Based on 44 confirmed reports across the OpenPhish threat-intel feed, roblox.com.ml is a confirmed scam. The dominant attack pattern is fake user-profile pages designed to impersonate real accounts. Examples of flagged URLs on this domain: `/users/267563775478/profile`, `/games/106402412759954/get-verified-now?privateserverlinkcode=1890485563040244895449728...`. 44 reports in the last 30 days but zero in the last 7 — the infrastructure may be temporarily dormant, but the same domain has been re-used for fraud campaigns before and could be reactivated without warning. The combination of (a) the URL-pattern shape, (b) the threat-feed match, and (c) the report cadence above is the same triad we see in confirmed fraud infrastructure — there is no realistic legitimate-use case for roblox.com.ml given this fingerprint. Use the live check below — it pulls fresh signals from VirusTotal, WHOIS, and our own feeds in about three seconds so you can see the current verdict yourself.
Yes — roblox.com.ml is a confirmed scam. ScamRadar has tracked 44 confirmed reports across OpenPhish, first seen on and last seen on . Do not log in, deposit funds, or share personal information with this site.
Confirmed Scam · ScamRadar Risk Score 93/100
Verified against 1 threat-intel feed: OpenPhish · 44 confirmed reports in the last 180 days.
✓ Last verified: against URLHaus, OpenPhish, PhishTank & VirusTotal.
Red flags on roblox.com.ml
URL-path analysis on roblox.com.ml surfaces fake user-profile pages designed to impersonate real accounts — the path shape Google's safe-browsing crawler hasn't caught yet.
Confirmed attack paths on this domain include: `/users/267563775478/profile` and `/games/106402412759954/get-verified-now?privateserverlinkcode=1890485563040244895449728...`.
Real-time phishing feeds (OpenPhish) carry an active entry for roblox.com.ml.
Each fake profile path uses a numeric user ID, so the attacker can spin up a new victim-specific URL for every target without re-hosting the domain.
What to do right now
Do not enter login credentials, card numbers, or wallet seed phrases on any page hosted at roblox.com.ml.
Run the live check on this page (right above) to confirm the threat-intel feeds flagging it in real time.
If someone messaged you a roblox.com.ml profile link to "trade," "verify," or "claim a free item," block the sender — the profile is a clone of the real account.
Forward the original email (with full headers) to reportphishing@apwg.org and to the impersonated brand's abuse address — this propagates the indicator into commercial blocklists used by browsers and mail filters.
Save screenshots, the original email or message, and any transaction IDs — you will need them if you file a chargeback or talk to your bank's fraud team about roblox.com.ml.