public company · US
Roblox Corp
- Primary official domain
- roblox.com
- Reviewed official domains
- 1 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
98
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
0
domains first source-reported within 30 days
First observed, 30 days
111
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Could not fully evaluate (sender-specific macros) · Mail: Receives mail (5 MX hosts) · checked 2026-10-19 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- roblox
- Label aliases
- roblox
- Official domains
- roblox.com (all)
- Generated spellings
- 95 tracked · 72 observed somewhere · 23 not observed (all)
- Can receive mail
- 32 spellings and 17 reported domains publish MX records · mail at h-email.net (parking placeholder) 9 · Namecheap forwarding (mail forwarding) 7 · Above.com parking (parking placeholder) 6 · 21 more (72 spellings and 98 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
robloxmail[.]comMail: SPF · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive52.200.172.207Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-200-172-207.compute-1.amazonaws.com52.73.254.56Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-73-254-56.compute-1.amazonaws.comchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxpayout[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.15.92CloudflareCloudflare (AS13335) · US172.67.205.171CloudflareCloudflare (AS13335) · US2606:4700:3036::ac43:cdabCloudflareCloudflare (AS13335) · US2606:4700:3037::6815:f5cCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxprofile[.]givesMail: SPF · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.42.12CloudflareCloudflare (AS13335) · US172.67.198.28CloudflareCloudflare (AS13335) · US2606:4700:3036::6815:2a0cCloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:c61cCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxr[.]com[.]esMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.67.182CloudflareCloudflare (AS13335) · US172.67.179.83CloudflareCloudflare (AS13335) · US2606:4700:3031::ac43:b353CloudflareCloudflare (AS13335) · US2606:4700:3034::6815:43b6CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
www[.]robloxrewards[.]storeMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive172.253.63.121GoogleGoogle (AS15169) · USbi-in-f121.1e100.net2607:f8b0:4004:c08::79GoogleGoogle (AS15169) · USbi-in-f121.1e100.netchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
www[.]robloxshirttemplate[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive31.43.160.6Amazon Web ServicesAmazon Web Services (AS16509) · USsites.framer.app31.43.161.6Amazon Web ServicesAmazon Web Services (AS16509) · USsites.framer.appchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxspain[.]comMail: MX · Confirmed phishing host address (DomainSpoof, 14 days)SPFDMARC · checked 2026-10-19mail at robloxspain.com · DMARC policy none (monitor only) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive176.123.0.199 · Confirmed phishing host address (DomainSpoof, 14 days)ALEXHOST (AS200019) · MDns8.alexhost.comchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxsupport[.]comMail: SPFDMARC · checked 2026-10-19DMARC policy reject | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive52.200.172.207Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-200-172-207.compute-1.amazonaws.com52.73.254.56Amazon Web ServicesAmazon Web Services (AS14618) · USec2-52-73-254-56.compute-1.amazonaws.comchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxt[.]com[.]esMail: MXSPF · checked 2026-10-19mail at h-email.net (parking placeholder) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.247.81.99TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxteammate[.]comMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.72.79CloudflareCloudflare (AS13335) · US172.67.177.136CloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:b188CloudflareCloudflare (AS13335) · US2606:4700:3035::6815:484fCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxtoolqwd[.]lolMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.70.86CloudflareCloudflare (AS13335) · US172.67.222.40CloudflareCloudflare (AS13335) · US2606:4700:3031::6815:4656CloudflareCloudflare (AS13335) · US2606:4700:3032::ac43:de28CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxtools[.]coMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive144.31.25.208 · Confirmed phishing host address (DomainSpoof, 14 days)KYONIX (AS210457) · GBchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxtutorial[.]comMail: MXSPFDMARC · checked 2026-10-19mail at _dc-mx.8e564ccd1743.robloxtutorial.com · DMARC policy none (monitor only) · sends via HostGator | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.2.252CloudflareCloudflare (AS13335) · US172.67.129.243CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:81f3CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:2fcCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxv[.]com[.]esMail: MXSPF · checked 2026-10-19mail at h-email.net (parking placeholder) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.247.81.99TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
act[.]robloxvictims[.]comMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.78.31CloudflareCloudflare (AS13335) · US172.67.215.96CloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:d760CloudflareCloudflare (AS13335) · US2606:4700:3036::6815:4e1fCloudflareCloudflare (AS13335) · USchecked 2026-10-19 11:00 UTC | 1 source · 1 record | Details |
robloxw[.]com[.]esMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.53.179.145 · Confirmed phishing host address (DomainSpoof, 14 days)TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxwin[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.75.132CloudflareCloudflare (AS13335) · US172.67.177.72CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:4b84CloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:b148CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxx[.]com[.]esMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.53.179.145 · Confirmed phishing host address (DomainSpoof, 14 days)TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
robloxy[.]com[.]esMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive185.53.179.145 · Confirmed phishing host address (DomainSpoof, 14 days)TEAMINTERNET-CA-AS (AS206834) · DEchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
www[.]rroblox[.]coMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive79.143.180.137 · Confirmed phishing host address (DomainSpoof, 14 days)ContaboContabo (AS51167) · DEvmd205679.contaboserver.netchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
theroblox[.]proMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.0.203CloudflareCloudflare (AS13335) · US172.67.128.67CloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:8043CloudflareCloudflare (AS13335) · US2606:4700:3036::6815:cbCloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
vwwv-roblox[.]coMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.61.29CloudflareCloudflare (AS13335) · US172.67.205.105CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:3d1dCloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:cd69CloudflareCloudflare (AS13335) · USchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
www[.]www--roblox[.]coMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive173.212.235.85 · Confirmed phishing host address (DomainSpoof, 14 days)ContaboContabo (AS51167) · DEvmi3337565.contaboserver.netchecked 2026-10-19 10:55 UTC | 1 source · 1 record | Details |
98 registrable domains · 101 hostnames · page 4 of 4← Previous
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.