The scan of core.cc on 24 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with core.cc?

6 analysed samples communicate with this URL, including 0day, Delf, Ulise.

How was core.cc checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

core.cc - URL scan, 24 Aug 2026

MalwareAnalyzer by Cyble scanned core.cc and returned a unknown verdict (score 8). The page resolved to 94.23.162.9 on OVH GmbH in FR. The domain was registered 7799 days ago through OVH sas. 1 domain and 1 IP were contacted. 6 malware samples communicate with this URL (0day, Delf, Ulise). This is a point-in-time observation from 24 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 8) · Confidence 11%
Scanned URL: https://core.cc/
Domain: core.cc · IP: 94.23.162.9 · AS16276 · FR
Server: Apache
Page title: core.cc
HTTP status: 200 · text/html
Registrar: OVH sas · domain age 7799 days · created 2005-04-16
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 18 09: · subject CN=cluster121.hosting.ovh.net
Scan tier: fast · observed 2026-08-24 04:37:28 UTC

Malware communicating with this URL (6)

These samples were observed contacting or being served from core.cc. Each links to its full analysis.

0day - referenced · 1e4dee784d077e193576cb726507a549 · first seen 2026-08-24
0day - referenced · 96c234261ed29a340c8e75e807f2cb79 · first seen 2026-08-23
Delf - referenced · 0bedadf9dcb2337d6825d9f393f54a5a · first seen 2026-08-21
0day - referenced · 93c58887d866716260fe96ebd2d9bcfe · first seen 2026-08-20
0day - referenced · 1916bcfd18745e4980bec361aaf8c048 · first seen 2026-08-17
Ulise - referenced · a46fbd1a76e682c6147b988e4660eaba · first seen 2026-08-12

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Untrusted certificate (ERR_TLS_CERT_ALTNAME_INVALID)

Detected technologies

Apache

Contacted infrastructure

94.23.162.9 - AS16276 OVH GmbH (France)

Observed indicators

core.cc
94.23.162.9
https://core.cc/

Other scans of core.cc (4)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown
20 Aug 2026 - unknown
17 Aug 2026 - unknown
12 Aug 2026 - unknown

Questions about core.cc

Is core.cc safe?: The scan of core.cc on 24 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with core.cc?: 6 analysed samples communicate with this URL, including 0day, Delf, Ulise.
How was core.cc checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of core.cc

Scanned on MalwareAnalyzer by Cyble · Open interactive scan