Is new6728.g72ejs.xyz safe?

The scan of new6728.g72ejs.xyz on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.

How was new6728.g72ejs.xyz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

new6728.g72ejs.xyz - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned new6728.g72ejs.xyz and returned a unknown verdict (score 0). The page resolved to 104.21.75.90 on Cloudflare, Inc. in US. The domain was registered 33 days ago through Spaceship, Inc.. 7 domains and 3 IPs were contacted, over 11 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 0) · Confidence 6%
Scanned URL: https://new6728.g72ejs.xyz/?_b9d5e9=29f6f938&tag=F9vm8F95&file=malwareanalyserals
Domain: new6728.g72ejs.xyz · IP: 104.21.75.90 · AS13335 · US
Server: cloudflare
Page title: Downloading...
HTTP status: 200 · text/html; charset=UTF-8
Registrar: Spaceship, Inc. · domain age 33 days · created 2026-07-19
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 17 02: · subject CN=g72ejs.xyz
HTTP requests captured: 11 · outgoing links: 2
Scan tier: standard · observed 2026-08-21 02:50:16 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Abuse-heavy TLD .xyz
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Cloudflare
Cloudflare Insights

Contacted infrastructure

172.67.217.161 - AS13335 Cloudflare, Inc. (United States)
104.16.79.73 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

new6728.g72ejs.xyz
www.iconbolt.com
generatefd7c02.g72ejs.xyz
static.cloudflareinsights.com
generate52808a.g72ejs.xyz
share52808a.g72ejs.xyz
file571018.g72ejs.xyz
104.21.75.90
172.67.217.161
104.16.79.73
https://new6728.g72ejs.xyz/?_b9d5e9=29f6f938&tag=F9vm8F95&file=malwareanalyserals
https://www.iconbolt.com/iconsets/essential-flat/download.svg
https://generatefd7c02.g72ejs.xyz/?_cc3196=9cbe2586&data=eyJpZCI6IjY3MjgiLCJ0YWciOiJGOXZtOEY5NSIsImZpbGUiOiJtYWx3YXJlYW5hbHlzZXJhbHMiLCJyZWRpcmVjdFN0ZXAiOjAsInRpbWVzdGFtcCI6MTc4NzI4MDYxN30%3D
https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496

Questions about new6728.g72ejs.xyz

Is new6728.g72ejs.xyz safe?: The scan of new6728.g72ejs.xyz on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
How was new6728.g72ejs.xyz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of new6728.g72ejs.xyz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan