halobysciton.com - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned halobysciton.com and returned a unknown verdict (score -12). The page resolved to 3.33.251.168 on Amazon Technologies Inc. in US. The domain was registered 4552 days ago through GoDaddy.com, LLC. 1 domain and 1 IP were contacted. 15 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://halobysciton.com/wp-content/plugins/formcraft/file-upload/server/content/files/1613df98fba375---bebitaxuz.pdf - Domain: halobysciton.com · IP: 3.33.251.168 · AS16509 · US
- HTTP status: 404 · text/plain; charset=utf-8
- Registrar: GoDaddy.com, LLC · domain age 4552 days · created 2014-03-07
- TLS issuer: C=US, O=GoDaddy.com, CN=GoDaddy TLS Intermediate CA DV - R1v1 · valid to Jan 28 05: · subject CN=halobysciton.com
- Scan tier: fast · observed 2026-08-23 16:26:09 UTC
Malware communicating with this URL (15)
These samples were observed contacting or being served from halobysciton.com. Each links to its full analysis.
- 163628915e4d6911bb8785c65558dcfa0ed92c9cd11c93de6f852400cd6e6454 - referenced ·
163628915e4d6911bb8785c65558dcfa· first seen 2026-08-23 - Phishing - referenced ·
3cdcd0a581b561d6e2c2f38a19c3abe8· first seen 2026-08-23 - Phishing - referenced ·
321ce888c3cb381ded88061e56230b09· first seen 2026-08-21 - Phishing - referenced ·
c5b29dd9864f8e6ba1abf02e73ea149f· first seen 2026-08-21 - Phishing - referenced ·
76ae1520665e1c83a4be54f5896fe99d· first seen 2026-08-19 - Phishing - referenced ·
4eb109ffe81ef0c85857b1c2a08beb66· first seen 2026-08-19 - Phishing - referenced ·
eff80e01a9e3537543ee6c3faca3b0ed· first seen 2026-08-16 - Phishing - referenced ·
98da1183fea1a1962a3413eff371a345· first seen 2026-08-16 - Phishing - referenced ·
f94a208cb8620f9be864b3c64f21e9a1· first seen 2026-08-15 - Phishing - referenced ·
fce9f3762c30d2a7cbbf3ecbe4bb514f· first seen 2026-08-15 - Phishing - referenced ·
1bdc574cd9bbd864d0353453c51a2a5d· first seen 2026-08-15 - Phishing - referenced ·
f67bc4cf745b9c10210fdb983a5354f0· first seen 2026-08-15 - Phishing - referenced ·
5d171e21bb9badee3d6b1990146e73ed· first seen 2026-08-15 - Phishing - referenced ·
82a0617d426193c2a91aea7a8b8b1ba5· first seen 2026-08-14 - Phishing - referenced ·
d1d70ed260f0c18fb6b061570d695d0b· first seen 2026-08-13
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 3.33.251.168 - AS16509 Amazon Technologies Inc. (United States)
Observed indicators
- halobysciton.com
- 3.33.251.168
- https://halobysciton.com/wp-content/plugins/formcraft/file-upload/server/content/files/1613df98fba375---bebitaxuz.pdf
Other scans of halobysciton.com (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - unknown ·
https://halobysciton.com/wp-content/plugins/formcraft/file-upload/server/content/files/16144ca3c20f3 - 15 Aug 2026 - unknown ·
https://halobysciton.com/wp-content/plugins/formcraft/file-upload/server/content/files/160756d6f6ab0 - 15 Aug 2026 - unknown ·
https://halobysciton.com/wp-content/plugins/formcraft/file-upload/server/content/files/160a3fb4168ad
Questions about halobysciton.com
- Is halobysciton.com safe?
- The scan of halobysciton.com on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with halobysciton.com?
- 15 analysed samples communicate with this URL, including Phishing.
- How was halobysciton.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of halobysciton.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan