Is accounts.qq.com safe?

The scan of accounts.qq.com on 17 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with accounts.qq.com?

1 analysed samples communicate with this URL, including Zusy.

How was accounts.qq.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

accounts.qq.com - URL scan, 17 Aug 2026

MalwareAnalyzer by Cyble scanned accounts.qq.com and returned a unknown verdict (score -12). The page resolved to 43.129.2.81. 14 domains and 2 IPs were contacted, over 6 HTTP requests. 1 malware sample communicates with this URL (Zusy). The request followed 1 redirect before landing. This is a point-in-time observation from 17 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://aq.qq.com/cn2/findpsw/pc/pc_find_pwd_input_account?pw_type=0&aquin=
Domain: accounts.qq.com · IP: 43.129.2.81
Server: TAPISIX/2.2.2
Page title: QQ安全中心
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=DigiCert, Inc., CN=DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 · valid to Mar 19 23: · subject C=CN, ST=Guangdong Province, L=Shenzhen, O=Tencent Technology (Shenzhen) Company Limited, CN=accounts.qq.com
Evidenced operator: Tencent Technology (Shenzhen) Company Limited
HTTP requests captured: 6
Scan tier: fast · observed 2026-08-17 05:22:25 UTC

Redirect chain

https://aq.qq.com/cn2/findpsw/pc/pc_find_pwd_input_account?pw_type=0&aquin=
https://accounts.qq.com/

Malware communicating with this URL (1)

These samples were observed contacting or being served from accounts.qq.com. Each links to its full analysis.

Zusy - referenced · 1f18c536c4cea112a0b2c1491474481d · first seen 2026-08-17

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Contacted infrastructure

43.129.2.81 - AS132203 Asia Pacific Network Information Center, Pty. Ltd. (Hong Kong)

Observed indicators

accounts.qq.com
framework.cdn-go.cn
ok.gtimg.cn
qq-web.cdn-go.cn
npm.cdn-go.cn
security-web.cdn-go.cn
kf.qq.com
support.qq.com
www.tencent.com
ti.qq.com
www.qq.com
beian.miit.gov.cn
www.beian.gov.cn
imgcache.qq.com
43.129.2.81
43.129.152.57
https://accounts.qq.com/
https://framework.cdn-go.cn/AegisReport/v1.6.0/index.js
https://ok.gtimg.cn/public/aq/favicon.ico
https://qq-web.cdn-go.cn/qui/latest/qui/token.css

Questions about accounts.qq.com

Is accounts.qq.com safe?: The scan of accounts.qq.com on 17 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with accounts.qq.com?: 1 analysed samples communicate with this URL, including Zusy.
How was accounts.qq.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of accounts.qq.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan