public company · US
Roblox Corp
- Primary official domain
- roblox.com
- Reviewed official domains
- 1 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
98
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
111
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Could not fully evaluate (sender-specific macros) · Mail: Receives mail (5 MX hosts) · checked 2026-10-19 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- roblox
- Label aliases
- roblox
- Official domains
- roblox.com (all)
- Generated spellings
- 95 tracked · 72 observed somewhere · 23 not observed (all)
- Can receive mail
- 32 spellings and 17 reported domains publish MX records · mail at h-email.net (parking placeholder) 9 · Namecheap forwarding (mail forwarding) 7 · Above.com parking (parking placeholder) 6 · 21 more (72 spellings and 98 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
bestrobloxscript[.]comMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive74.208.97.48 · Confirmed phishing host address (DomainSpoof, 14 days)IONOSIONOS (AS8560) · DEip74-208-97-48.pbiaas.comchecked 2026-10-19 10:50 UTC | 1 source · 1 record | Details |
roblox[.]hgames[.]storeMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.198.79.1Amazon Web ServicesAmazon Web Services (AS16509) · US64.29.17.1Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
qr-roblox[.]comMail: MX · Confirmed phishing host address (DomainSpoof, 14 days)SPF · Confirmed phishing host address (DomainSpoof, 14 days) · checked 2026-10-19mail at mail.qr-roblox.com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive91.239.206.29 · Confirmed phishing host address (DomainSpoof, 14 days)PROSERVICE (AS47810) · GEwww5.proservice.gechecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
roblox-play[.]ruMail: MXSPFDMARC · checked 2026-10-19mail at mail.roblox-play.ru · DMARC policy quarantine · sends via _spf.hostland.ru | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.26.122.8HOSTLAND (AS62082) · RUserv8-26.hostland.ruchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
roblox[.]cloudMail: MXSPFDMARC · checked 2026-10-19mail at Cloudflare Email Routing (mail forwarding) · DMARC policy none (monitor only) · sends via Cloudflare Email Routing | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.40.109CloudflareCloudflare (AS13335) · US172.67.150.188CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:286dCloudflareCloudflare (AS13335) · US2606:4700:3032::ac43:96bcCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
roblox[.]rwMail: MXSPFDMARC · checked 2026-10-19mail at mail.roblox.rw · DMARC policy none (monitor only) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive179.43.182.61 · Confirmed phishing host address (DomainSpoof, 14 days)PLI-AS (AS51852) · PAapp.utlima.cls930246ksmfchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxai[.]siteMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.158.133.1CloudflareCloudflare (AS13335) · USlovable-app-cd-1-4.p.l5e.iochecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxanimalhospitalplush[.]comMail: MXSPFDMARC · checked 2026-10-19mail at Purelymail (consumer mailbox) · DMARC policy reject · sends via Purelymail | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive43.112.118.34 · Confirmed phishing host address (DomainSpoof, 14 days)Alibaba CloudAlibaba Cloud (AS45102) · CNchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxbless[.]comMail: MX · Confirmed phishing host address (DomainSpoof, 14 days)SPFDMARC · checked 2026-10-19mail at mail.robloxbless.com · DMARC policy quarantine | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive138.68.153.54 · Confirmed phishing host address (DomainSpoof, 14 days)DigitalOceanDigitalOcean (AS14061) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
robloxgiftcardnest[.]comMail: MXSPF · checked 2026-10-19mail at Porkbun (web / mail hosting) · sends via Porkbun | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive207.207.210.107Amazon Web ServicesAmazon Web Services (AS16509) · US207.207.210.229Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxing[.]orgMail: MX · Confirmed phishing host address (DomainSpoof, 14 days)SPF · checked 2026-10-19mail at robloxing.org · sends via MailChannels | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive77.81.120.30 · Confirmed phishing host address (DomainSpoof, 14 days)KNOWNSRV (AS200514) · GBchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxspain[.]comMail: MX · Confirmed phishing host address (DomainSpoof, 14 days)SPFDMARC · checked 2026-10-19mail at robloxspain.com · DMARC policy none (monitor only) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive176.123.0.199 · Confirmed phishing host address (DomainSpoof, 14 days)ALEXHOST (AS200019) · MDns8.alexhost.comchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxt[.]com[.]esMail: MXSPF · checked 2026-10-19mail at h-email.net (parking placeholder) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.247.81.99TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxteammate[.]comMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.72.79CloudflareCloudflare (AS13335) · US172.67.177.136CloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:b188CloudflareCloudflare (AS13335) · US2606:4700:3035::6815:484fCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxtutorial[.]comMail: MXSPFDMARC · checked 2026-10-19mail at _dc-mx.8e564ccd1743.robloxtutorial.com · DMARC policy none (monitor only) · sends via HostGator | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.2.252CloudflareCloudflare (AS13335) · US172.67.129.243CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:81f3CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:2fcCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxv[.]com[.]esMail: MXSPF · checked 2026-10-19mail at h-email.net (parking placeholder) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.247.81.99TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
act[.]robloxvictims[.]comMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.78.31CloudflareCloudflare (AS13335) · US172.67.215.96CloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:d760CloudflareCloudflare (AS13335) · US2606:4700:3036::6815:4e1fCloudflareCloudflare (AS13335) · USchecked 2026-10-19 11:00 UTC | 1 source · 1 record | Details |
17 registrable domains · 17 hostnames · page 1 of 1
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.