https-www--roblox.co
“Roblox”
Evidence Summary
The domain https-www--roblox.co has been identified as a brand impersonation threat, specifically targeting the brand Roblox. Evidence supports that this domain seeks to mislead users by mimicking the legitimate Roblox platform, potentially leading to credential theft or other forms of user exploitation.
Technical indicators for https-www--roblox.co include a VirusTotal detection score of 7 out of 95 security vendors, indicating that a small but significant number of systems recognize this threat. The domain was created on July 02, 2026, and is registered through DYNADOT LLC. It resolves to the IP address 104.21.76.144 and is currently active. The Google Trust Services SSL certificate associated with this domain does not lend credibility, as it is often misused in phishing schemes. As of now, it has been flagged on multiple blocklists, indicating an ongoing risk to users and organizations alike.
The current status of https-www--roblox.co remains active, with no reported proactive response actions taken to take it down. The domain continues to pose a high-risk threat in terms of brand impersonation, as users may unknowingly provide sensitive information. To mitigate risk, users are advised to remain vigilant when interacting with websites that resemble established brands, and organizations should consider implementing stringent monitoring and reporting measures against such impersonation attempts.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | https-www--roblox.co |
malicious | Sinkholed |
| OpenDNS | https-www--roblox.co |
phishing | Phishing Block |
| Hagezi Threat Feed | https-www--roblox.co |
malicious | Sinkholed |
| DNS4EU | https-www--roblox.co |
malicious | Sinkholed |
Detection timeline
-
Domain status
Reachable → Unreachable
Threat Response Pipeline
Public Blocklist Status
Submitted Evidence Snapshot
- Sent
- Ledger records
- 1
- Case ID
PD-20260712-9DC963- Captured page title
- ValeryxQueen - Roblox
Blocklist coverage
11 monitored external feeds · stored snapshot Sep 9, 2026
Technologies · 6 identified
Envoy is an open-source edge and service proxy, designed for cloud-native applications.
www.envoyproxy.io 100% confidenceAmazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 100% confidenceAngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.
angularjs.org 100% confidenceHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% confidenceAmazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.
aws.amazon.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of https-www--roblox.co · checked Jul 10, 2026
Technologies
6 high-confidence technologies identified
Evidence & External Reports
PD-20260712-9DC963 Recipient: abuse@dynadot.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive