s.us - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned s.us and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 22 malware samples communicate with this URL (Vmprotect). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://s.us/ - Domain: s.us
- Scan tier: fast · observed 2026-08-23 12:32:29 UTC
Malware communicating with this URL (22)
These samples were observed contacting or being served from s.us. Each links to its full analysis.
- Vmprotect - referenced ·
08e4c37ba1e0a52ae98d437c7050008d· first seen 2026-08-23 - Vmprotect - referenced ·
8d4d7eaab88b2563050a7a29582939dc· first seen 2026-08-23 - Vmprotect - referenced ·
c5763394a4bfeba567b7d0daacf3a88d· first seen 2026-08-23 - Vmprotect - referenced ·
90c9b5b25b3d8478354a55b11682ebb6· first seen 2026-08-21 - Vmprotect - referenced ·
d9fb9a0cd60dc990eb04eb16e1eaa35e· first seen 2026-08-21 - Vmprotect - referenced ·
a846aa4dcc7a768edf5664a45d413438· first seen 2026-08-21 - Vmprotect - referenced ·
183a2ecc3b2c9bcdc512931b62b798c3· first seen 2026-08-19 - 8db6490330bba0c5cfbb1700025b19ea15435ad3ade60ba15f0548584daae0f8.jar - referenced ·
8db6490330bba0c5cfbb1700025b19ea· first seen 2026-08-19 - Vmprotect - referenced ·
d87c56056f2eec90684185b8969fed7b· first seen 2026-08-19 - Vmprotect - referenced ·
9433036ce38fdcf91d92308d7dc4befe· first seen 2026-08-17 - Vmprotect - referenced ·
ecb93e8292d82dd6f4bf6dc262bd6d0d· first seen 2026-08-16 - Vmprotect - referenced ·
f727e6ee78a99f09ed318c6b9c474a47· first seen 2026-08-16 - Vmprotect - referenced ·
65fbda91a9a7cfd177868f7819c16590· first seen 2026-08-16 - Vmprotect - referenced ·
a27819aff7856778e1ee21ca9cb6d519· first seen 2026-08-15 - Vmprotect - referenced ·
3b410297982790e381976c20ec868cfa· first seen 2026-08-15
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- s.us
- https://s.us/
Other scans of s.us (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 17 Aug 2026 - unknown
- 16 Aug 2026 - unknown
- 16 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 12 Aug 2026 - unknown
- 11 Aug 2026 - unknown
Questions about s.us
- Is s.us safe?
- The scan of s.us on 23 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with s.us?
- 22 analysed samples communicate with this URL, including Vmprotect.
- How was s.us checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of s.us
Scanned on MalwareAnalyzer by Cyble · Open interactive scan