Roblox

Gaming United Statesroblox.comRank 20 of the most impersonated
Cert findings · 24 h
9
Cert findings · 7 days
37
8 reported or listed · 14 on phishing hosts · 15 on Spamhaus DROP
Registered lookalikes
228
20 listed by a source or an address list
Official domains
33
verified from Roblox's own sites and records

Certificate findings for Roblox

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to Roblox's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 50 findings, grouped by hostname

  1. www.roblox.et IT · AS219067 · CHIARA-AS Chiara Conti
    ReportedPhishing hostSpamhaus DROPUnder roblox.et, reported by PhishDestroy · Address hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.roblox.et
    First seen
    2026-11-05 06:05 UTC
    First published
    2026-11-05 06:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishTank: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 09:46 UTC
    DNS
    Resolves · checked 2026-11-05 06:34 UTC
    Reported
    PhishDestroy, listing roblox.et and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 202.170.75.201.
    1. Phishing-host list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.170.75.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 05:04 UTC to 2027-02-03 05:04 UTC
    Logged 2026-11-05 06:03 UTC in Google PlumbersArms2027h1, entry 621,155,081
    SHA-256 05c7c0a1355084b33435cba4ba0fd64a8f39e33fc36f085ab4800c371b6fefd6
    Public key SHA-256 f72d3cdd16d551fc531270b03c9c3a5cd34a3c498843bae30076be622ce4c466
    PhishDestroy
    Brand
    Roblox
    Addresses
    202.170.75.201 · Italy · AS219067 CHIARA-AS Chiara Conti
    Domain
    roblox.et
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:24 UTC

    Suggest a correction

  2. roblox.et IT · AS219067 · CHIARA-AS Chiara Conti
    ReportedPhishing hostSpamhaus DROPReported by PhishDestroy · Address hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    roblox.et
    First seen
    2026-11-05 06:05 UTC
    First published
    2026-11-05 06:25 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 06:34 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 202.170.75.201.
    1. Phishing-host list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.170.75.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-11-05 05:04 UTC to 2027-02-03 05:04 UTC
    Logged 2026-11-05 06:03 UTC in Google PlumbersArms2027h1, entry 621,155,081
    SHA-256 05c7c0a1355084b33435cba4ba0fd64a8f39e33fc36f085ab4800c371b6fefd6
    Public key SHA-256 f72d3cdd16d551fc531270b03c9c3a5cd34a3c498843bae30076be622ce4c466
    PhishDestroy
    Brand
    Roblox
    Addresses
    202.170.75.201 · Italy · AS219067 CHIARA-AS Chiara Conti
    Domain
    roblox.et
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:24 UTC

    Suggest a correction

  3. executors-roblox.info GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    executors-roblox.info
    First seen
    2026-11-04 15:42 UTC
    First published
    2026-11-04 16:54 UTC
    DNS
    Resolves · checked 2026-11-04 17:06 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 62.60.226.59.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 62.60.226.59
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-04 14:40 UTC to 2027-02-02 14:40 UTC
    Logged 2026-11-04 15:39 UTC in Let's Encrypt Willow2027h1, entry 934,524,934
    SHA-256 19b308f71c5358cf69d9febc16ae011e8fcb1a5ce65b81fda00ed65abb990265
    Public key SHA-256 e803024a0e13082b57205e2538a75c7c106f3ee513fae6bd372b4207f8384943
    Brand
    Roblox
    Addresses
    62.60.226.59 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    executors-roblox.info
    Registered
    2026-11-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 05:02 UTC

    Suggest a correction

  4. executors-roblox.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    executors-roblox.com
    First seen
    2026-11-04 15:38 UTC
    First published
    2026-11-04 16:54 UTC
    DNS
    Resolves · checked 2026-11-04 17:06 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 62.60.226.59.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 62.60.226.59
    4. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-11-04 14:36 UTC to 2027-02-02 14:36 UTC
    Logged 2026-11-04 15:35 UTC in Let's Encrypt Willow2027h1, entry 934,472,822
    SHA-256 3f8eb860e423b98f255b99935c366e0a56760a9260788facb0fe3d0227dc5cf4
    Public key SHA-256 23b3d2100818da202e34ae1c963c5fc159bffaf84ba2b3d4b00bfc0a0e7a1cd2
    Brand
    Roblox
    Addresses
    62.60.226.59 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    executors-roblox.com
    Registered
    2026-11-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 16:55 UTC

    Suggest a correction

  5. www--roblox.co DE · AS51167 · CONTABO Contabo GmbH
    Phishing hostContaboAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www--roblox.co
    First seen
    2026-11-04 02:27 UTC
    First published
    2026-11-04 03:04 UTC
    DNS
    Resolves · checked 2026-11-05 03:17 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 173.212.235.85.
    1. Certificate logged in CT
    2. Phishing-host list fetched with the address
    3. Resolved to 173.212.235.85
    4. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 01:25 UTC to 2027-02-02 01:25 UTC
    Logged 2026-11-04 02:23 UTC in IPng Networks Halloumi2027h1, entry 355,880,272
    SHA-256 2108d875c97fc482f810ab4ab729cbf53659b8b0f04ccbeeebd5981cfcb68b2a
    Public key SHA-256 74892c29af11819eebf9cb3ba431dc18171b07256d369ebde5d24fd7e1711992
    Brand
    Roblox
    Addresses
    173.212.235.85 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (173.212.235.85): a cloud provider. It rents servers and addresses to its customers.
    Domain
    www--roblox.co
    Registered
    2026-04-05 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  6. www.www--roblox.co DE · AS51167 · CONTABO Contabo GmbH
    ReportedPhishing hostContaboReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    www.www--roblox.co
    First seen
    2026-11-04 02:26 UTC
    First published
    2026-11-04 03:04 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 03:17 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 173.212.235.85.
    1. Phishing-host list fetched with the address
    2. Resolved to 173.212.235.85
    3. Latest DNS check
    Certificate
    Issued by YR1 · precertificate
    Valid 2026-11-04 01:25 UTC to 2027-02-02 01:25 UTC
    Logged 2026-11-04 02:23 UTC in IPng Networks Halloumi2027h1, entry 355,880,272
    SHA-256 2108d875c97fc482f810ab4ab729cbf53659b8b0f04ccbeeebd5981cfcb68b2a
    Public key SHA-256 74892c29af11819eebf9cb3ba431dc18171b07256d369ebde5d24fd7e1711992
    PhishDestroy
    Brand
    Roblox
    Addresses
    173.212.235.85 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (173.212.235.85): a cloud provider. It rents servers and addresses to its customers.
    Domain
    www--roblox.co
    Registered
    2026-04-05 · Gname.com Pte. Ltd.
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 03:07 UTC

    Suggest a correction

  7. wwww-roblox.co DE · AS51167 · CONTABO Contabo GmbH
    Phishing hostContaboAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    wwww-roblox.co
    First seen
    2026-11-03 09:25 UTC
    First published
    2026-11-03 09:58 UTC
    DNS
    Resolves · checked 2026-11-05 10:02 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 173.212.235.85.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 173.212.235.85
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-03 00:00 UTC to 2027-01-15 08:59 UTC
    Logged 2026-11-03 09:19 UTC in Let's Encrypt Sycamore2027h1, entry 918,870,947
    SHA-256 1753320f35af64a30155786bc01c0ad9b25e1bd12977101077eb3d64534af8fd
    Public key SHA-256 2ad29ef3d0c36da3ef393c3d81f1b71625eae3908a8e8f9f66e229cb3522bfc2
    Brand
    Roblox
    Addresses
    173.212.235.85 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (173.212.235.85): a cloud provider. It rents servers and addresses to its customers.
    Domain
    wwww-roblox.co
    Registered
    2026-03-28 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 09:59 UTC

    Suggest a correction

  8. httpss--roblox.co US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 5 mo ago
    DetailsHide
    Hostname
    httpss--roblox.co
    First seen
    2026-11-03 07:56 UTC
    First published
    2026-11-03 08:50 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-03 00:00 UTC to 2027-01-23 18:37 UTC
    Logged 2026-11-03 07:55 UTC in DigiCert Sphinx2027h1, entry 339,774,063
    SHA-256 1e09b6d56585ec50bf795e59e00f7c8d0072abc42d49b77e590c78db4c76093c
    Public key SHA-256 416ff3e541ac9059b8274b9a82fcd0c4ec036f28062fb4223e97cda22a6192f2
    PhishDestroy
    Brand
    Roblox
    Addresses
    104.21.82.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.151.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:5218
    2606:4700:3037::ac43:975c
    Cloudflare
    Cloudflare (104.21.82.24, 172.67.151.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    httpss--roblox.co
    Registered
    2026-05-31 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:54 UTC

