Fake Roblox profile page on look-alike domain roblox.com.am

What happened

The urlDNA scanning service posted on Mastodon on 11 November 2026 that hxxp://www.roblox.com.am/users/354704663845/profile/ is a possible phishing page, linking its scan. The domain also appears on the Phishing Army extended blocklist, a public phishing domain blocklist. roblox.com.am is not an official Roblox domain; the real site is roblox.com. Look-alike Roblox profile links are often shared in chats to steal account logins. Sign in to Roblox only through the official app or by typing roblox.com yourself.

How the scam works

Pages that copy a familiar sign-in form are usually reached from an email, text, advert, comment or search result that warns of a problem with an account, a delivery or a payment. The form looks official, but anything typed — a password, a one-time code or a wallet recovery phrase — goes to whoever set up the page rather than to the real company. Those details can be used at once to take over the account, change the recovery email or empty a wallet.

roblox.com.am is a look-alike domain, not roblox.com. Roblox was impersonated and is not involved. A path that looks like a user profile is often used to collect a login from someone who thinks they are viewing a friend's page or claiming an item. A separate Roblox lure, a 'Free Robux' generator at rbxpay.pages.dev, was also flagged today, and a look-alike domain roblox.et was reported earlier. Sign in only at roblox.com or in the official app.

Source

Public post on Mastodon, 11 November 2026: https://infosec.exchange/@urldna/117597222729075759

The indicators come from this source and have not been independently checked by scammers.com.