Scan report · 2 months agoPublic
Verdict

What happened

Step by step, from what the scanner recorded.
Load 1.8 s · 1 requests
01 · Visitor opensou4.live/qqtime_56b647b_1/ff4f3cb471…4a8f83140466f89.js?detph1=0
02 · Redirected · 1 hopSame host, another address/qqtime_56b647b_1/ff4f3cb471…4a8f83140466f89.js?detph1=0
03 · Page shown
ou4.live
04 · File delivered · malicious38a0ef81-6490-4b19-bd2a-e901684dcb30.js

Dangerous — confirmed threat

Automated

The file it serves was analysed and found malicious. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first
MalwareMalware found in the downloaded file
38a0ef81-6490-4b19-bd2a-e901684dcb30.js

Our Content Inspection engine downloaded the file this URL serves and analyzed it as a real payload — it matched known malware. Do not open or run this file.

Success

SHA-256 593548d714f6d48acb886d42bf576d8fd6b1ddae6f888dda0719671a53463663

File

Stored by the engine

What you download may be live malware. Open it only in an isolated environment, and do not double-click it.

The ZIP is encrypted. Password:infected

Inside the ZIP the file carries a name the engine generated, not the one the page used.

Downloaded fileMaliciousThe engine stored it under a generated name

SHA-256593548d714f6d48acb886d42bf576d8fd6b1ddae6f888dda0719671a53463663

Infrastructure

IP
188.114.96.1CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
Redirects
0 hops · /qqtime_56b647b_1/ff4f3cb471…4a8f83140466f89.js?detph1=0 → /qqtime_56b647b_1/ff4f3cb471…4a8f83140466f89.js?detph1=0

WHOIS

Registrar
Amazon Registrar, Inc.
Created
Jul 11, 2026
Expires
Jul 11, 2027
Nameservers
maeve.ns.cloudflare.comtrace.ns.cloudflare.com
2 malicious1 suspicious

Hashes & fingerprints

Page capture

Live

Engines

6 · time to verdict

Page

HTTP
200 · Completed
Load
1.78 s · 1 requests
Stack · 2CloudflareHTTP/3