    Suggest a correction

  9. www.roblox.fo US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder roblox.fo, reported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    www.roblox.fo
    First seen
    2026-11-02 22:21 UTC
    First published
    2026-11-02 23:02 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 23:12 UTC
    Reported
    PhishDestroy, listing roblox.fo and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-02 21:18 UTC to 2027-01-31 21:18 UTC
    Logged 2026-11-02 22:16 UTC in Let's Encrypt Sycamore2027h1, entry 910,886,495
    SHA-256 086bc071364b65bd2a39fbd304fba9a54a55c180f5f8d14cf792046efd176913
    Public key SHA-256 c842feda835dce1ed96260dcc697b2978c5dae16a70199c91e6a43580d2a3bc7
    PhishDestroy
    Brand
    Roblox
    Addresses
    104.21.58.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3a55
    2606:4700:3032::ac43:9e63
    Cloudflare
    Cloudflare (104.21.58.85, 172.67.158.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roblox.fo
    Registered
    2026-05-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  10. roblox.com.et IT · AS219067 · CHIARA-AS Chiara Conti
    ReportedPhishing hostSpamhaus DROPReported by PhishDestroy · Address hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    roblox.com.et
    First seen
    2026-11-02 18:26 UTC
    First published
    2026-11-02 19:02 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 19:08 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 202.170.75.201.
    1. Phishing-host list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.170.75.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36
    Valid 2026-11-02 00:00 UTC to 2027-01-19 07:57 UTC
    Logged 2026-11-02 18:21 UTC in Let's Encrypt Sycamore2027h1, entry 908,055,433
    SHA-256 413547f741add7f6ce8c3c22c2bea5b3845b6ade3df0662070a75aa26f4f858a
    Public key SHA-256 3c2b14681a9896c72d3cc07301d51cd712f562b3174f65fce9b933ad850963e5
    PhishDestroy
    Brand
    Roblox
    Addresses
    202.170.75.201 · Italy · AS219067 CHIARA-AS Chiara Conti
    Domain
    roblox.com.et
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:59 UTC

    Suggest a correction

  11. www.roblox-hack.ru RU · AS210079 · EUROBYTE EuroByte LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    www.roblox-hack.ru
    First seen
    2026-11-02 00:50 UTC
    First published
    2026-11-02 01:04 UTC
    DNS
    Resolves · checked 2026-11-05 01:09 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.154.55.4.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.154.55.4
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 23:51 UTC to 2027-01-30 23:51 UTC
    Logged 2026-11-02 00:49 UTC in Let's Encrypt Sycamore2027h1, entry 895,086,264
    SHA-256 16c19ece416f64db0e7d4d87a7f0cae92ea8fc7f793efcf8c4e3d9b37bf82f20
    Public key SHA-256 fb130d72394bd066784401b98951bc01dcb519f316324b82b086deabe46c6694
    Brand
    Roblox
    Addresses
    185.154.55.4 · Russia · AS210079 EUROBYTE EuroByte LLC
    Domain
    roblox-hack.ru
    MX
    Receives mail at mail.roblox-hack.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  12. roblox-hack.ru RU · AS210079 · EUROBYTE EuroByte LLC
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX presentSPF ~allDMARC missing
    DetailsHide
    Hostname
    roblox-hack.ru
    First seen
    2026-11-02 00:50 UTC
    First published
    2026-11-02 01:04 UTC
    DNS
    Resolves · checked 2026-11-05 01:09 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 185.154.55.4.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 185.154.55.4
    4. Latest DNS check
    Certificate
    Issued by YR2 · precertificate
    Valid 2026-11-01 23:51 UTC to 2027-01-30 23:51 UTC
    Logged 2026-11-02 00:49 UTC in Let's Encrypt Sycamore2027h1, entry 895,086,264
    SHA-256 16c19ece416f64db0e7d4d87a7f0cae92ea8fc7f793efcf8c4e3d9b37bf82f20
    Public key SHA-256 fb130d72394bd066784401b98951bc01dcb519f316324b82b086deabe46c6694
    Brand
    Roblox
    Addresses
    185.154.55.4 · Russia · AS210079 EUROBYTE EuroByte LLC
    Domain
    roblox-hack.ru
    MX
    Receives mail at mail.roblox-hack.ru
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  13. www.trendforge-roblox.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 4 d ago
    DetailsHide
    Hostname
    www.trendforge-roblox.com
    First seen
    2026-11-01 16:37 UTC
    First published
    2026-11-01 16:55 UTC
    DNS
    Resolves · checked 2026-11-04 17:07 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.91.236.255.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.91.236.255
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-01 15:33 UTC to 2027-01-30 15:33 UTC
    Logged 2026-11-01 16:32 UTC in Geomys Tuscolo2027h1, entry 434,454,933
    SHA-256 4f567473ec12c87b496be26837151a2c7be54d93fd866a90e5bdc1ec7553352c
    Public key SHA-256 da298e64958e9f98bde68f67d5c8b0bed6f7f1dc6dd61d701ad14ccf07df2417
    Brand
    Roblox
    Addresses
    51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
    Domain
    trendforge-roblox.com
    Registered
    2026-11-01 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  14. trendforge-roblox.com FR · AS16276 · OVH OVH SAS
    Phishing hostOVHAddress hosted confirmed phishing in the last 48 hMX presentSPF -allDMARC missingRegistered 4 d ago
    DetailsHide
    Hostname
    trendforge-roblox.com
    First seen
    2026-11-01 16:37 UTC
    First published
    2026-11-01 16:55 UTC
    DNS
    Resolves · checked 2026-11-04 17:07 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 51.91.236.255.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 51.91.236.255
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 15:33 UTC to 2027-01-30 15:33 UTC
    Logged 2026-11-01 16:32 UTC in Google PlumbersArms2027h1, entry 558,436,595
    SHA-256 1a05725d2c5434ec8196055ae8821059203b9155201af79aeb9de6985d5d2a94
    Public key SHA-256 8e3b0ba3bed865078943579a5f4412af48a1fcca9b7662410d15fabf759fd39a
    Brand
    Roblox
    Addresses
    51.91.236.255 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.91.236.255): a cloud provider. It rents servers and addresses to its customers.
    Domain
    trendforge-roblox.com
    Registered
    2026-11-01 · OVH sas
    MX
    Receives mail at mx1.mail.ovh.net, mx2.mail.ovh.net, mx3.mail.ovh.net
    SPF
    SPF record with -all: other senders fail
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 18:19 UTC

    Suggest a correction

  15. roblox-expl.info GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide
    Hostname
    roblox-expl.info
    First seen
    2026-11-01 12:06 UTC
    First published
    2026-11-01 13:04 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-04 13:09 UTC
    Checks
    Overdue since 2026-11-03 13:09 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 62.60.226.59.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 62.60.226.59
    Certificate
    Issued by YE2
    Valid 2026-11-01 11:06 UTC to 2027-01-30 11:06 UTC
    Logged 2026-11-01 12:04 UTC in Google PlumbersArms2027h1, entry 555,498,544
    SHA-256 63d0f110f58fd56fb2d56a48de234aff845a0c531f12142841c573aa53883797
    Public key SHA-256 f841e07ac5e5bc83c51f90c986050098757e4f944d4537794892c771340f804c
    Brand
    Roblox
    Addresses
    62.60.226.59 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    roblox-expl.info
    Registered
    2026-11-01 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  16. roblox-porn.com US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF -allDMARC rejectRegistered 3 y ago
    DetailsHide
    Hostname
    roblox-porn.com
    First seen
    2026-11-01 02:57 UTC
    First published
    2026-11-01 03:57 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 04:01 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-11-01 01:55 UTC to 2027-01-30 01:55 UTC
    Logged 2026-11-01 02:54 UTC in Google PlumbersArms2027h1, entry 549,718,382
    SHA-256 52a2d7860dcfeb18a0c50d75889e76c740a630950e988448621589b984a2c65c
    Public key SHA-256 d9952a98f2edd928798aa388b1b8d4af18d64fd004b7e7dc5c6090f1a4393ae6
    PhishDestroy
    Brand
    Roblox
    Addresses
    104.21.2.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:80e5
    2606:4700:3037::6815:24d
    Cloudflare
    Cloudflare (104.21.2.77, 172.67.128.229): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roblox-porn.com
    Registered
    2023-10-25 · Porkbun LLC
    MX
    Publishes no mail exchanger
    SPF
    SPF record with -all: other senders fail
    DMARC
    DMARC policy p=reject
    Checked
    2026-11-05 05:03 UTC

    Suggest a correction

  17. roblox-expl.com GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 4 d ago
    DetailsHide
    Hostname
    roblox-expl.com
    First seen
    2026-11-01 00:30 UTC
    First published
    2026-11-01 01:02 UTC
    DNS
    Not resolving since 2026-11-04 · checked 2026-11-05 01:11 UTC
    Checks
    Overdue since 2026-11-04 01:10 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 62.60.226.59.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 62.60.226.59
    Certificate
    Issued by YE1
    Valid 2026-10-31 23:29 UTC to 2027-01-29 23:29 UTC
    Logged 2026-11-01 00:28 UTC in Google ParcelYard2027h1, entry 547,446,015
    SHA-256 6ef0ebae935aa1400fe5a416c813d570da0d096cd21984b972daf51d59836fb5
    Public key SHA-256 85e11ae821c003fcc3ff8667260896d8b8686fa4751e786dd4c5cddc9d787299
    Brand
    Roblox
    Addresses
    62.60.226.59 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    roblox-expl.com
    Registered
    2026-11-01 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  18. help.roblox.testing-stand.online GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    help.roblox.testing-stand.online
    First seen
    2026-10-31 08:31 UTC
    First published
    2026-10-31 09:25 UTC
    DNS
    Resolves · checked 2026-11-05 09:35 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 196.251.122.144.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 196.251.122.144
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 07:31 UTC to 2027-01-29 07:31 UTC
    Logged 2026-10-31 08:29 UTC in Google PlumbersArms2027h1, entry 536,613,506
    SHA-256 161d7a4565a628316be469e8b03aa9095d25372777aad90dfc29f8f2a5d9bdf0
    Public key SHA-256 45b6071a38e85edfec0b7a0abe42774e4509da8aaeebff81dbe879476de69855
    Brand
    Roblox
    Addresses
    196.251.122.144 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    testing-stand.online
    Registered
    2026-10-01 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  19. en.help.roblox.testing-stand.online GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    en.help.roblox.testing-stand.online
    First seen
    2026-10-31 08:31 UTC
    First published
    2026-10-31 09:25 UTC
    DNS
    Resolves · checked 2026-11-05 09:35 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 196.251.122.144.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 196.251.122.144
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 07:31 UTC to 2027-01-29 07:31 UTC
    Logged 2026-10-31 08:29 UTC in Google PlumbersArms2027h1, entry 536,613,506
    SHA-256 161d7a4565a628316be469e8b03aa9095d25372777aad90dfc29f8f2a5d9bdf0
    Public key SHA-256 45b6071a38e85edfec0b7a0abe42774e4509da8aaeebff81dbe879476de69855
    Brand
    Roblox
    Addresses
    196.251.122.144 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    testing-stand.online
    Registered
    2026-10-01 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  20. auth.roblox.testing-stand.online GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 35 d ago
    DetailsHide
    Hostname
    auth.roblox.testing-stand.online
    First seen
    2026-10-31 08:31 UTC
    First published
    2026-10-31 09:25 UTC
    DNS
    Resolves · checked 2026-11-05 09:35 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 196.251.122.144.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 196.251.122.144
    4. Latest DNS check
    Certificate
    Issued by YR1
    Valid 2026-10-31 07:31 UTC to 2027-01-29 07:31 UTC
    Logged 2026-10-31 08:29 UTC in Google PlumbersArms2027h1, entry 536,613,506
    SHA-256 161d7a4565a628316be469e8b03aa9095d25372777aad90dfc29f8f2a5d9bdf0
    Public key SHA-256 45b6071a38e85edfec0b7a0abe42774e4509da8aaeebff81dbe879476de69855
    Brand
    Roblox
    Addresses
    196.251.122.144 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    testing-stand.online
    Registered
    2026-10-01 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 11:04 UTC

    Suggest a correction

  21. lhttps-roblox.co DE · AS51167 · CONTABO Contabo GmbH
    Phishing hostContaboAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 7 mo ago
    DetailsHide
    Hostname
    lhttps-roblox.co
    First seen
    2026-10-31 08:16 UTC
    First published
    2026-10-31 08:21 UTC
    DNS
    Resolves · checked 2026-11-05 08:32 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 79.143.180.137.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 79.143.180.137
    4. Latest DNS check
    Certificate
    Issued by Sectigo Public Server Authentication CA DV E36 · precertificate
    Valid 2026-10-31 00:00 UTC to 2027-01-15 10:52 UTC
    Logged 2026-10-31 08:14 UTC in IPng Networks Gouda2027h1, entry 276,651,263
    SHA-256 8a3c633cd5a5f9e8d9f1b0e8f14e61b3411d1a8b9d7ab085caffbab7f45b1ca3
    Public key SHA-256 bd89aed3468e11ea342cc9154bb7d9aa2c5d99995c2238b16521456579bb8d10
    Brand
    Roblox
    Addresses
    79.143.180.137 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (79.143.180.137): a cloud provider. It rents servers and addresses to its customers.
    Domain
    lhttps-roblox.co
    Registered
    2026-03-30 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 10:04 UTC

