No. MalwareAnalyzer scanned c.xyz on 22 Aug 2026 and returned a suspicious verdict with a score of 20 out of 100. Treat it as hostile until it is re-checked.

What malware is associated with c.xyz?

3 analysed samples communicate with this URL, including Reline.

How was c.xyz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

c.xyz - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned c.xyz and returned a suspicious verdict (score 20). The page resolved to 35.213.175.85 on Google LLC in SG. The domain was registered 1676 days ago through West263 International Limited. 2 domains and 1 IP were contacted. 3 malware samples communicate with this URL (Reline). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 20) · Confidence 26%
Scanned URL: https://c.xyz/
Domain: c.xyz · IP: 35.213.175.85 · AS15169 · SG
Server: nginx
Page title: This is the default server vhost
HTTP status: 200 · text/html
Registrar: West263 International Limited · domain age 1676 days · created 2022-01-18
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 5 07: · subject CN=c1108025.sgvps.net
Scan tier: fast · observed 2026-08-22 05:13:00 UTC

Malware communicating with this URL (3)

These samples were observed contacting or being served from c.xyz. Each links to its full analysis.

Reline - referenced · 360978b63f3d8ab7b2d4a91271ac874c · first seen 2026-08-22
Reline - referenced · 82e230c41b276ea0bfefb73eb2bec06c · first seen 2026-08-15
Reline - referenced · 4fe7c698f2385d75fb4887cc78ad2da1 · first seen 2026-08-13

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Abuse-heavy TLD .xyz
Untrusted certificate (ERR_TLS_CERT_ALTNAME_INVALID)

Detected technologies

Nginx

Contacted infrastructure

35.213.175.85 - AS15169 Google LLC (Singapore)

Observed indicators

c.xyz
static-cdn.siteground.com
35.213.175.85
https://c.xyz/
https://static-cdn.siteground.com/static/en/img/svg/monitorwithgears.svg
https://static-cdn.siteground.com/static/en/img/svg/cloudsbackground.svg

Other scans of c.xyz (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - suspicious
15 Aug 2026 - unknown
13 Aug 2026 - unknown

Questions about c.xyz

Is c.xyz safe?: No. MalwareAnalyzer scanned c.xyz on 22 Aug 2026 and returned a suspicious verdict with a score of 20 out of 100. Treat it as hostile until it is re-checked.
What malware is associated with c.xyz?: 3 analysed samples communicate with this URL, including Reline.
How was c.xyz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of c.xyz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan