public company · US

Roblox Corp

Primary official domain
roblox.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
98
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
111
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Could not fully evaluate (sender-specific macros) · Mail: Receives mail (5 MX hosts) · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
roblox
Label aliases
roblox
Official domains
roblox.com (all)
Generated spellings
95 tracked · 72 observed somewhere · 23 not observed (all)
Can receive mail
32 spellings and 17 reported domains publish MX records · mail at h-email.net (parking placeholder) 9 · Namecheap forwarding (mail forwarding) 7 · Above.com parking (parking placeholder) 6 · 21 more (72 spellings and 98 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
roblox[.]foMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.58.85CloudflareCloudflare (AS13335) · US172.67.158.99CloudflareCloudflare (AS13335) · US2606:4700:3031::6815:3a55CloudflareCloudflare (AS13335) · US2606:4700:3032::ac43:9e63CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
roblox[.]glMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive213.145.228.113DOMAINTECHNIK (AS25575) · AThost9.ssl-secured.euchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
roblox[.]grMail: SPF · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive52.200.172.207Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-200-172-207.compute-1.amazonaws.com52.73.254.56Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-73-254-56.compute-1.amazonaws.comchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
roblox[.]lyMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive202.170.75.201 · Emerging Threats open block listCHIARA-AS - Chiara Conti (AS219067) · ITchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
roblox[.]mqMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive202.170.75.200 · Emerging Threats open block listCHIARA-AS - Chiara Conti (AS219067) · ITchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
roblox[.]net[.]pkMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive202.170.75.200 · Emerging Threats open block listCHIARA-AS - Chiara Conti (AS219067) · ITchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
roblox[.]rwMail: MXSPFDMARC · checked 2026-10-19mail at mail.roblox.rw · DMARC policy none (monitor only)
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive179.43.182.61PLI-AS (AS51852) · PAapp.utlima.cls930246ksmfchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
roblox[.]tcMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxai[.]siteMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.158.133.1CloudflareCloudflare (AS13335) · USlovable-app-cd-1-4.p.l5e.iochecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxanimalhospitalplush[.]comMail: MXSPFDMARC · checked 2026-10-19mail at Purelymail (consumer mailbox) · DMARC policy reject · sends via Purelymail
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive43.112.118.34Alibaba CloudAlibaba Cloud (AS45102) · CNchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxbless[.]comMail: MXSPFDMARC · checked 2026-10-19mail at mail.robloxbless.com · DMARC policy quarantine
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive138.68.153.54DigitalOceanDigitalOcean (AS14061) · USchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxc[.]com[.]esMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.1.181CloudflareCloudflare (AS13335) · US172.67.129.177CloudflareCloudflare (AS13335) · US2606:4700:3033::ac43:81b1CloudflareCloudflare (AS13335) · US2606:4700:3035::6815:1b5CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
www[.]robloxclaimfirm[.]comMail: DMARC · checked 2026-10-19DMARC policy quarantine
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.18.34.21CloudflareCloudflare (AS13335) · US172.64.153.235CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxcommunity[.]comMail: SPF · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive52.200.172.207Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-200-172-207.compute-1.amazonaws.com52.73.254.56Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-73-254-56.compute-1.amazonaws.comchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxcorporation[.]comMail: SPF · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive52.200.172.207Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-200-172-207.compute-1.amazonaws.com52.73.254.56Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-73-254-56.compute-1.amazonaws.comchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxe[.]icuMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxextension[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.22.63CloudflareCloudflare (AS13335) · US172.67.203.76CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:163fCloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:cb4cCloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxf[.]com[.]esMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.53.179.145TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxfixator[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxfontgenerator[.]buzzMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxfree[.]comMail: SPF · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive52.200.172.207Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-200-172-207.compute-1.amazonaws.com52.73.254.56Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-73-254-56.compute-1.amazonaws.comchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxfund[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive80.97.160.221AVAHOHST (AS48753) · MDmail8.iwebgenics.comchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxgiftcardnest[.]comMail: MXSPF · checked 2026-10-19mail at Porkbun (web / mail hosting) · sends via Porkbun
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive207.207.210.107Amazon Web ServicesAmazon Web Services (AS16509) · US207.207.210.229Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxi[.]com[.]esMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.53.179.145TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
robloxing[.]orgMail: MXSPF · checked 2026-10-19mail at robloxing.org · sends via MailChannels
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive77.81.120.30KNOWNSRV (AS200514) · GBchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.