    Suggest a correction

  22. roblox.com.bz IT · AS219067 · CHIARA-AS Chiara Conti
    ReportedPhishing hostSpamhaus DROPReported by PhishDestroy · Address hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    roblox.com.bz
    First seen
    2026-10-30 21:15 UTC
    First published
    2026-10-30 21:47 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 21:58 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 202.170.75.200.
    1. Phishing-host list fetched with the address
    2. Resolved to 202.170.75.200
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.170.75.200.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 202.170.75.200
    3. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-30 20:16 UTC to 2027-01-28 20:16 UTC
    Logged 2026-10-30 21:14 UTC in Google ParcelYard2027h1, entry 528,769,301
    SHA-256 75bd74bd40e94db3c7b774bdf2b6a00f2c06956d03d64528574d938c2ab512cd
    Public key SHA-256 6ce8ddc15dad4764e754e860abd9af71421ddaf27f060cab5bfdca7e76ce1ad0
    PhishDestroy
    Brand
    Roblox
    Addresses
    202.170.75.200 · Italy · AS219067 CHIARA-AS Chiara Conti
    Domain
    roblox.com.bz
    Registered
    2026-05-08 · University Management Limited
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  23. roblox.uk.com IT · AS219067 · CHIARA-AS Chiara Conti
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROP
    DetailsHide
    Hostname
    roblox.uk.com
    First seen
    2026-10-30 17:41 UTC
    First published
    2026-10-30 18:07 UTC
    DNS
    Not resolving since 2026-11-03 · checked 2026-11-04 18:13 UTC
    Checks
    Overdue since 2026-11-03 18:13 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 202.170.75.200.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 202.170.75.200
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.170.75.200.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 202.170.75.200
    Certificate
    Issued by YR1
    Valid 2026-10-30 16:41 UTC to 2027-01-28 16:41 UTC
    Logged 2026-10-30 17:40 UTC in Google ParcelYard2027h1, entry 526,224,077
    SHA-256 b038aae5d3a65d3f9dc3feff12d2c1fce2066443d2e4e71d948bfde2656f5369
    Public key SHA-256 cc31bd5e8cdd1d3ffac0a8a8260eabbd9175cd39f0aced0cf628d4de8d154eaa
    Brand
    Roblox
    Addresses
    202.170.75.200 · Italy · AS219067 CHIARA-AS Chiara Conti

    Suggest a correction

  24. help.roblox.test1709.icu GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 49 d ago
    DetailsHide
    Hostname
    help.roblox.test1709.icu
    First seen
    2026-10-30 12:47 UTC
    First published
    2026-10-30 12:50 UTC
    DNS
    Resolves · checked 2026-11-04 13:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 192.162.199.164.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.162.199.164
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 11:45 UTC to 2027-01-28 11:45 UTC
    Logged 2026-10-30 12:43 UTC in Google PlumbersArms2027h1, entry 523,264,744
    SHA-256 1b77d8997c5ad77d6c2850a889666702014bdd24357cd9edd84741f0a34832a2
    Public key SHA-256 19a72c93ef8903a1032a1e614f469f51245f72f86db0622c312379691a68ac0c
    Brand
    Roblox
    Addresses
    192.162.199.164 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    test1709.icu
    Registered
    2026-09-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  25. en.help.roblox.test1709.icu GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 49 d ago
    DetailsHide
    Hostname
    en.help.roblox.test1709.icu
    First seen
    2026-10-30 12:47 UTC
    First published
    2026-10-30 12:50 UTC
    DNS
    Resolves · checked 2026-11-04 13:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 192.162.199.164.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.162.199.164
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 11:45 UTC to 2027-01-28 11:45 UTC
    Logged 2026-10-30 12:43 UTC in Google PlumbersArms2027h1, entry 523,264,744
    SHA-256 1b77d8997c5ad77d6c2850a889666702014bdd24357cd9edd84741f0a34832a2
    Public key SHA-256 19a72c93ef8903a1032a1e614f469f51245f72f86db0622c312379691a68ac0c
    Brand
    Roblox
    Addresses
    192.162.199.164 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    test1709.icu
    Registered
    2026-09-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  26. auth.roblox.test1709.icu GB · AS214351 · FEMOIT FEMO IT SOLUTIONS LI…
    Spamhaus DROPAddress listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 49 d ago
    DetailsHide
    Hostname
    auth.roblox.test1709.icu
    First seen
    2026-10-30 12:46 UTC
    First published
    2026-10-30 12:50 UTC
    DNS
    Resolves · checked 2026-11-04 13:02 UTC
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 192.162.199.164.
    1. Spamhaus DROP list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 192.162.199.164
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 11:45 UTC to 2027-01-28 11:45 UTC
    Logged 2026-10-30 12:43 UTC in Google PlumbersArms2027h1, entry 523,264,744
    SHA-256 1b77d8997c5ad77d6c2850a889666702014bdd24357cd9edd84741f0a34832a2
    Public key SHA-256 19a72c93ef8903a1032a1e614f469f51245f72f86db0622c312379691a68ac0c
    Brand
    Roblox
    Addresses
    192.162.199.164 · United Kingdom · AS214351 FEMOIT FEMO IT SOLUTIONS LIMITED
    Domain
    test1709.icu
    Registered
    2026-09-17 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  27. roblox.speak.careers US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareUnder speak.careers, reported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 5 y ago
    DetailsHide
    Hostname
    roblox.speak.careers
    First seen
    2026-10-28 20:46 UTC
    First published
    2026-10-28 21:24 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 21:31 UTC
    Reported
    PhishDestroy, listing speak.careers and the names under it
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WR1 · precertificate
    Valid 2026-10-28 19:45 UTC to 2027-01-26 20:44 UTC
    Logged 2026-10-28 20:45 UTC in Geomys Tuscolo2027h1, entry 386,521,165
    SHA-256 e55c0c31f0694722e83817ea8193c6310ec10605b2842a70ae3f2ff0de6a6b3d
    Public key SHA-256 c908dba7d2871d6a8fcaa92b4e3574c435744e15542ea725d3fa3bd2272baad9
    PhishDestroy
    Brand
    Roblox
    Addresses
    104.18.39.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.64.148.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:440b::6812:278d
    2606:4700:440d::ac40:9473
    Cloudflare
    Cloudflare (104.18.39.141, 172.64.148.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    speak.careers
    Registered
    2021-08-04 · NameCheap, Inc.
    MX
    Receives mail at aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 01:42 UTC

    Suggest a correction

  28. roblox.com.bi US · AS53667 · FranTech Solutions2 addresses
    ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    roblox.com.bi
    First seen
    2026-10-28 10:15 UTC
    First published
    2026-10-28 11:02 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:08 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 45.61.188.96.
    1. Phishing-host list fetched with the address
    2. Resolved to 45.61.188.96
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-10-28 09:16 UTC to 2027-01-26 09:16 UTC
    Logged 2026-10-28 10:14 UTC in DigiCert Sphinx2027h1, entry 293,357,160
    SHA-256 28a47aefdee11d0936b3215ab07146731aa5644c837b8e9aebaa8b49f95d9a6a
    Public key SHA-256 8701e05252d0e828e371e778d6ec8bc1873153179d3acbfb83a601a121228d29
    PhishDestroy
    Brand
    Roblox
    Addresses
    45.61.188.96 · United States · AS53667 PONYNET - FranTech Solutions
    198.251.82.252 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    roblox.com.bi
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 14:35 UTC

    Suggest a correction

  29. roblox.com.gr US · AS53667 · FranTech Solutions
    ReportedPhishing hostReported by PhishDestroy · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    roblox.com.gr
    First seen
    2026-10-28 08:11 UTC
    First published
    2026-10-28 08:43 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 198.251.82.252.
    1. Phishing-host list fetched with the address
    2. Resolved to 198.251.82.252
    3. Latest DNS check
    Certificate
    Issued by YE1 · precertificate
    Valid 2026-10-28 07:09 UTC to 2027-01-26 07:09 UTC
    Logged 2026-10-28 08:08 UTC in Geomys Tuscolo2027h1, entry 379,783,125
    SHA-256 765c67c49f18d5e16da7c36ebb67192767ff2f66484df02b25c030bbd8c5eb2a
    Public key SHA-256 843f1ad35012b0ceaadaa4febb1a653122a7bf61811a22f3f42fd1757339e563
    PhishDestroy
    Brand
    Roblox
    Addresses
    198.251.82.252 · United States · AS53667 PONYNET - FranTech Solutions
    Domain
    roblox.com.gr
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 13:27 UTC

    Suggest a correction

  30. roblox.fo US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX absentSPF missingDMARC missingRegistered 6 mo ago
    DetailsHide
    Hostname
    roblox.fo
    First seen
    2026-10-27 22:31 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 09:05 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1
    Valid 2026-10-25 14:16 UTC to 2027-01-23 15:15 UTC
    Logged 2026-10-27 22:26 UTC in IPng Networks Gouda2027h1, entry 241,636,775
    SHA-256 f962d94300ba177c6e4d94fdeaf9931cf0e4b96e8b7764ee28c93f36efe62108
    Public key SHA-256 b0323c8ca3d9520897499a1fc7bd1359184c8190ddf8a58501aea6e615d8508a
    PhishDestroy
    Brand
    Roblox
    Addresses
    104.21.58.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.158.99 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3a55
    2606:4700:3032::ac43:9e63
    Cloudflare
    Cloudflare (104.21.58.85, 172.67.158.99): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roblox.fo
    Registered
    2026-05-16 · Dynadot Inc
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  31. www.rbxcdn.ru RU · AS197695 · AS-REGRU "Domain names regi…
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.rbxcdn.ru
    First seen
    2026-10-27 15:43 UTC
    DNS
    Resolves · checked 2026-11-05 09:01 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 95.163.244.138.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 95.163.244.138
    4. Latest DNS check
    Certificate
    Issued by YR2
    Valid 2026-10-27 14:39 UTC to 2027-01-25 14:39 UTC
    Logged 2026-10-27 15:38 UTC in Google PlumbersArms2027h1, entry 474,234,681
    SHA-256 0bc5c108f45aedc052fa0ce74c1944d66601d36f02b5222639f0397b393bd2aa
    Public key SHA-256 e84b98b8f486d1014d1f2b70531204581694ccc766627ffaddc1754c66ceaa3a
    Brand
    Roblox
    Addresses
    95.163.244.138 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
    Domain
    rbxcdn.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:32 UTC

    Suggest a correction

  32. www.roblox.com.ss IT · AS219067 · CHIARA-AS Chiara Conti
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 25 d ago
    DetailsHide
    Hostname
    www.roblox.com.ss
    First seen
    2026-10-26 14:42 UTC
    DNS
    Resolves · checked 2026-11-05 09:06 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 202.170.75.201.
    1. Phishing-host list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.170.75.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Certificate
    Logged in IPng Networks Halloumi2027h1, entry 270,178,526
    SHA-256 5e76e2d174738af1319675793b6379e31e8e01012beb10327ce4d2e4cb256eb8
    Brand
    Roblox
    Addresses
    202.170.75.201 · Italy · AS219067 CHIARA-AS Chiara Conti
    Domain
    roblox.com.ss
    Registered
    2026-10-11 · Afriregister South Sudan
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  33. roblox.com.ss IT · AS219067 · CHIARA-AS Chiara Conti
    Phishing hostSpamhaus DROPAddress hosted confirmed phishing in the last 48 h · Address listed by Spamhaus DROPMX absentSPF missingDMARC missingRegistered 25 d ago
    DetailsHide
    Hostname
    roblox.com.ss
    First seen
    2026-10-26 14:41 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 202.170.75.201.
    1. Phishing-host list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Spamhaus DROP
    A brand lookalike resolving to an address on the Spamhaus Don’t Route Or Peer list. Address 202.170.75.201.
    1. Spamhaus DROP list fetched with the address
    2. Resolved to 202.170.75.201
    3. Latest DNS check
    Certificate
    Logged in IPng Networks Halloumi2027h1, entry 270,178,526
    SHA-256 5e76e2d174738af1319675793b6379e31e8e01012beb10327ce4d2e4cb256eb8
    Brand
    Roblox
    Addresses
    202.170.75.201 · Italy · AS219067 CHIARA-AS Chiara Conti
    Domain
    roblox.com.ss
    Registered
    2026-10-11 · Afriregister South Sudan
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  34. www.roblox.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    www.roblox.ru
    First seen
    2026-10-26 02:42 UTC
    DNS
    Resolves · checked 2026-11-05 09:00 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Resolved to 188.246.224.242
    3. Latest DNS check
    Certificate
    Logged in DigiCert Wyvern2027h1, entry 312,963,434
    SHA-256 9fa52f48f9f81af15b6249af6266580cd162e5e1f7d62656d008deb70567db93
    Brand
    Roblox
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    roblox.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  35. roblox.ru RU · AS49505 · SELECTEL JSC Selectel
    Phishing hostAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missing
    DetailsHide
    Hostname
    roblox.ru
    First seen
    2026-10-26 02:42 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 188.246.224.242.
    1. Phishing-host list fetched with the address
    2. Resolved to 188.246.224.242
    3. Latest DNS check
    Certificate
    Logged in DigiCert Wyvern2027h1, entry 312,963,434
    SHA-256 9fa52f48f9f81af15b6249af6266580cd162e5e1f7d62656d008deb70567db93
    Brand
    Roblox
    Addresses
    188.246.224.242 · Russia · AS49505 SELECTEL JSC Selectel
    Domain
    roblox.ru
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

  36. roblox.cloud US · AS13335 · Cloudflare, Inc.4 addresses
    ReportedCloudflareReported by PhishDestroyMX presentSPF ~allDMARC policy noneRegistered 8 mo ago
    DetailsHide
    Hostname
    roblox.cloud
    First seen
    2026-10-26 00:05 UTC
    Listing
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 08:59 UTC
    Reported
    PhishDestroy
    1. Observed in the PhishDestroy feed
    2. We matched the new listing
    3. Latest DNS check
    PhishDestroy
    Brand
    Roblox
    Addresses
    104.21.40.109 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.188 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:286d
    2606:4700:3032::ac43:96bc
    Cloudflare
    Cloudflare (104.21.40.109, 172.67.150.188): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    roblox.cloud
    Registered
    2026-03-03 · NAMECHEAP
    MX
    Receives mail at route3.mx.cloudflare.net, route1.mx.cloudflare.net, route2.mx.cloudflare.net
    SPF
    SPF record with ~all: other senders soft-fail
    DMARC
    DMARC policy p=none: reports only
    Checked
    2026-11-05 08:23 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches Roblox when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Gaming

All brands →