a.cf - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned a.cf and returned a unknown verdict (score 12). 1 domain and 0 IPs were contacted. 5 malware samples communicate with this URL (Zusy). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 18%
- Scanned URL:
https://a.cf/ - Domain: a.cf
- Scan tier: fast · observed 2026-08-23 15:02:29 UTC
Malware communicating with this URL (5)
These samples were observed contacting or being served from a.cf. Each links to its full analysis.
- Zusy - referenced ·
9d16d0ea3f592f9e0306399efe56e787· first seen 2026-08-23 - f6af62a824df8438e7120c70b5f85c7974c702d7e76d855d95bfa8d12b63868b - referenced ·
f6af62a824df8438e7120c70b5f85c79· first seen 2026-08-23 - 06cf684b0e9c52fe9c3ad6503b4e906c3984ea6d7dbb983db367d3654fea500e - referenced ·
06cf684b0e9c52fe9c3ad6503b4e906c· first seen 2026-08-21 - 243872184-lbx__pt_br.js - referenced ·
1d643e4b93da79c302afdc8dab7b357a· first seen 2026-08-16 - 201988111-lbx__pt_br.js - referenced ·
d31bce676025d141cccecf7dcad29d2a· first seen 2026-08-14
Why this verdict
- Abuse-heavy TLD .cf
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- a.cf
- https://a.cf/
Questions about a.cf
- Is a.cf safe?
- The scan of a.cf on 23 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with a.cf?
- 5 analysed samples communicate with this URL, including Zusy.
- How was a.cf checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of a.cf
Scanned on MalwareAnalyzer by Cyble · Open interactive scan