mtsn-baranti.com - suspicious URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned mtsn-baranti.com and returned a suspicious verdict (score 27). The page resolved to 191.101.230.3 on AS-HOSTINGER - Hostinger International Limited, CY in AE. The domain was registered 5209 days ago through Tucows Domains Inc.. 1 domain and 1 IP were contacted. 1316 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 27) · Confidence 36%
- Scanned URL:
http://mtsn-baranti.com/perpus/repository/coin-master-free-coins-facebook_GM406889139.pdf - Domain: mtsn-baranti.com · IP: 191.101.230.3 · AS47583 · AE
- Server: LiteSpeed
- HTTP status: 200 · application/pdf
- Registrar: Tucows Domains Inc. · domain age 5209 days · created 2012-05-16
- TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Oct 11 20: · subject CN=mtsn-baranti.com
- Scan tier: fast · observed 2026-08-20 04:25:56 UTC
Redirect chain
http://mtsn-baranti.com/perpus/repository/coin-master-free-coins-facebook_GM406889139.pdfhttps://mtsn-baranti.com/perpus/repository/coin-master-free-coins-facebook_GM406889139.pdf
Malware communicating with this URL (1316)
These samples were observed contacting or being served from mtsn-baranti.com. Each links to its full analysis.
- 793dac2a702fdb1e86933dc01d7dc576c9b42c89cb6e2d4d34f2dcf5de03585c - referenced ·
793dac2a702fdb1e86933dc01d7dc576· first seen 2026-08-20 - roblox-hack-for-android-no-survey_GM431946152.pdf - referenced ·
e880bdaf4c80d90bac7f347feb044f2b· first seen 2026-08-17 - how-to-get-free-robux-fast-and-easy-2021_GM431946152.pdf - referenced ·
0f27ddeebc872eaef9a47087bd4e3547· first seen 2026-08-17 - coin-master-free-cards-link_GM406889139.pdf - referenced (hosted here) ·
6f293493192dc7a1b7b328f308c0cdfb· first seen 2026-08-17 - codes-to-hack-roblox_GM431946152.pdf - referenced ·
6f0a472755453ccb2823a35bf9a20403· first seen 2026-08-17 - how-to-make-account-for-intriga-roblox-hack_GM431946152.pdf - referenced ·
fd57e751f7f18b637dbaf5f3f6c50752· first seen 2026-08-17 - pokemon-go-free-spoofing-ios_GM1094591345.pdf - referenced ·
44e9f04e12674f001738f906b7ec2776· first seen 2026-08-17 - roblox-swear-hacks_GM431946152.pdf - referenced ·
5f3725e087833392807398da1f15e4d0· first seen 2026-08-17 - robux-hack-script_GM431946152.pdf - referenced ·
51871ebee8e6c6620c5daee1590599fd· first seen 2026-08-17 - roblox-hack-client_GM431946152.pdf - referenced ·
35478e93c7094cd8a31c6b04711dd9c4· first seen 2026-08-17 - roblox-hair-for-free_GM431946152.pdf - referenced ·
cbf0521027beceef916b09d0c5d04992· first seen 2026-08-17 - how-to-get-free-robux-on-roblox_GM431946152.pdf - referenced ·
63d0e0fdd4c1e9c9ba130bdffd324759· first seen 2026-08-17 - how-to-get-free-robux-no-hack-may-2021_GM431946152.pdf - referenced ·
e325f53cc07dbe569c82dd3948cc0530· first seen 2026-08-17 - when-was-minecraft-free_GM479516143.pdf - referenced ·
e77dd06ce613b708d01a067d7d0ece23· first seen 2026-08-17 - how-to-hack-robux_GM431946152.pdf - referenced ·
d8164fbd77a14dc885f2c295e6eca5a8· first seen 2026-08-17
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Grabbed file (coin-master-free-coins-facebook_GM406889139.pdf) is known suspicious in the corpus
- File download routed to the malware sandbox (coin-master-free-coins-facebook_GM406889139.pdf)
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- LiteSpeed
Contacted infrastructure
- 191.101.230.3 - AS47583 AS-HOSTINGER - Hostinger International Limited, CY (AE)
Files served by this page
- coin-master-free-coins-facebook_GM406889139.pdf ·
f7647a7dded88f3c14decd71e3268254
Observed indicators
- mtsn-baranti.com
- 191.101.230.3
- https://mtsn-baranti.com/perpus/repository/coin-master-free-coins-facebook_GM406889139.pdf
Other scans of mtsn-baranti.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/daily-free-spins-on-coin-master_GM406889139.pdf - 20 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/is-free-robux-real_GM431946152.pdf - 20 Aug 2026 - suspicious ·
https://mtsn-baranti.com/perpus/repository/free-minecraft-mods_GM479516143.pdf - 17 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/free-games-roblox-free-online_GM431946152.pdf - 17 Aug 2026 - suspicious ·
https://mtsn-baranti.com/perpus/repository/cheat-engine-original-download-roblox_GM431946152.pdf - 17 Aug 2026 - suspicious ·
https://mtsn-baranti.com/perpus/repository/80-free-spins-coin-master_GM406889139.pdf - 17 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/coin-master-free-coins-and-spins_GM406889139.pdf - 17 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/how-to-get-robux-with-cheat-engine-64_GM431946152.pdf - 17 Aug 2026 - malicious ·
https://mtsn-baranti.com/perpus/repository/roblox-hacking-channel-youtube_GM431946152.pdf - 17 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/roblox-free-hair-girl_GM431946152.pdf
Questions about mtsn-baranti.com
- Is mtsn-baranti.com safe?
- No. MalwareAnalyzer scanned mtsn-baranti.com on 20 Aug 2026 and returned a suspicious verdict with a score of 27 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with mtsn-baranti.com?
- 1316 analysed samples communicate with this URL.
- How was mtsn-baranti.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of mtsn-baranti.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan