Is rent-lease-no1.com safe?

The scan of rent-lease-no1.com on 19 Aug 2026 reached no verdict either way (score 16). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with rent-lease-no1.com?

1 analysed samples communicate with this URL, including Phishing.

How was rent-lease-no1.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

rent-lease-no1.com - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned rent-lease-no1.com and returned a unknown verdict (score 16), categorised as credential-harvest. The page resolved to 175.126.77.226 on SK Broadband Co Ltd in KR. The domain was registered 4572 days ago through Gabia, Inc.. 8 domains and 1 IP were contacted, over 10 HTTP requests. 1 malware sample communicates with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 16) · Confidence 22%
Scanned URL: http://rent-lease-no1.com/userfiles/file/20210910060508.pdf
Domain: rent-lease-no1.com · IP: 175.126.77.226 · AS9318 · KR
Server: nginx/1.26.1
Page title: 아주캐피탈 장기렌트
HTTP status: 200 · text/html;charset=UTF-8
Registrar: Gabia, Inc. · domain age 4572 days · created 2014-02-11
HTTP requests captured: 10
Scan tier: standard · observed 2026-08-19 21:37:48 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from rent-lease-no1.com. Each links to its full analysis.

Phishing - referenced · dc20576559b6ec149ddb5f3b6def3cad · first seen 2026-08-19

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Served over plaintext HTTP

Detected technologies

Nginx
jQuery

Contacted infrastructure

175.126.77.226 - AS9318 SK Broadband Co Ltd (Korea, Republic of)

Observed indicators

rent-lease-no1.com
html5shiv.googlecode.com
www.lease-lotte.co.kr
blog.daum.net
blog.naver.com
cafe.naver.com
band.us
asp22.http.or.kr
175.126.77.226
http://rent-lease-no1.com/userfiles/file/20210910060508.pdf
http://rent-lease-no1.com/common/css/sub_layout.css
http://rent-lease-no1.com/common/css/all.css
http://rent-lease-no1.com/common/css/main_layout.css
http://rent-lease-no1.com/common/js/jquery-1.8.0.min.js
http://rent-lease-no1.com/common/js/common_dev.js
http://rent-lease-no1.com/common/js/common_design.js
http://rent-lease-no1.com/common/js/mmenu.js
http://rent-lease-no1.com/common/css/menu_sideslide.css
http://html5shiv.googlecode.com/svn/trunk/html5.js
http://rent-lease-no1.com/common/js/html5shiv.js

Questions about rent-lease-no1.com

Is rent-lease-no1.com safe?: The scan of rent-lease-no1.com on 19 Aug 2026 reached no verdict either way (score 16). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with rent-lease-no1.com?: 1 analysed samples communicate with this URL, including Phishing.
How was rent-lease-no1.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of rent-lease-no1.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan