f.name - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned f.name and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 211 malware samples communicate with this URL (Smuggling). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://f.name/ - Domain: f.name
- Scan tier: fast · observed 2026-08-22 15:13:20 UTC
Malware communicating with this URL (211)
These samples were observed contacting or being served from f.name. Each links to its full analysis.
- 76b266359d37b769b39bf3950d62d45098f7b1b696272f7f30a4b44557e2aabd - referenced ·
76b266359d37b769b39bf3950d62d450· first seen 2026-08-22 - c954b4692b7b46d5a934bb144e7f1837048372f0e9adfff4fdade7810fbf4f15 - referenced ·
c954b4692b7b46d5a934bb144e7f1837· first seen 2026-08-22 - 7a8e049209f9f70ad8a75173745513a14ea89317549c80b1581a67bfb201ca82 - referenced ·
7a8e049209f9f70ad8a75173745513a1· first seen 2026-08-22 - a50d7439302e7512830117a4adadf69ca5df83b5a9ee413834e13b89669f979e - referenced ·
a50d7439302e7512830117a4adadf69c· first seen 2026-08-22 - 871973f7d76606f7643f6873b6f48b2365654875dc28871c6ff054cdccfed4f1 - referenced ·
871973f7d76606f7643f6873b6f48b23· first seen 2026-08-22 - Smuggling - referenced ·
0c32e55d652bb8e2994a2a58fe36dc81· first seen 2026-08-22 - 545fd6a5f1d01ca0f4c27bc45fba7adcbd3d6a0c560fad6aa269caa317955690 - referenced ·
545fd6a5f1d01ca0f4c27bc45fba7adc· first seen 2026-08-22 - 69f292c9e0ef1a8bf08f2ba9940a00fbe920548dcb2d295afc29beb0489c1093 - referenced ·
69f292c9e0ef1a8bf08f2ba9940a00fb· first seen 2026-08-22 - 9b9d633faa688c2503cc949ae15aec7d0a0d7e9f5d3e7f0978ac7c2330e01e2a - referenced ·
9b9d633faa688c2503cc949ae15aec7d· first seen 2026-08-22 - 162962d018f5eb7ba373683259fa878814dc6345b0b7b4a79d0b9fc9c7310d63 - referenced ·
162962d018f5eb7ba373683259fa8788· first seen 2026-08-22 - 9c809c0e13ef8b80f1aed5875d7f57461daa83ecbe663bed648528c3e265dbae - referenced ·
9c809c0e13ef8b80f1aed5875d7f5746· first seen 2026-08-22 - 4cea4ce8e9d4b7166c1690234bffde6f664e2f3f224fc289663cc50b58f85b9e - referenced ·
4cea4ce8e9d4b7166c1690234bffde6f· first seen 2026-08-22 - 2829d845d7c8339fccca8bb14663a84caa859797666f05a1ecb04ae135af96dc - referenced ·
2829d845d7c8339fccca8bb14663a84c· first seen 2026-08-22 - fe36abde5ed5448be7d42b6668a0db8ca4d678a3323b63f24492383d68dd4479 - referenced ·
fe36abde5ed5448be7d42b6668a0db8c· first seen 2026-08-22 - 92fd0e889756dd8a39cfef4c836e387f414c5c36e0c76111d5d2828f4cf8f537 - referenced ·
92fd0e889756dd8a39cfef4c836e387f· first seen 2026-08-22
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- f.name
- https://f.name/
Other scans of f.name (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - unknown
- 14 Aug 2026 - unknown
- 12 Aug 2026 - unknown
Questions about f.name
- Is f.name safe?
- The scan of f.name on 22 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with f.name?
- 211 analysed samples communicate with this URL, including Smuggling.
- How was f.name checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of f.name
Scanned on MalwareAnalyzer by Cyble · Open interactive scan