WatchOut #4 · Investigating

Kids: watch out for game sites using lookalike domains

Website Advertisement Social media ImpersonationEmail & account scams

Who may be targeted: Children, parents, and people who play Roblox or other online games.

WatchOut graphic highlighting the unusual vwww- prefix and [.]co ending in the defanged address vwww-roblox[.]co.
Look closely at game websites. An extra letter or unfamiliar domain ending can be a warning sign.

A website using the address vwww-roblox[.]co uses Roblox's name with an unusual vwww- prefix and a different domain ending. Lookalike game sites can be used to trick players into entering passwords, verification codes, or payment details. Do not sign in through a link sent in a chat, video, ad, or game message.

  • The address begins with the unusual vwww- prefix, rather than simply using the official game domain.
  • The address ends in [.]co instead of the official service's expected domain ending.
  • A page asks for a game password, verification code, payment details, or a download after you clicked an unexpected link.
  • The offer promises free Robux, game currency, items, or an account reward in exchange for signing in.

Written so they cannot be clicked. Do not retype them into your browser.

  • vwww-roblox[.]co
Source and limitations — what this alert does not establish
  • Scammers can change domains quickly. A familiar game name in a web address does not prove that the page belongs to the game company.

Published Aug 22, 2026. Published by the Cybersecurity Reach Foundation.

Send this to someone it could protect.

Get future alerts Report a scam

← All alerts