symisc.net - suspicious URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned symisc.net and returned a suspicious verdict (score 28). The page resolved to 104.21.73.254 on Cloudflare, Inc. in US. 17 domains and 1 IP were contacted, over 6 HTTP requests. 1 malware sample communicates with this URL (Stantinko). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 28) · Confidence 34%
- Scanned URL:
https://symisc.net/ - Domain: symisc.net · IP: 104.21.73.254 · AS13335 · US
- Server: cloudflare
- Page title: Symisc Systems
- HTTP status: 200 · text/html; charset=utf8
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 12 00: · subject CN=symisc.net
- HTTP requests captured: 6
- Scan tier: fast · observed 2026-08-23 04:12:23 UTC
Malware communicating with this URL (1)
These samples were observed contacting or being served from symisc.net. Each links to its full analysis.
- Stantinko - referenced ·
6a11283ce3f2321737f0be1a95238214· first seen 2026-08-23
Antivirus & YARA (1 of 48 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Antivirus/YARA detection in page content: DLV_HTML_Smuggling
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- jQuery
- Bootstrap
- Cloudflare Insights
Contacted infrastructure
- 104.21.73.254 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- symisc.net
- cdn.jsdelivr.net
- sod.pixlab.io
- unqlite.symisc.net
- ph7.symisc.net
- jx9.symisc.net
- vedis.symisc.net
- faceio.net
- pixlab.io
- cdn.faceio.net
- github.com
- www.facebook.com
- twitter.com
- www.linkedin.com
- blog.pixlab.io
- cdnjs.cloudflare.com
- static.cloudflareinsights.com
- 104.21.73.254
- https://symisc.net/
- https://symisc.net/favicon.ico
Questions about symisc.net
- Is symisc.net safe?
- No. MalwareAnalyzer scanned symisc.net on 23 Aug 2026 and returned a suspicious verdict with a score of 28 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with symisc.net?
- 1 analysed samples communicate with this URL, including Stantinko.
- How was symisc.net checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of symisc.net
Scanned on MalwareAnalyzer by Cyble · Open interactive scan