The scan of o.cn on 20 Aug 2026 reached no verdict either way (score -4). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with o.cn?

1 analysed samples communicate with this URL, including Zusy.

How was o.cn checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

o.cn - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned o.cn and returned a unknown verdict (score -4). The page resolved to 58.248.243.176 on United-Communications-Network-Technology-Co-Ltd, Guangzhou, Guangdong province in CN. 12 domains and 1 IP were contacted, over 6 HTTP requests. 1 malware sample communicates with this URL (Zusy). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -4) · Confidence 10%
Scanned URL: https://o.cn/
Domain: o.cn · IP: 58.248.243.176 · AS17622 · CN
Server: nginx/1.18.0
Page title: 广州都市圈网络科技有限公司
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 16 03: · subject CN=o.cn
HTTP requests captured: 6
Scan tier: fast · observed 2026-08-20 01:37:25 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from o.cn. Each links to its full analysis.

Zusy - referenced · 445f2abdf10e708beb4b5fe32bcd6d59 · first seen 2026-08-20

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago

Detected technologies

Nginx
PHP
jQuery

Contacted infrastructure

58.248.243.176 - AS17622 United-Communications-Network-Technology-Co-Ltd, Guangzhou, Guangdong province (China)

Observed indicators

o.cn
www.o.cn
www.gisocn.com
expe.gisocn.com
www.zhdgps.com
www.csgpc.org
www.cagis.org.cn
www.mnr.gov.cn
www.mohurd.gov.cn
www.mem.gov.cn
www.eyoucms.com
beian.miit.gov.cn
58.248.243.176
https://o.cn/
https://o.cn/css/swiper.min.css
https://o.cn/css/fullpage.css
https://o.cn/css/common.css
https://o.cn/?m=home&c=Lists&a=index&tid=1
https://o.cn/?m=home&c=Lists&a=index&tid=58
https://o.cn/?m=home&c=Lists&a=index&tid=61

Questions about o.cn

Is o.cn safe?: The scan of o.cn on 20 Aug 2026 reached no verdict either way (score -4). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with o.cn?: 1 analysed samples communicate with this URL, including Zusy.
How was o.cn checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of o.cn

Scanned on MalwareAnalyzer by Cyble · Open interactive scan