Highscore 55 · flagged Friday, September 11, 2026

roblox-co.com

Appeared in the .com zone on Friday, September 11, 2026; by the end of that day the census found redirects elsewhere. Full domain report

Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.

Own one of these names and think the listing is wrong? Tell us and a person will look.

What matched

brand in the name
matched: roblox
+30
brand name behind Cloudflare
matched: cloudflare.com
+6
brand name at a retail registrar
matched: MAT BAO CORPORATION
+8
brand name and brand-styled page
matched: roblox
+15
Registrar
MAT BAO CORPORATION
Nameserver provider
Nameservers
odin.ns.cloudflare.com, venus.ns.cloudflare.com
First-day state
redirects elsewhere
HTTP status
200
Page title
Roblox
Has a form
no
Brand echoed
roblox

Model opinions

Second opinionlooks like abusetarget: Robloxconfidence 72%· claude-opus-5

roblox-co.com is a brand-squat on Roblox held by a third party (Vietnamese retail registrar, Cloudflare NS) that serves no content of its own and simply 302s all traffic to the genuine www.roblox.com — a common warm-up/parking posture for a typosquat that can be repointed to a credential or Robux-generator page at any time; no deceptive page is served today, so it is squat abuse rather than active phishing.

First passlooks like abusetarget: Robloxconfidence 92%· claude-haiku-4-5

The domain roblox-co.com is a typosquat of the legitimate Roblox brand (correct domain is roblox.com). It redirects to the real Roblox site, which is a common phishing infrastructure pattern—the typosquat domain is registered to capture mistyped traffic and can be repurposed for credential harvesting. The use of Cloudflare nameservers and a third-party registrar (MAT BAO CORPORATION) by an actor controlling a brand-squat domain indicates preparedness for abuse, even if currently redirecting harm

A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.

What the page looked like on Friday, September 11, 2026

Screenshot of roblox-co.com taken by the zone census on 2026-09-11

Same data as JSON: /api/zone/domain/roblox-co.com. This page is not indexed by search engines and does not link to the site it describes.