Is xendash-wild-amazon-admin.pages.dev safe?

No. MalwareAnalyzer scanned xendash-wild-amazon-admin.pages.dev on 20 Aug 2026 and returned a malicious verdict with a score of 66 out of 100. Treat it as hostile until it is re-checked.

How was xendash-wild-amazon-admin.pages.dev checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

xendash-wild-amazon-admin.pages.dev - malicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned xendash-wild-amazon-admin.pages.dev and returned a malicious verdict (score 66). The page resolved to 172.66.47.89 on Cloudflare, Inc. in US. The domain was registered 2178 days ago through CloudFlare, Inc.. 3 domains and 2 IPs were contacted, over 8 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 66) · Confidence 75%
Scanned URL: https://xendash-wild-amazon-admin.pages.dev/
Domain: xendash-wild-amazon-admin.pages.dev · IP: 172.66.47.89 · AS13335 · US
Server: cloudflare
HTTP status: 200 · text/html; charset=utf-8
Registrar: CloudFlare, Inc. · domain age 2178 days · created 2020-09-02
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 17 22: · subject CN=xendash-wild-amazon-admin.pages.dev
HTTP requests captured: 8 · outgoing links: 5
Scan tier: standard · observed 2026-08-20 07:56:05 UTC

Antivirus & YARA (2 of 47 engines)

YARA: delivr.to detections [yara]: DLV_Maldoc_VBA_AutoExec (page content)
YARA: Stratosphere IPS [yara]: STRATO_Tor_Onion_C2 (page content)

Why this verdict

3 antivirus/YARA engines flagged the page content: DLV_Maldoc_VBA_AutoExec, DLV_HTML_Smuggling, STRATO_Tor_Onion_C2
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago

Detected technologies

Cloudflare

Contacted infrastructure

172.66.47.89 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

xendash-wild-amazon-admin.pages.dev
cdn.ckeditor.com
cdn.wild-amazon.com
172.66.47.89
108.158.32.92
https://xendash-wild-amazon-admin.pages.dev/
https://cdn.ckeditor.com/4.22.1/standard-all/ckeditor.js
https://xendash-wild-amazon-admin.pages.dev/assets/index-e29896d1.js
https://xendash-wild-amazon-admin.pages.dev/assets/index-6455e8db.css

Questions about xendash-wild-amazon-admin.pages.dev

Is xendash-wild-amazon-admin.pages.dev safe?: No. MalwareAnalyzer scanned xendash-wild-amazon-admin.pages.dev on 20 Aug 2026 and returned a malicious verdict with a score of 66 out of 100. Treat it as hostile until it is re-checked.
How was xendash-wild-amazon-admin.pages.dev checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of xendash-wild-amazon-admin.pages.dev

Scanned on MalwareAnalyzer by Cyble · Open interactive scan