mtsn-baranti.com - URL scan, 17 Aug 2026
MalwareAnalyzer by Cyble scanned mtsn-baranti.com and returned a unknown verdict (score 2). The page resolved to 191.101.230.3 on AS-HOSTINGER - Hostinger International Limited, CY in AE. The domain was registered 5206 days ago through Tucows Domains Inc.. 1 domain and 1 IP were contacted. 1314 malware samples communicate with this URL. The request followed 1 redirect before landing. This is a point-in-time observation from 17 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 2) · Confidence 8%
- Scanned URL:
http://mtsn-baranti.com/perpus/repository/coin-master-free-coins-and-spins_GM406889139.pdf - Domain: mtsn-baranti.com · IP: 191.101.230.3 · AS47583 · AE
- Server: LiteSpeed
- HTTP status: 200 · application/pdf
- Registrar: Tucows Domains Inc. · domain age 5206 days · created 2012-05-16
- TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Oct 11 20: · subject CN=mtsn-baranti.com
- Scan tier: fast · observed 2026-08-17 12:12:31 UTC
Redirect chain
http://mtsn-baranti.com/perpus/repository/coin-master-free-coins-and-spins_GM406889139.pdfhttps://mtsn-baranti.com/perpus/repository/coin-master-free-coins-and-spins_GM406889139.pdf
Malware communicating with this URL (1314)
These samples were observed contacting or being served from mtsn-baranti.com. Each links to its full analysis.
- how-to-get-free-robux-fast-and-easy-2021_GM431946152.pdf - referenced ·
0f27ddeebc872eaef9a47087bd4e3547· first seen 2026-08-17 - coin-master-free-cards-link_GM406889139.pdf - referenced (hosted here) ·
6f293493192dc7a1b7b328f308c0cdfb· first seen 2026-08-17 - codes-to-hack-roblox_GM431946152.pdf - referenced ·
6f0a472755453ccb2823a35bf9a20403· first seen 2026-08-17 - how-to-make-account-for-intriga-roblox-hack_GM431946152.pdf - referenced ·
fd57e751f7f18b637dbaf5f3f6c50752· first seen 2026-08-17 - pokemon-go-free-spoofing-ios_GM1094591345.pdf - referenced ·
44e9f04e12674f001738f906b7ec2776· first seen 2026-08-17 - roblox-swear-hacks_GM431946152.pdf - referenced ·
5f3725e087833392807398da1f15e4d0· first seen 2026-08-17 - robux-hack-script_GM431946152.pdf - referenced ·
51871ebee8e6c6620c5daee1590599fd· first seen 2026-08-17 - roblox-hack-client_GM431946152.pdf - referenced ·
35478e93c7094cd8a31c6b04711dd9c4· first seen 2026-08-17 - roblox-hair-for-free_GM431946152.pdf - referenced ·
cbf0521027beceef916b09d0c5d04992· first seen 2026-08-17 - how-to-get-free-robux-on-roblox_GM431946152.pdf - referenced ·
63d0e0fdd4c1e9c9ba130bdffd324759· first seen 2026-08-17 - how-to-get-free-robux-no-hack-may-2021_GM431946152.pdf - referenced ·
e325f53cc07dbe569c82dd3948cc0530· first seen 2026-08-17 - when-was-minecraft-free_GM479516143.pdf - referenced ·
e77dd06ce613b708d01a067d7d0ece23· first seen 2026-08-17 - how-to-hack-robux_GM431946152.pdf - referenced ·
d8164fbd77a14dc885f2c295e6eca5a8· first seen 2026-08-17 - roblox-catalog-all-free-items_GM431946152.pdf - referenced ·
8a2d3b60924ea7399bc9aae74bbe41f5· first seen 2026-08-17 - how-to-get-free-robux-on-iphone-2021_GM431946152.pdf - referenced ·
33d609f204dde5f8b17e5734ab2c6fc1· first seen 2026-08-17
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- File download routed to the malware sandbox (coin-master-free-coins-and-spins_GM406889139.pdf)
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- LiteSpeed
Contacted infrastructure
- 191.101.230.3 - AS47583 AS-HOSTINGER - Hostinger International Limited, CY (AE)
Files served by this page
- coin-master-free-coins-and-spins_GM406889139.pdf ·
69b7b4a00e83d8346c27994749b1b7ec
Observed indicators
- mtsn-baranti.com
- 191.101.230.3
- https://mtsn-baranti.com/perpus/repository/coin-master-free-coins-and-spins_GM406889139.pdf
Other scans of mtsn-baranti.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - suspicious ·
https://mtsn-baranti.com/perpus/repository/coin-master-free-coins-facebook_GM406889139.pdf - 20 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/daily-free-spins-on-coin-master_GM406889139.pdf - 20 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/is-free-robux-real_GM431946152.pdf - 20 Aug 2026 - suspicious ·
https://mtsn-baranti.com/perpus/repository/free-minecraft-mods_GM479516143.pdf - 17 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/free-games-roblox-free-online_GM431946152.pdf - 17 Aug 2026 - suspicious ·
https://mtsn-baranti.com/perpus/repository/cheat-engine-original-download-roblox_GM431946152.pdf - 17 Aug 2026 - suspicious ·
https://mtsn-baranti.com/perpus/repository/80-free-spins-coin-master_GM406889139.pdf - 17 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/how-to-get-robux-with-cheat-engine-64_GM431946152.pdf - 17 Aug 2026 - malicious ·
https://mtsn-baranti.com/perpus/repository/roblox-hacking-channel-youtube_GM431946152.pdf - 17 Aug 2026 - unknown ·
https://mtsn-baranti.com/perpus/repository/roblox-free-hair-girl_GM431946152.pdf
Questions about mtsn-baranti.com
- Is mtsn-baranti.com safe?
- The scan of mtsn-baranti.com on 17 Aug 2026 reached no verdict either way (score 2). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with mtsn-baranti.com?
- 1314 analysed samples communicate with this URL.
- How was mtsn-baranti.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of mtsn-baranti.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan