Is www.28777886.com safe?

The scan of www.28777886.com on 20 Aug 2026 reached no verdict either way (score 4). Too little was captured to judge it, which is an unknown rather than a pass.

How was www.28777886.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.28777886.com - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned www.28777886.com and returned a unknown verdict (score 4), categorised as suspicious-infrastructure. The page resolved to 58.64.191.38 on NWT iDC Data Service in HK. 1 domain and 1 IP were contacted. The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 4) · Confidence 10%
Scanned URL: http://28777886.com/Lpf/UPFILE/userfiles/files/19260132714.pdf
Domain: www.28777886.com · IP: 58.64.191.38 · AS17444 · HK
Server: Apache/2.4.58 (Unix) OpenSSL/3.5.2 PHP/8.3.25
Page title: 404 Not Found
HTTP status: 404 · text/html; charset=iso-8859-1
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Sep 20 07: · subject CN=www.28777886.com
Scan tier: standard · observed 2026-08-20 10:32:16 UTC

Redirect chain

http://28777886.com/Lpf/UPFILE/userfiles/files/19260132714.pdf
https://www.28777886.com/Lpf/UPFILE/userfiles/files/19260132714.pdf

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Algorithmically-generated (DGA-like) hostname
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Apache

Contacted infrastructure

58.64.191.38 - AS17444 NWT iDC Data Service (Hong Kong)

Observed indicators

www.28777886.com
58.64.191.38
https://www.28777886.com/Lpf/UPFILE/userfiles/files/19260132714.pdf

Questions about www.28777886.com

Is www.28777886.com safe?: The scan of www.28777886.com on 20 Aug 2026 reached no verdict either way (score 4). Too little was captured to judge it, which is an unknown rather than a pass.
How was www.28777886.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.28777886.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan