cdn.sqhk.co - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned cdn.sqhk.co and returned a unknown verdict (score -12). The page resolved to 104.21.38.14 on Cloudflare, Inc. in US. 2 domains and 1 IP were contacted, over 1 HTTP request. 2236 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://cdn.sqhk.co/fejisedetu/iiDgiRs/garupomibimukomibelupumux.pdf - Domain: cdn.sqhk.co · IP: 104.21.38.14 · AS13335 · US
- Server: cloudflare
- HTTP status: 403 · text/html
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 16 19: · subject CN=sqhk.co
- HTTP requests captured: 1
- Scan tier: fast · observed 2026-08-24 07:06:05 UTC
Malware communicating with this URL (2236)
These samples were observed contacting or being served from cdn.sqhk.co. Each links to its full analysis.
- Phishing - referenced ·
03eca8a1150848bcc81e9894c1634ea1· first seen 2026-08-24 - Phishing - referenced ·
d222053fd358a3662b8afe1eb23d0df6· first seen 2026-08-24 - Phishing - referenced ·
61cbbf14e8f196b7608f3030d0d95905· first seen 2026-08-24 - Phishing - referenced ·
e7b4187afa5bb6025ee94d98acaba3ac· first seen 2026-08-24 - Phishing - referenced ·
fc2a3ad51135092c632553dbd38e40e0· first seen 2026-08-24 - Phishing - referenced ·
c02f897379bbf5749d2686c4e35f25a4· first seen 2026-08-24 - Phishing - referenced ·
4a4e0923e299c111f0989c7933e47969· first seen 2026-08-24 - Phishing - referenced ·
5fc6ca01633933c205a9a013b837564f· first seen 2026-08-24 - Phishing - referenced ·
061cac3e63307ce19190db704d0393eb· first seen 2026-08-23 - Phishing - referenced ·
80c318e5b0d531cf153217252d40e12c· first seen 2026-08-23 - Phishing - referenced ·
90f93dde9a4eff53be507d6d94c552a9· first seen 2026-08-23 - Phishing - referenced ·
b552672b9f5740e485ce680b1ea0a2e1· first seen 2026-08-23 - Phishing - referenced ·
45464607e404c36ecb0411f7267cfa96· first seen 2026-08-23 - Phishing - referenced ·
12c75eed999f41c7133dac475fcf5485· first seen 2026-08-23 - Phishing - referenced ·
a6a4dc18b0c978c642d5c726558ab050· first seen 2026-08-23
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Amazon CloudFront
- Cloudflare Insights
Contacted infrastructure
- 104.21.38.14 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- cdn.sqhk.co
- static.cloudflareinsights.com
- 104.21.38.14
- https://cdn.sqhk.co/fejisedetu/iiDgiRs/garupomibimukomibelupumux.pdf
- https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496
Other scans of cdn.sqhk.co (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/demarumiju/hCrauun/instagram_captions_for_guys_rap.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/dizoketa/EqhagPf/63982899510.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/dizoketa/EqhagPf/63982899510.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/lotidonita/aV9HhdO/numiw.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/xusawikorut/pOihPYr/tunerexunezega.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/lotidonita/aV9HhdO/numiw.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/kurotevu/ikiauXt/city_island_airport_2_hack_apk.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/mujekesire/ihcibhc/21705457769.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/jizapamilizo/jeshgjf/cbr_test_practical.pdf - 24 Aug 2026 - unknown ·
https://cdn.sqhk.co/gitovera/lWFNzgh/dog_simulator_online_no_download.pdf
Questions about cdn.sqhk.co
- Is cdn.sqhk.co safe?
- The scan of cdn.sqhk.co on 24 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with cdn.sqhk.co?
- 2236 analysed samples communicate with this URL, including Phishing.
- How was cdn.sqhk.co checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of cdn.sqhk.co
Scanned on MalwareAnalyzer by Cyble · Open interactive scan