f.name - URL scan, 14 Aug 2026
MalwareAnalyzer by Cyble scanned f.name and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 38 malware samples communicate with this URL. This is a point-in-time observation from 14 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://f.name/ - Domain: f.name
- Scan tier: fast · observed 2026-08-14 20:54:14 UTC
Malware communicating with this URL (38)
These samples were observed contacting or being served from f.name. Each links to its full analysis.
- a4269f5785e369c65c89fbc8e656e2f1116eb235924e017fdbdd6d80284e1ba1 - referenced ·
a4269f5785e369c65c89fbc8e656e2f1· first seen 2026-08-14 - 963e62c1598de29956924eb8354ffef3d5a257e7056a75edafefef2f3e27fa6d - referenced ·
963e62c1598de29956924eb8354ffef3· first seen 2026-08-14 - 910f85104601217cf1966e4957167fecfc7a620ced22c2b8f0714e0444be9ee7 - referenced ·
910f85104601217cf1966e4957167fec· first seen 2026-08-14 - cbe6e623a5e1a4afaa842e5f627042a9c24b2fef78e193aa169a6dfef59a4e99 - referenced ·
cbe6e623a5e1a4afaa842e5f627042a9· first seen 2026-08-14 - a23ddec978c2659a47bb84a62358dd550789a3194349a059c7e40e8b79ba67f8 - referenced ·
a23ddec978c2659a47bb84a62358dd55· first seen 2026-08-14 - e44ddf67bd3303bfc92f7eb5c7970cd96ce9ec8c3f9294ff6822bed060441eae - referenced ·
e44ddf67bd3303bfc92f7eb5c7970cd9· first seen 2026-08-14 - 2600cebc020ae61486a4149a9fb2217d7ec11efb8175951d2aa80622c77af742 - referenced ·
2600cebc020ae61486a4149a9fb2217d· first seen 2026-08-14 - 0b0c61804cc4a1789f87c3ba9ee56092b6d501ad7f2e9e0228f7d4d8f3789bda - referenced ·
0b0c61804cc4a1789f87c3ba9ee56092· first seen 2026-08-14 - ee1bae0b40a44b6be95b6291eab0ef2e1f8464af5e04754ab8594d5e2593ead7 - referenced ·
ee1bae0b40a44b6be95b6291eab0ef2e· first seen 2026-08-14 - b084933541e297d81640aa2e11f3c2ac40ff564a678ebbbaeff2e5f58da34425 - referenced ·
b084933541e297d81640aa2e11f3c2ac· first seen 2026-08-14 - f6002203812cb94929778aa44d7ac4f2a010c145ff21b580fe18a08fcc218d92 - referenced ·
f6002203812cb94929778aa44d7ac4f2· first seen 2026-08-14 - 3249447b70ba135fc67d5e77c20df07fba5dcf2eaa9003794fe5a34030435369 - referenced ·
3249447b70ba135fc67d5e77c20df07f· first seen 2026-08-14 - ebaa16017aca8d9d0b751d027380bbd497a6ff58ba90f9425932fb95b5b80062 - referenced ·
ebaa16017aca8d9d0b751d027380bbd4· first seen 2026-08-14 - 0f86cc0f4ee9e9f6d5d7f7f9a4242e26aee4432e2d636c9967e771942f511042 - referenced ·
0f86cc0f4ee9e9f6d5d7f7f9a4242e26· first seen 2026-08-14 - 636055e61b0b0d95fee2d57b8b541607ecb36f93079630f4e39fba7592c58871 - referenced ·
636055e61b0b0d95fee2d57b8b541607· first seen 2026-08-13
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- f.name
- https://f.name/
Other scans of f.name (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 12 Aug 2026 - unknown
Questions about f.name
- Is f.name safe?
- The scan of f.name on 14 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with f.name?
- 38 analysed samples communicate with this URL.
- How was f.name checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of f.name
Scanned on MalwareAnalyzer by Cyble · Open interactive scan