Is www.elsevier.support safe?

The scan of www.elsevier.support on 20 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with www.elsevier.support?

3 analysed samples communicate with this URL, including QQpass.

How was www.elsevier.support checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.elsevier.support - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned www.elsevier.support and returned a unknown verdict (score -6). The page resolved to 172.64.152.198 on Cloudflare, Inc. in US. 4 domains and 4 IPs were contacted, over 10 HTTP requests. 3 malware samples communicate with this URL (QQpass). The request followed 3 redirects before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -6) · Confidence 12%
Scanned URL: http://support.mendeley.com/customer/portal/articles/227955
Domain: www.elsevier.support · IP: 172.64.152.198 · AS13335 · US
Server: cloudflare
Page title: Mendeley Support Center
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 31 16: · subject CN=elsevier.support
HTTP requests captured: 10
Scan tier: fast · observed 2026-08-20 16:37:33 UTC

Redirect chain

http://support.mendeley.com/customer/portal/articles/227955
https://support.mendeley.com/customer/portal/articles/227955
https://service.elsevier.com/app/home/supporthub/mendeley/
https://www.elsevier.support/mendeley

Malware communicating with this URL (3)

These samples were observed contacting or being served from www.elsevier.support. Each links to its full analysis.

QQpass - referenced · 69cb6171f3bbfc5bbb6a46911a8e6bcf · first seen 2026-08-20
QQpass - referenced · f3bac5e643a73868a612f68e7bbcef11 · first seen 2026-08-19
QQpass - referenced · 812f5128071874e5333f08808fa30fd6 · first seen 2026-08-15

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Cross-host redirect chain

Detected technologies

Cloudflare
Amazon CloudFront
Next.js

Contacted infrastructure

172.64.152.198 - AS13335 Cloudflare, Inc. (United States)
162.159.130.86 - AS13335 Cloudflare, Inc. (United States)
162.159.133.86 - AS13335 Cloudflare, Inc. (United States)
147.154.237.60 - AS31898 Oracle Public Cloud (United Kingdom)

Observed indicators

www.elsevier.support
www.mendeley.com
www.relx.com
www.elsevier.com
172.64.152.198
162.159.130.86
162.159.133.86
147.154.237.60
https://www.elsevier.support/mendeley
https://www.elsevier.support/images/elsevier-favicon.png
https://www.elsevier.support/images/elsevier-apple-touch-icon.png
https://www.elsevier.support/_next/static/css/20b8a27088061fdd.css
https://www.elsevier.support/_next/static/css/409535052501c6fd.css
https://www.elsevier.support/_next/static/chunks/polyfills-42372ed130431b0a.js
https://www.elsevier.support/_next/static/chunks/webpack-7ce44e2fd3d4e99b.js
https://www.elsevier.support/_next/static/chunks/framework-ef8776bd50c27486.js
https://www.elsevier.support/_next/static/chunks/main-fe491be16d97a7aa.js
https://www.elsevier.support/_next/static/chunks/pages/_app-469fcd030dcfcc75.js
https://www.elsevier.support/_next/static/chunks/c2a77f4d-5e973698bcc8dc38.js
https://www.elsevier.support/_next/static/chunks/3433-83f5fd915f5a7642.js

Other scans of www.elsevier.support (7)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - unknown
21 Aug 2026 - unknown · https://www.elsevier.support/mendeley/answer/how-can-i-migrate-data-from-one-pc-to-another
20 Aug 2026 - unknown · https://www.elsevier.support/mendeley/answer/how-can-i-migrate-data-from-one-pc-to-another
19 Aug 2026 - unknown
19 Aug 2026 - unknown · https://www.elsevier.support/mendeley/answer/how-can-i-migrate-data-from-one-pc-to-another
15 Aug 2026 - unknown
15 Aug 2026 - unknown · https://www.elsevier.support/mendeley/answer/how-can-i-migrate-data-from-one-pc-to-another

Questions about www.elsevier.support

Is www.elsevier.support safe?: The scan of www.elsevier.support on 20 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with www.elsevier.support?: 3 analysed samples communicate with this URL, including QQpass.
How was www.elsevier.support checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.elsevier.support

Scanned on MalwareAnalyzer by Cyble · Open interactive scan