MalwareTips published an investigation today calling rbxpay.pages.dev a free Robux scam. It says the page, titled "Free Robux – Official Rewards Portal", asks for a Roblox username and an amount of Robux, plays a fake…
Source: malwaretips.com · published
MalwareTips published an investigation today calling rbxpay.pages.dev a free Robux scam. It says the page, titled "Free Robux – Official Rewards Portal", asks for a Roblox username and an amount of Robux, plays a fake progress bar and server console, then locks the reward behind a 'human verification' wall of apps, surveys and sign-ups that earn the operator commissions. According to MalwareTips, no number of completed offers unlocks any Robux, some offers ask for email, phone number or other personal details or push app installs and paid subscriptions, and sites like this may later ask for a Roblox password or login code. It notes the page is hosted on a free Cloudflare Pages address and that Roblox does not run, approve or partner with it; Roblox is the impersonated brand, not the operator. Advice from MalwareTips: don't enter a username, don't complete the offers and never share a password or login code.
Free-item generators for games usually show a fake balance, then lock the 'reward' behind surveys, sponsored offers or a login that steals the account. MalwareTips described rbxpay.pages.dev as a 'Free Robux' page on a free Cloudflare Pages host. Roblox was impersonated and is not involved. A look-alike Roblox profile domain, roblox.com.am, was also flagged the same day.
Roblox does not give away Robux through a third-party generator. If you already entered a password or completed offers on that page, change the password at roblox.com, review billed payment methods and tell anyone who shares the account.
MalwareTips investigation, 11 November 2026: https://malwaretips.com/blogs/is-rbxpay-pages-dev-free-robux-real-what-we-found/
The urlDNA scanning service posted on Mastodon on 12 November 2026 that hxxps://www.roblox.ly/communities/3589766376/FREE-ROBUX-AND-GODLY is a possible phishing page, linking its scan. The domain also appears on the P…
The urlDNA scanning service posted on Mastodon on 11 November 2026 that hxxp://www.roblox.com.am/users/354704663845/profile/ is a possible phishing page, linking its scan. The domain also appears on the Phishing Army…
Automated URL scanner urlDNA posted on Mastodon (infosec.exchange) on 10 November 2026 that www[.]roblox[.]et/communities/6946372401/Avatar-Designers is a possible phishing page. roblox.et is not Roblox's address (the…
MalwareTips published an investigation today rating hervalife.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…
MalwareTips published an investigation today rating deniudy.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new na…
MalwareTips published an investigation today rating thebakedbox.in a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…