already entered credentials, they should change their Roblox password immediately and enable two-factor authentication. It is also recommended to run a full antivirus scan and monitor accounts for unusual activity. PhishDestroy advises blocking the domain at the network level and reporting it to Roblox and relevant authorities.