ycstamping.com.tw - suspicious URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned ycstamping.com.tw and returned a suspicious verdict (score 20), categorised as suspicious-infrastructure. The page resolved to 103.17.8.39 on Yuan-Jhen Info., Co., Ltd in TW. 1 domain and 1 IP were contacted. 5 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 20) · Confidence 26%
- Scanned URL:
http://ycstamping.com.tw/image/data/files/daily-free-spin-and-coin_GM406889139.pdf - Domain: ycstamping.com.tw · IP: 103.17.8.39 · AS131149 · TW
- Server: Apache
- Page title: 404 Page Not Found
- HTTP status: 404 · text/html; charset=UTF-8
- Scan tier: fast · observed 2026-08-21 22:50:52 UTC
Malware communicating with this URL (5)
These samples were observed contacting or being served from ycstamping.com.tw. Each links to its full analysis.
- 3d41b175cacafbf0d6194d5e6023e93540b4b99aaee46a5eec33b7eae739112f - referenced ·
3d41b175cacafbf0d6194d5e6023e935· first seen 2026-08-21 - 6c086ed17b6895ddf60fd94a3c1c27f15c6ae0e578f3e70040e7ab7f14af1fa0 - referenced ·
6c086ed17b6895ddf60fd94a3c1c27f1· first seen 2026-08-20 - free-roblox-avatar_GM431946152.pdf - referenced ·
4b71f760554b2f22b7854893106958ce· first seen 2026-08-16 - free-robux-co_GM431946152.pdf - referenced ·
566a9cc452829bdf6f28905d1dab55b4· first seen 2026-08-16 - 38b5af01d9ab441407b70bd4ca4467c9cdc52b0badb7c41f0b02b2a4fb0f7309 - referenced ·
38b5af01d9ab441407b70bd4ca4467c9· first seen 2026-08-13
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Categories
- suspicious-infrastructure
Why this verdict
- Algorithmically-generated (DGA-like) hostname
- Served over plaintext HTTP
Detected technologies
- Apache
Contacted infrastructure
- 103.17.8.39 - AS131149 Yuan-Jhen Info., Co., Ltd (Taiwan)
Observed indicators
- ycstamping.com.tw
- 103.17.8.39
- http://ycstamping.com.tw/image/data/files/daily-free-spin-and-coin_GM406889139.pdf
Other scans of ycstamping.com.tw (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/coin-master-2021-free-spins-link-2021_GM406889139.pdf - 21 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/completely-black-shirts-roblox-free_GM431946152.pdf - 21 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/how-to-hack-roblox-passwords_GM431946152.pdf - 20 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/tiktok-free-video-download_GM835599320.pdf - 20 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/best-site-for-free-coin-master-free-spins_GM406889139.pdf - 20 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/free-100-robux_GM431946152.pdf - 20 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/how-free-free-robux_GM431946152.pdf - 16 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/free-robux-no-verification-required_GM431946152.pdf - 16 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/cute-free-roblox-outfits_GM431946152.pdf - 16 Aug 2026 - suspicious ·
http://ycstamping.com.tw/image/data/files/cm-free-spins-and-coins_GM406889139.pdf
Questions about ycstamping.com.tw
- Is ycstamping.com.tw safe?
- No. MalwareAnalyzer scanned ycstamping.com.tw on 21 Aug 2026 and returned a suspicious verdict with a score of 20 out of 100, categorised as suspicious-infrastructure. Treat it as hostile until it is re-checked.
- What malware is associated with ycstamping.com.tw?
- 5 analysed samples communicate with this URL.
- How was ycstamping.com.tw checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of ycstamping.com.tw
Scanned on MalwareAnalyzer by Cyble · Open interactive scan