Is wsospice.org safe?

The scan of wsospice.org on 22 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with wsospice.org?

4 analysed samples communicate with this URL, including Phishing.

How was wsospice.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

wsospice.org - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned wsospice.org and returned a unknown verdict (score 8). The page resolved to 103.108.117.71 on Chl Technology in IN. The domain was registered 5632 days ago through PDR Ltd. d/b/a PublicDomainRegistry.com. 1 domain and 1 IP were contacted, over 11 HTTP requests. 4 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 8) · Confidence 11%
Scanned URL: http://wsospice.org/uploads/userfiles/file/file/27340117237.pdf
Domain: wsospice.org · IP: 103.108.117.71 · AS136375 · IN
Server: nginx/1.24.0 (Ubuntu)
Page title: 404: This page could not be found.
HTTP status: 404 · text/html; charset=utf-8
Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com · domain age 5632 days · created 2011-03-22
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Nov 4 02: · subject CN=www.wsospice.org
HTTP requests captured: 11
Scan tier: standard · observed 2026-08-22 13:09:36 UTC

Redirect chain

http://wsospice.org/uploads/userfiles/file/file/27340117237.pdf
https://wsospice.org/uploads/userfiles/file/file/27340117237.pdf

Malware communicating with this URL (4)

These samples were observed contacting or being served from wsospice.org. Each links to its full analysis.

Phishing - referenced · 8a79341aebdbaabe3d0b03b44438c7f7 · first seen 2026-08-22
Phishing - referenced · 7eab00bb0d455fea627497cb32bdb597 · first seen 2026-08-19
Phishing - referenced · db813e9a8f4bfd37b977f1600e19bdd4 · first seen 2026-08-19
Phishing - referenced · 6c6ed7c81c06ae47b81b66e959973acd · first seen 2026-08-15

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Untrusted certificate (ERR_TLS_CERT_ALTNAME_INVALID)

Detected technologies

Nginx
Next.js

Contacted infrastructure

103.108.117.71 - AS136375 Chl Technology (India)

Observed indicators

wsospice.org
103.108.117.71
https://wsospice.org/uploads/userfiles/file/file/27340117237.pdf
https://wsospice.org/_next/static/css/5763dc15009a24dc.css
https://wsospice.org/_next/static/css/84f1c04155e73c96.css
https://wsospice.org/_next/static/chunks/webpack-249ee8d60dcfa91a.js
https://wsospice.org/_next/static/chunks/fd9d1056-48ee5128385b3da0.js
https://wsospice.org/_next/static/chunks/7023-5b51929e005cf27f.js
https://wsospice.org/_next/static/chunks/main-app-f117847bcf0d4581.js
https://wsospice.org/_next/static/chunks/160b575a-851aa3c4d3630e6a.js
https://wsospice.org/_next/static/chunks/998-83650ce2400163ca.js
https://wsospice.org/_next/static/chunks/3580-e52bf78e1cdb5ad3.js
https://wsospice.org/_next/static/chunks/6970-85b1be7fcf11f53a.js
https://wsospice.org/_next/static/chunks/app/layout-9ed60d439b11c6fb.js
https://wsospice.org/_next/static/chunks/app/loading-45b288b289c8379f.js
https://wsospice.org/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js

Other scans of wsospice.org (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown

Questions about wsospice.org

Is wsospice.org safe?: The scan of wsospice.org on 22 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with wsospice.org?: 4 analysed samples communicate with this URL, including Phishing.
How was wsospice.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of wsospice.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan