Is mandala-revolution.com safe?

No. MalwareAnalyzer scanned mandala-revolution.com on 20 Aug 2026 and returned a suspicious verdict with a score of 42 out of 100, categorised as phishing and credential-harvest. Treat it as hostile until it is re-checked.

How was mandala-revolution.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

mandala-revolution.com - suspicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned mandala-revolution.com and returned a suspicious verdict (score 42), categorised as phishing, credential-harvest. The page resolved to 23.227.38.65 on Shopify, Inc. in CA. 7 domains and 5 IPs were contacted, over 218 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 42) · Confidence 51%
Scanned URL: https://mandala-revolution.com/
Domain: mandala-revolution.com · IP: 23.227.38.65 · AS13335 · CA
Server: cloudflare
Page title: Mandala Revolution
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Sep 21 03: · subject CN=mandala-revolution.com
HTTP requests captured: 218 · cookies set: 9 · outgoing links: 123
Scan tier: standard · observed 2026-08-20 12:30:07 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates revolut (combosquat)
Credential-harvesting form
Matches phishing-kit family "Meta / Facebook Login Kit"

Detected technologies

Cloudflare
Shopify

Contacted infrastructure

23.227.38.65 - AS13335 Shopify, Inc. (Canada)
23.227.39.200 - AS13335 Shopify, Inc. (Canada)

Observed indicators

mandala-revolution.com
fonts.shopifycdn.com
shop.app
cdn.shopify.com
monorail-edge.shopifysvc.com
www.shopify.com
otlp-http-production.shopifysvc.com
23.227.38.65
23.227.39.200
23.227.39.20
34.8.119.189
34.160.147.240
https://mandala-revolution.com/
https://mandala-revolution.com/cdn/shop/files/MR_favicon2.jpg?crop=center&height=32&v=1771858578&width=32
https://fonts.shopifycdn.com/
https://mandala-revolution.com/cdn/shop/t/2/assets/constants.js?v=58251544750838685771771556328
https://mandala-revolution.com/cdn/shop/t/2/assets/pubsub.js?v=158357773527763999511771556328
https://mandala-revolution.com/cdn/shop/t/2/assets/global.js?v=139248116715221171191771556328
https://mandala-revolution.com/cdn/shop/t/2/assets/animations.js?v=114255849464433187621771556328
https://mandala-revolution.com/fr

Questions about mandala-revolution.com

Is mandala-revolution.com safe?: No. MalwareAnalyzer scanned mandala-revolution.com on 20 Aug 2026 and returned a suspicious verdict with a score of 42 out of 100, categorised as phishing and credential-harvest. Treat it as hostile until it is re-checked.
How was mandala-revolution.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of mandala-revolution.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan