banonymous.
Landing page pushes Roblox scripts via YouTube video and task buttons.
At a glance
Antivirus · registration · identity- Operator identity: Missing. No independently verifiable operator identity
- No engine classified the URL as malicious or suspicious in this scan; 58 returned harmless, 34 returned undetected, and 0 returned no usable result.
- The domain was registered Sep 29, 2025 and was 9 months old at scan time.
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The isolated page observation recorded 0 requests and did not mark the page as malicious.
Intelligence
banonymous.online presents itself as a script hub for Roblox. Visitors see a YouTube embed, repeated calls to “Get Script,” and a progress bar that requires completing an external task. The domain was registered in September 2025, the IP has an abuse-confidence score of 31/100, and no operator identity or contact details appear anywhere on the page.
Evidence Map
Multiple reputation sources returned usable results
No independently verifiable operator identity
Only partial behavior evidence was available
The domain was registered Sep 29, 2025 and was 9 months old at scan time.
- 1Promotes downloadable Roblox scripts, a frequent malware vector
- 2Hosting IP has 31/100 abuse-confidence score
- 3Domain only nine months old with no verifiable operator
- 4No contact information or physical address listed
Observed visitor journey
The captured page opens with the title “Banonymous” and immediately displays an embedded YouTube video. Below the video sit two prominent buttons labeled “Get Script” and “Complete Task.” A progress indicator reads “Unlock Progress: 0/1,” implying that finishing an external action will unlock downloadable content.
Content and design signals
The text repeatedly uses phrases such as “Roblox Script,” “Keyless Script,” and “OP SCRIPT.” The layout is minimal, consisting of a single video frame and call-to-action buttons. No login form, countdown timer, or notification-bait copy is present.
Operator and contact details
Zero contact fields are recorded: no email address, phone number, postal address, or social links appear. The domain itself was registered only nine months before the scan.
Technical observations
The site served a valid TLSv1.3 certificate and produced zero redirect hops. The hosting IP carries an abuse-confidence score of 31/100 from eleven prior reports. No antivirus engine classified the URL as malicious during the scan.
Website Preview
The site functions as a landing page for distributing game scripts, which frequently contain malicious code or lead to credential theft. The content is highly characteristic of gaming-related malware distribution hubs.
- 1Promotes 'OP Scripts' for Roblox games, a common vector for malware distribution
- 2Uses sensationalist 'NEW' and 'OP SCRIPT' text to drive engagement
- 3Embedded YouTube video serves as a lure to redirect users to external script-hosting platforms
- 4Minimalist, low-effort design typical of script-distribution landing pages
Web Research
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1Promotes downloadable Roblox scripts, a frequent malware vector
- 2Hosting IP has 31/100 abuse-confidence score
- 3Domain only nine months old with no verifiable operator
- 4No contact information or physical address listed
2 of 22 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- Tagged as a gaming scam.
- Free game-currency / generator language.
- Promotes downloadable Roblox scripts, a frequent malware vector
- Hosting IP has 31/100 abuse-confidence score
- Domain only nine months old with no verifiable operator
- No contact information or physical address listed
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 20, 2026 at 2:35 AM UTCIdentity
6 facts- Operator
- Missing
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- Not observed
- Postal address
- Not observed
- Social profiles
- Not observed
Domain
8 facts- Domain age
- 9 months old
- Registered
- Sep 29, 2025
- Registrar
- GoDaddy.com, LLC
- Expires
- Sep 29, 2026
- WHOIS updated
- Mar 19, 2026
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Let's Encrypt · E8
- Certificate subject
- banonymous.online
- Certificate valid from
- May 27, 2026
- Certificate valid to
- Aug 25, 2026
- Network address
- 75.2.60.5
- ASN
- AS16509
- Hosting organization
- AMAZON-02 - Amazon.com, Inc., US
- Country
- US
- Server
- Netlify
- Site platform
- Unavailable
- IP reputation
- 31% confidence · 11 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Specific page
- Destination host
- banonymous.online
- Redirects
- 0
- Cross-domain redirect
- No
- Redirect status codes
- 200
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Complete
- Extracted links
- 0
- Unique IPs contacted
- 0
- Countries contacted
- 2
- Referenced domains
- 3
What to do
Avoid downloading any scripts or completing external tasks on this page.
Stop the offer or task. If you shared a password, change it through the official service and enable two-factor authentication. If you shared identity, banking, or payment details, contact the relevant institution and monitor the affected accounts.
Final Verdict
Why this verdict
The page promotes OP Roblox scripts with an embedded YouTube video and task-completion buttons. No antivirus engine flagged the URL, yet the hosting IP carries an abuse score of 31/100 and the domain is only nine months old.
Avoid downloading any scripts or completing external tasks on this page.
Key evidence
- 1Promotes downloadable Roblox scripts, a frequent malware vector
- 2Hosting IP has 31/100 abuse-confidence score
- 3Domain only nine months old with no verifiable operator
Safety FAQ
Is banonymous.online safe to use?+
The page promotes OP Roblox scripts with an embedded YouTube video and task-completion buttons. No antivirus engine flagged the URL, yet the hosting IP carries an abuse score of 31/100 and the domain is only nine months old.
What should I do about banonymous.online?+
Avoid downloading any scripts or completing external tasks on this page.
How old is banonymous.online?+
banonymous.online is 9 months old and was registered sep 29, 2025.
What if I already interacted with banonymous.online?+
Stop the offer or task. If you shared a password, change it through the official service and enable two-factor authentication. If you shared identity, banking, or payment details, contact the relevant institution and monitor the affected accounts.
When was this report updated?+
This report reflects the scan completed July 20, 2026 at 2:35 AM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.