Is robloxguimaker.online safe?

No. MalwareAnalyzer scanned robloxguimaker.online on 21 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was robloxguimaker.online checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

robloxguimaker.online - suspicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned robloxguimaker.online and returned a suspicious verdict (score 33), categorised as phishing. The page resolved to 216.198.79.1 on Lefkoff Industries in US. 3 domains and 3 IPs were contacted, over 50 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 33) · Confidence 39%
Scanned URL: https://robloxguimaker.online/
Domain: robloxguimaker.online · IP: 216.198.79.1 · AS16509 · US
Server: Vercel
Page title: Roblox GUI Maker — Free AI-Powered Visual Editor
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 17 23: · subject CN=robloxguimaker.online
HTTP requests captured: 50 · cookies set: 3 · outgoing links: 15
Scan tier: standard · observed 2026-08-21 13:54:15 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates roblox (combosquat)
Certificate issued < 48h ago

Detected technologies

Vercel
React
Google Analytics

Contacted infrastructure

216.198.79.1 - AS16509 Lefkoff Industries (United States)
172.217.25.200 - AS15169 Google LLC (Malaysia)
172.217.25.174 - AS15169 Google LLC (Japan)

Observed indicators

robloxguimaker.online
www.googletagmanager.com
www.google-analytics.com
216.198.79.1
172.217.25.200
172.217.25.174
https://robloxguimaker.online/
https://robloxguimaker.online/logo.svg
https://robloxguimaker.online/assets/index-DlTdCBi1.css
https://www.googletagmanager.com/gtag/js?id=G-VP69DKBP99
https://robloxguimaker.online/assets/index-Bl4wc6XY.js
https://robloxguimaker.online/assets/messages-CwGbFOOc.js
https://robloxguimaker.online/assets/react-dom-CQTT5yBE.js
https://robloxguimaker.online/assets/routes-BBK1NT0L.js
https://robloxguimaker.online/assets/button-eBi-OEcS.js
https://robloxguimaker.online/assets/useOpenInteractionType-Bfh1-rC1.js
https://robloxguimaker.online/assets/useCompositeListItem-XpTnVEE7.js
https://robloxguimaker.online/assets/input-Bg7ZYPq1.js
https://robloxguimaker.online/assets/createBaseUIEventDetails-Ba9x0BYV.js
https://robloxguimaker.online/assets/navigation-CeZhbdJC.js

Questions about robloxguimaker.online

Is robloxguimaker.online safe?: No. MalwareAnalyzer scanned robloxguimaker.online on 21 Aug 2026 and returned a suspicious verdict with a score of 33 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was robloxguimaker.online checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of robloxguimaker.online

Scanned on MalwareAnalyzer by Cyble · Open interactive scan