The scan of www.163.com on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.163.com?

2 analysed samples communicate with this URL, including AntiVM.

How was www.163.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.163.com - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned www.163.com and returned a unknown verdict (score 6). The page resolved to 47.246.41.179 on Alibaba Cloud LLC in AU. The domain was registered 10569 days ago through MarkMonitor Information Technology (Shanghai) Co., Ltd.. 1 domain and 2 IPs were contacted. 2 malware samples communicate with this URL (AntiVM). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: https://163.com/
Domain: www.163.com · IP: 47.246.41.179 · AS24429 · AU
Server: Tengine
HTTP status: 200 · text/html; charset=utf-8
Registrar: MarkMonitor Information Technology (Shanghai) Co., Ltd. · domain age 10569 days · created 1997-09-15
Scan tier: fast · observed 2026-08-23 18:32:22 UTC

Redirect chain

https://163.com/
http://www.163.com/

Malware communicating with this URL (2)

These samples were observed contacting or being served from www.163.com. Each links to its full analysis.

3e940b6a9517f68141ae3944dd7c3f1cd1ba1e642730ec7f0ca6b0888a6ebffe - referenced · 3e940b6a9517f68141ae3944dd7c3f1c · first seen 2026-08-23
AntiVM - referenced · 257d968d7d78362779f32e3223545e96 · first seen 2026-08-18

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Contacted infrastructure

47.246.41.179 - AS24429 Alibaba Cloud LLC (Australia)
59.111.160.244 - AS45062 Guangzhou NetEase Computer System Co., Ltd (China)

Observed indicators

www.163.com
47.246.41.179
59.111.160.244
http://www.163.com/

Questions about www.163.com

Is www.163.com safe?: The scan of www.163.com on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with www.163.com?: 2 analysed samples communicate with this URL, including AntiVM.
How was www.163.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.163.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan