catocheats[.]com

PhishDestroy identifies catocheats.com as an active Roblox Robux farming scam deployed through a phishing portal. The domain is currently under investigation as a confirmed threat vector targeting Roblox user accounts. This platform mimics legitimate Roblox cheat sites to deceive users into disclosing credentials or installing malware disguised as in-game currency generators. catocheats.com was flagged by zero of 95 VirusTotal security vendors as of the latest scan, despite its malicious intent. The domain resolves to IP address 216.198.79.1 and operates under a Let's Encrypt SSL certificate for HTTPS credibility. Registered through Realtime Register B.V. on March 11, 2026, the domain has not yet been widely blocklisted, though it exhibits high-risk characteristics including recent creation and low trust indicators. Technical analysis reveals a newly registered domain (NRD) with no established reputation, making it a prime candidate for fraudulent operations. The current status of catocheats.com remains active and unblocked across most networks and DNS layers. Given the domain's specific targeting of Roblox users and its attempt to harvest in-game currency, the immediate risk to vulnerable users is high. PhishDestroy strongly recommends all Roblox players and security teams block catocheats.com at the DNS and firewall levels. Users are further advised to avoid entering any credentials or downloading files from this domain. Security teams should monitor for similar domains registered through Realtime Register B.V. and flag any new entries within the same IP range. Enhanced user awareness campaigns targeting Roblox community forums and social media are also recommended to prevent credential theft.