No. MalwareAnalyzer scanned csc0516.com on 19 Aug 2026 and returned a suspicious verdict with a score of 22 out of 100, categorised as suspicious-infrastructure. Treat it as hostile until it is re-checked.

What malware is associated with csc0516.com?

4 analysed samples communicate with this URL, including Phishing.

How was csc0516.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

csc0516.com - suspicious URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned csc0516.com and returned a suspicious verdict (score 22), categorised as suspicious-infrastructure. The page resolved to 154.204.216.87 on CloudFly Net Inc in HK. The domain was registered 4729 days ago through Gname.com Pte. Ltd.. 5 domains and 1 IP were contacted, over 2 HTTP requests. 4 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 22) · Confidence 28%
Scanned URL: http://csc0516.com/userfiles/file/20210904133218_mpes7b.pdf
Domain: csc0516.com · IP: 154.204.216.87 · AS135097 · HK
Server: openresty
Page title: Z8Z8.CN:易记网址
HTTP status: 403 · text/html; charset=UTF-8
Registrar: Gname.com Pte. Ltd. · domain age 4729 days · created 2013-09-07
HTTP requests captured: 2
Scan tier: fast · observed 2026-08-19 16:22:08 UTC

Malware communicating with this URL (4)

These samples were observed contacting or being served from csc0516.com. Each links to its full analysis.

Phishing - referenced · f95a8a1122608c9c8f958f77d5fd5de6 · first seen 2026-08-19
Phishing - referenced · 983a03b80dca91cad916c4a349989616 · first seen 2026-08-17
Phishing - referenced · 94ae753d6e8658f3caf1d02ccc634c72 · first seen 2026-08-16
Phishing - referenced · c3d11356a557c93f3c80edaccaaff9a6 · first seen 2026-08-13

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Algorithmically-generated (DGA-like) hostname
Served over plaintext HTTP

Contacted infrastructure

154.204.216.87 - AS135097 CloudFly Net Inc (Hong Kong)

Observed indicators

csc0516.com
hm.baidu.com
zz.bdstatic.com
push.zhanzhang.baidu.com
node32.aizhantj.com
154.204.216.87
http://csc0516.com/userfiles/file/20210904133218_mpes7b.pdf
https://hm.baidu.com/hm.js?f456b15d5db02908f706660af0504833
https://zz.bdstatic.com/linksubmit/push.js
http://push.zhanzhang.baidu.com/push.js
https://node32.aizhantj.com:21233/tjjs/?k=snrw5dbmaej
http://csc0516.com/public/img/favicon-144x144.png
http://csc0516.com/zhuce5.js
http://csc0516.com/tj.js

Other scans of csc0516.com (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

17 Aug 2026 - suspicious · http://csc0516.com/userfiles/file/20210622165358_m2ioom.pdf
16 Aug 2026 - suspicious · http://csc0516.com/userfiles/file/20210903103209_1lx2zx.pdf

Questions about csc0516.com

Is csc0516.com safe?: No. MalwareAnalyzer scanned csc0516.com on 19 Aug 2026 and returned a suspicious verdict with a score of 22 out of 100, categorised as suspicious-infrastructure. Treat it as hostile until it is re-checked.
What malware is associated with csc0516.com?: 4 analysed samples communicate with this URL, including Phishing.
How was csc0516.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of csc0516.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan