www.qq.com - suspicious URL scan, 17 Aug 2026
MalwareAnalyzer by Cyble scanned www.qq.com and returned a suspicious verdict (score 28). The page resolved to 43.168.224.173 on ACEVILLE PTE.LTD. in SG. 59 domains and 1 IP were contacted, over 7 HTTP requests. 7 malware samples communicate with this URL (UPX). This is a point-in-time observation from 17 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 28) · Confidence 34%
- Scanned URL:
https://www.qq.com/ - Domain: www.qq.com · IP: 43.168.224.173 · SG
- Server: tRPC-Gateway
- Page title: 腾讯网
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 OV TLS CA 2026 Q1 · valid to Oct 9 07: · subject C=CN, ST=Guangdong, L=Shenzhen, O=Shenzhen Tencent Computer Systems Company Limited, CN=*.inews.qq.com
- Evidenced operator: Shenzhen Tencent Computer Systems Company Limited
- HTTP requests captured: 7
- Scan tier: fast · observed 2026-08-17 11:17:42 UTC
Malware communicating with this URL (7)
These samples were observed contacting or being served from www.qq.com. Each links to its full analysis.
- UPX - referenced ·
f1b30e1e8224af3dde100c1ec1180c64· first seen 2026-08-17 - UPX - referenced ·
3a4a008f2a8f54387272522e8fcd242e· first seen 2026-08-16 - UPX - referenced ·
2d3fe615219613f8658193512fa3ea84· first seen 2026-08-16 - UPX - referenced ·
c0fdf15da0e4aef98371f262400bc3ba· first seen 2026-08-15 - UPX - referenced ·
0a2f8f406612a475fe665c13c5dad71b· first seen 2026-08-13 - UPX - referenced ·
ba47329a6787cdc7337c5e039183e1bf· first seen 2026-08-13 - UPX - referenced ·
101799fca22dec1c23fe8624f0d12f35· first seen 2026-08-12
Antivirus & YARA (1 of 47 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Antivirus/YARA detection in page content: DLV_HTML_Smuggling
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- React
Contacted infrastructure
- 43.168.224.173 ACEVILLE PTE.LTD. (Singapore)
Observed indicators
- www.qq.com
- mat1.gtimg.com
- xw.qq.com
- qq.com
- inews.gtimg.com
- mail.qq.com
- news.qq.com
- v.qq.com
- sports.qq.com
- qqgame.qq.com
- bzpt.shdf.gov.cn
- new.qq.com
- rmfygg.court.gov.cn
- www.12377.cn
- info.e.qq.com
- 110.qq.com
- gongyi.qq.com
- weixin.qq.com
- im.qq.com
- browser.qq.com
Other scans of www.qq.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - suspicious
- 23 Aug 2026 - unknown ·
https://qzone.qq.com/ - 23 Aug 2026 - unknown ·
https://qzs.qq.com/ - 23 Aug 2026 - suspicious
- 23 Aug 2026 - suspicious
- 22 Aug 2026 - suspicious ·
https://www.tencent.com/ - 22 Aug 2026 - suspicious
- 21 Aug 2026 - suspicious
- 19 Aug 2026 - suspicious
- 17 Aug 2026 - unknown ·
https://accounts.qq.com/
Questions about www.qq.com
- Is www.qq.com safe?
- No. MalwareAnalyzer scanned www.qq.com on 17 Aug 2026 and returned a suspicious verdict with a score of 28 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.qq.com?
- 7 analysed samples communicate with this URL, including UPX.
- How was www.qq.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.qq.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan