No. MalwareAnalyzer scanned feast.to on 19 Aug 2026 and returned a suspicious verdict with a score of 32 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

What malware is associated with feast.to?

1 analysed samples communicate with this URL, including Phishing.

How was feast.to checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

feast.to - suspicious URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned feast.to and returned a suspicious verdict (score 32), categorised as credential-harvest. The page resolved to 192.0.78.25 on Automattic, Inc in US. The domain was registered 10053 days ago through Government of Kingdom of Tonga. 11 domains and 2 IPs were contacted, over 3 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 32) · Confidence 35%
Scanned URL: http://feast.to/upd_file/wuteponivusesoxonuzifizi.pdf
Domain: feast.to · IP: 192.0.78.25 · AS2635 · US
Server: nginx
Page title: ページが見つかりませんでした – フィーストインターナショナル
HTTP status: 404 · text/html; charset=UTF-8
Registrar: Government of Kingdom of Tonga · domain age 10053 days · created 1999-02-08
HTTP requests captured: 3
Scan tier: fast · observed 2026-08-19 17:36:59 UTC

Redirect chain

http://feast.to/upd_file/wuteponivusesoxonuzifizi.pdf
https://feast.to/upd_file/wuteponivusesoxonuzifizi.pdf

Malware communicating with this URL (1)

These samples were observed contacting or being served from feast.to. Each links to its full analysis.

Phishing - referenced · 81321846b9e15400dd382f58a43ed375 · first seen 2026-08-19

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form

Detected technologies

Nginx
WordPress

Contacted infrastructure

192.0.78.25 - AS2635 Automattic, Inc (United States)
192.0.78.24 - AS2635 Automattic, Inc (United States)

Observed indicators

feast.to
gmpg.org
r-login.wordpress.com
s2.wp.com
fonts-api.wp.com
s0.wp.com
feastto.wordpress.com
s1.wp.com
wordpress.com
0.gravatar.com
subscribe.wordpress.com
192.0.78.25
192.0.78.24
https://feast.to/upd_file/wuteponivusesoxonuzifizi.pdf
https://gmpg.org/xfn/11
https://feast.to/remote-login.php?wpcom_remote_login=validate
https://r-login.wordpress.com/remote-login.php?wpcom_remote_login=request_access&origin=
https://r-login.wordpress.com/remote-login.php
https://s2.wp.com/
https://fonts-api.wp.com/

Questions about feast.to

Is feast.to safe?: No. MalwareAnalyzer scanned feast.to on 19 Aug 2026 and returned a suspicious verdict with a score of 32 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
What malware is associated with feast.to?: 1 analysed samples communicate with this URL, including Phishing.
How was feast.to checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of feast.to

Scanned on MalwareAnalyzer by Cyble · Open interactive scan