Is playpt2.store safe?

No. MalwareAnalyzer scanned playpt2.store on 23 Aug 2026 and returned a suspicious verdict with a score of 35 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

How was playpt2.store checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

playpt2.store - suspicious URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned playpt2.store and returned a suspicious verdict (score 35), categorised as credential-harvest. The page resolved to 172.67.144.16 on Cloudflare, Inc. in US. 40 domains and 4 IPs were contacted, over 12 HTTP requests. The request followed 4 redirects before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 35) · Confidence 50%
Scanned URL: https://pasarantogel2.com/contents/files/regug.pdf
Domain: playpt2.store · IP: 172.67.144.16 · AS13335 · US
Server: cloudflare
Page title: PASARANTOGEL2 trusted platform online lottery
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 20 10: · subject CN=playpt2.store
HTTP requests captured: 12
Scan tier: standard · observed 2026-08-23 09:46:30 UTC

Redirect chain

https://pasarantogel2.com/contents/files/regug.pdf
http://pasarantogel2.com/
https://pasarantogel2.com/
http://playpt2.store/
https://playpt2.store/

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Matches phishing-kit family "u-admin (uAdmin)"
Valid TLS, no impersonation or off-origin credential post
Long redirect chain (4 hops)
Cross-host redirect chain

Detected technologies

Cloudflare
Google Analytics
jQuery
Bootstrap
Cloudflare Insights

Contacted infrastructure

172.67.144.16 - AS13335 Cloudflare, Inc. (United States)
104.21.53.131 - AS13335 Cloudflare, Inc. (United States)
172.67.213.28 - AS13335 Cloudflare, Inc. (United States)
104.21.28.39 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

playpt2.store
link-pasarantogel2.com
cdnjs.cloudflare.com
amp-pasarantogel2.com
browser.sentry-cdn.com
tgl02.com
spaces-ptg.sgp1.cdn.digitaloceanspaces.com
pp88.asia
spaces-ptg.sgp1.digitaloceanspaces.com
floridalottery.com
perupools.com
chilepools.com
panama4d.com
sydneypoolstoday.com
southafricapools.com
www.singaporepools.com.sg
magnum4d.my
vanuatupools.com
www.pcso.gov.ph
kawasakipools.com

Questions about playpt2.store

Is playpt2.store safe?: No. MalwareAnalyzer scanned playpt2.store on 23 Aug 2026 and returned a suspicious verdict with a score of 35 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
How was playpt2.store checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of playpt2.store

Scanned on MalwareAnalyzer by Cyble · Open interactive scan