gxrlsrevolution.xyz - suspicious URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned gxrlsrevolution.xyz and returned a suspicious verdict (score 45), categorised as phishing. The page resolved to 104.21.44.230 on Cloudflare, Inc. in US. The domain was registered 1 days ago through Global Domain Group LLC. 23 domains and 2 IPs were contacted, over 4 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 45) · Confidence 57%
- Scanned URL:
https://gxrlsrevolution.xyz/ - Domain: gxrlsrevolution.xyz · IP: 104.21.44.230 · AS13335 · US
- Server: cloudflare
- Page title: Gxrlsrevolution — Bahis & Casino Haber Ajansı
- HTTP status: 200 · text/html; charset=UTF-8
- Registrar: Global Domain Group LLC · domain age 1 days · created 2026-08-18
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 16 23: · subject CN=gxrlsrevolution.xyz
- HTTP requests captured: 4 · outgoing links: 61
- Scan tier: standard · observed 2026-08-20 08:26:07 UTC
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Domain impersonates revolut (combosquat)
- Domain registered 1 day(s) ago
- Abuse-heavy TLD .xyz
- Certificate issued < 48h ago
Detected technologies
- Cloudflare
- Cloudflare Insights
Contacted infrastructure
- 104.21.44.230 - AS13335 Cloudflare, Inc. (United States)
- 104.16.80.73 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- gxrlsrevolution.xyz
- medical-esthe.com
- iabireland.ie
- www.miyake-art.com
- tsc-s.com
- npbt.jp
- vivirelbosque.cl
- tamana-ikki.com
- www.mano-mano.jp
- www.galu-himeji.jp
- kaneshindenki.co.jp
- hi5sk8.net
- www.aubergelaherse.com
- marubouro.co.jp
- ah-ishii.com
- cattleya-group.net
- www.orthopaedie-dr-yacoub.de
- orthodontiedian.be
- www.minimamechan.com
- toujingai-nyc-movie.com
Questions about gxrlsrevolution.xyz
- Is gxrlsrevolution.xyz safe?
- No. MalwareAnalyzer scanned gxrlsrevolution.xyz on 20 Aug 2026 and returned a suspicious verdict with a score of 45 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- How was gxrlsrevolution.xyz checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of gxrlsrevolution.xyz
Scanned on MalwareAnalyzer by Cyble · Open interactive scan