a.pw - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned a.pw and returned a unknown verdict (score 8). The page resolved to 74.207.241.245 on Linode in US. The domain was registered 4930 days ago through West263 International Limited. 1 domain and 1 IP were contacted. 2 malware samples communicate with this URL (Zusy). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 8) · Confidence 11%
- Scanned URL:
https://a.pw/ - Domain: a.pw · IP: 74.207.241.245 · AS63949 · US
- Server: openresty/1.29.2.5
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: West263 International Limited · domain age 4930 days · created 2013-02-18
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Sep 28 07: · subject CN=a.pw
- Scan tier: fast · observed 2026-08-19 18:26:16 UTC
Malware communicating with this URL (2)
These samples were observed contacting or being served from a.pw. Each links to its full analysis.
- Zusy - referenced ·
6b783a0d090f5b202b7e6be6473e5bee· first seen 2026-08-19 - 243872184-lbx__pt_br.js - referenced ·
1d643e4b93da79c302afdc8dab7b357a· first seen 2026-08-16
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Untrusted certificate (UNABLE_TO_GET_ISSUER_CERT_LOCALLY)
Contacted infrastructure
- 74.207.241.245 - AS63949 Linode (United States)
Observed indicators
- a.pw
- 74.207.241.245
- https://a.pw/
Questions about a.pw
- Is a.pw safe?
- The scan of a.pw on 19 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with a.pw?
- 2 analysed samples communicate with this URL, including Zusy.
- How was a.pw checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of a.pw
Scanned on MalwareAnalyzer by Cyble · Open interactive scan