ilyxrace.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned ilyxrace.com and returned a unknown verdict (score 16), categorised as credential-harvest. The page resolved to 35.214.197.25 on Google LLC in NL. The domain was registered 3852 days ago through Tucows Domains Inc.. 12 domains and 1 IP were contacted, over 11 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 16) · Confidence 22%
- Scanned URL:
http://ilyxrace.com/userfiles/files/96278926843.pdf - Domain: ilyxrace.com · IP: 35.214.197.25 · AS19527 · NL
- Server: nginx
- Page title: Page not found - Sport Exhaust System - ILYX Race
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: Tucows Domains Inc. · domain age 3852 days · created 2016-02-02
- HTTP requests captured: 11
- Scan tier: standard · observed 2026-08-21 01:11:03 UTC
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
- Served over plaintext HTTP
Detected technologies
- Nginx
- WordPress
Contacted infrastructure
- 35.214.197.25 - AS19527 Google LLC (Netherlands)
Observed indicators
- ilyxrace.com
- fonts.gstatic.com
- fonts.googleapis.com
- sportexhaustsystem.com
- drive.google.com
- www.google.com
- g.co
- www.instagram.com
- www.facebook.com
- nikoweb.it
- www.googletagmanager.com
- translate.google.com
- 35.214.197.25
- http://ilyxrace.com/userfiles/files/96278926843.pdf
- https://ilyxrace.com/xmlrpc.php
- https://fonts.gstatic.com/
- https://fonts.googleapis.com/
- https://ilyxrace.com/wp-content/et-cache/1/7/notfound/divi-dynamic-late.min.css
- https://ilyxrace.com/wp-content/et-cache/1/7/notfound/divi-dynamic.min.css
- https://ilyxrace.com/wp-content/plugins/divi-translate-main/styles/style.min.css
Questions about ilyxrace.com
- Is ilyxrace.com safe?
- The scan of ilyxrace.com on 21 Aug 2026 reached no verdict either way (score 16). Too little was captured to judge it, which is an unknown rather than a pass.
- How was ilyxrace.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of ilyxrace.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan