f.name - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned f.name and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 176 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://f.name/ - Domain: f.name
- Scan tier: fast · observed 2026-08-21 17:48:27 UTC
Malware communicating with this URL (176)
These samples were observed contacting or being served from f.name. Each links to its full analysis.
- 55cd3816cf226101fc017e3942a699732d624ee44c56c0fdff3c212a0c9ec659 - referenced ·
55cd3816cf226101fc017e3942a69973· first seen 2026-08-21 - 2ae01bd94e0a86ef466b678abfe78646244efbce3a88f92fce268b24819a1673 - referenced ·
2ae01bd94e0a86ef466b678abfe78646· first seen 2026-08-21 - 3bc449f1ec7ee28010091fc8edad8205e36d72e69906eb48b1c1f2f92ddbcaaa - referenced ·
3bc449f1ec7ee28010091fc8edad8205· first seen 2026-08-21 - fe7a3e94053ec35d01f79a0ec9abea0056b95a84f3730fc7912cde5ad90a4427 - referenced ·
fe7a3e94053ec35d01f79a0ec9abea00· first seen 2026-08-21 - 67b8b3b88ea674019b64c8ae279227fb65579a2286f0e072a4ae675c37406f25 - referenced ·
67b8b3b88ea674019b64c8ae279227fb· first seen 2026-08-21 - d22b8490fe2bf445adde15696929af82fc6fa23d2421565ce5c8b9b19e30366a - referenced ·
d22b8490fe2bf445adde15696929af82· first seen 2026-08-21 - 6b291a07958ccaefb0cb22910ca70f2120491a777386511858d24691dca72107 - referenced ·
6b291a07958ccaefb0cb22910ca70f21· first seen 2026-08-21 - 1326237383e89019e8356deb73f730cc587d5128fc31510b02b3f235a40ff226 - referenced ·
1326237383e89019e8356deb73f730cc· first seen 2026-08-21 - da448a227112b0b7145525a4aeb774820086c23253780d9b17b6514d4f95527a - referenced ·
da448a227112b0b7145525a4aeb77482· first seen 2026-08-21 - 4dd437aecf690b41929853479ab375532d05e7a75ee19669efa401eab1625a8c - referenced ·
4dd437aecf690b41929853479ab37553· first seen 2026-08-21 - 5ae103ff5d7ed7c0465a25ca29c1fd2fb3808c1d05b51b11c563eefcb6a037c9 - referenced ·
5ae103ff5d7ed7c0465a25ca29c1fd2f· first seen 2026-08-21 - 6935daf521d6010ecb83e3899e7418d3f18065187dd1ad4c179c943e21733406 - referenced ·
6935daf521d6010ecb83e3899e7418d3· first seen 2026-08-21 - 14bdd32262120f5b6a412d45d5d9f7860180e90f23f2292f986b8224ff29a162 - referenced ·
14bdd32262120f5b6a412d45d5d9f786· first seen 2026-08-21 - 93975e9d715b088d09970c96018b854bd16c24bfd6c25687dda21825f04870f5 - referenced ·
93975e9d715b088d09970c96018b854b· first seen 2026-08-21 - 63c9ccc6bc951ac033945bc48bd56ba5f074b78030b31ac71e5d772f33c10823 - referenced ·
63c9ccc6bc951ac033945bc48bd56ba5· first seen 2026-08-21
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- f.name
- https://f.name/
Other scans of f.name (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown
- 14 Aug 2026 - unknown
- 12 Aug 2026 - unknown
Questions about f.name
- Is f.name safe?
- The scan of f.name on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with f.name?
- 176 analysed samples communicate with this URL.
- How was f.name checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of f.name
Scanned on MalwareAnalyzer by Cyble · Open interactive scan