Is mainsitusku.xyz safe?

No. MalwareAnalyzer scanned mainsitusku.xyz on 19 Aug 2026 and returned a suspicious verdict with a score of 47 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

How was mainsitusku.xyz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

mainsitusku.xyz - suspicious URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned mainsitusku.xyz and returned a suspicious verdict (score 47), categorised as credential-harvest. The page resolved to 104.21.80.48 on Cloudflare, Inc. in US. The domain was registered 88 days ago through NameCheap, Inc.. 38 domains and 4 IPs were contacted, over 12 HTTP requests. The request followed 4 redirects before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 47) · Confidence 65%
Scanned URL: https://pasarantogel.com/contents//files/51834551989.pdf
Domain: mainsitusku.xyz · IP: 104.21.80.48 · AS13335 · US
Server: cloudflare
Page title: PASARANTOGEL
HTTP status: 200 · text/html; charset=UTF-8
Registrar: NameCheap, Inc. · domain age 88 days · created 2026-05-23
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Oct 19 16: · subject CN=mainsitusku.xyz
HTTP requests captured: 12
Scan tier: standard · observed 2026-08-19 21:21:14 UTC

Redirect chain

https://pasarantogel.com/contents//files/51834551989.pdf
http://pasarantogel.com/
https://pasarantogel.com/
http://mainsitusku.xyz/
https://mainsitusku.xyz/

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Matches phishing-kit family "u-admin (uAdmin)"
Abuse-heavy TLD .xyz
Valid TLS, no impersonation or off-origin credential post
Long redirect chain (4 hops)
Cross-host redirect chain

Detected technologies

Cloudflare
Google Analytics
jQuery
Bootstrap
Cloudflare Insights

Contacted infrastructure

104.21.80.48 - AS13335 Cloudflare, Inc. (United States)
104.21.47.151 - AS13335 Cloudflare, Inc. (United States)
172.67.148.120 - AS13335 Cloudflare, Inc. (United States)
172.67.174.87 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

mainsitusku.xyz
link-pasarantogel.com
cdnjs.cloudflare.com
pasto1amp.com
browser.sentry-cdn.com
spaces-ptg.sgp1.cdn.digitaloceanspaces.com
pasaran01.com
pp88.asia
spaces-ptg.sgp1.digitaloceanspaces.com
www.texaslottery.com
perupools.com
www.oregonlottery.org
chilepools.com
panama4d.com
sydneypoolstoday.com
southafricapools.com
www.singaporepools.com.sg
magnum4d.my
vanuatupools.com
kawasakipools.com

Other scans of mainsitusku.xyz (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

19 Aug 2026 - suspicious

Questions about mainsitusku.xyz

Is mainsitusku.xyz safe?: No. MalwareAnalyzer scanned mainsitusku.xyz on 19 Aug 2026 and returned a suspicious verdict with a score of 47 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
How was mainsitusku.xyz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of mainsitusku.xyz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan