Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abusecomplaints@markmonitor.com.
The latest stored availability evidence still shows the domain reachable; 28 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
robloxcorporation[.]com
“Roblox”
This domain is flagged as a high‑risk generic phishing site. The authoritative DNS resolves to 100.56.72.172 and uses four nameservers (nspx1.roblox.com, nspx2.roblox.net, nspx3.roblox.us, nspx4.roblox.co.uk). Registration was performed through MarkMonitor Inc. on 12 July 2017, a registrar commonly associated with legitimate brand protection services. The page title returned by the web server is "Roblox", and the HTTP response code is 200, indicating the site is reachable. VirusTotal analysis shows 3 of 91 security vendors have flagged the domain, and AlienVault OTX lists a single threat‑intel pulse referencing it. These data points confirm that the domain is actively serving content and has been observed by multiple security sources. No additional technical artefacts such as SSL certificate details, hosting ASN, or geolocation are available, leaving the exact hosting provider and the nature of the payload unconfirmed. Defenders should add the domain to block lists at the perimeter and DNS level, enforce URL filtering for any outbound connections to the IP address, and monitor logs for attempted accesses. Ongoing threat‑intel feeds should be consulted for any new indicators, and any internal incidents involving credential submissions to this domain should be investigated as potential compromise.
Network Security Intelligence
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | robloxcorporation.com |
malicious | Sinkholed |
| DNS4EU | robloxcorporation.com |
malicious | Sinkholed |
Threat Response Pipeline
Public Blocklist Status
Stored Capture
Domain Intelligence
Technical detailsDNS, SSL SANs, timestamps
ICANN OVERSIGHT
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 6 identified
Envoy is an open-source edge and service proxy, designed for cloud-native applications.
www.envoyproxy.io 100% confidenceAmazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.
aws.amazon.com 100% confidenceAngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.
angularjs.org 100% confidenceHTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 100% confidenceAmazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.
aws.amazon.com 100% confidenceHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidenceVirusTotal Analysis
Evidence & External Reports
PD-20260717-A2A6DB Recipient: abusecomplaints@markmonitor.com Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive