h.name - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned h.name and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 64 malware samples communicate with this URL. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://h.name/ - Domain: h.name
- Scan tier: fast · observed 2026-08-20 16:18:29 UTC
Malware communicating with this URL (64)
These samples were observed contacting or being served from h.name. Each links to its full analysis.
- 2ec97fcbb16ae2a5f2c2c3071c512146b27628d3a222451b87bdb24f0c6ea65d - referenced ·
2ec97fcbb16ae2a5f2c2c3071c512146· first seen 2026-08-20 - df13f8c70ad6095bdcdbb17ea9a4aec3ff6f198f14046816d55e7998e8616f7c - referenced ·
df13f8c70ad6095bdcdbb17ea9a4aec3· first seen 2026-08-20 - 7127907ce31aa75d8cfc81181ec46fb3d78036addde8025b959158979182f1f7 - referenced ·
7127907ce31aa75d8cfc81181ec46fb3· first seen 2026-08-20 - f5c1380a5ebbe9ebc15216e4d3d5a90d14baad352dc1dd32052861a2e31142e2 - referenced ·
f5c1380a5ebbe9ebc15216e4d3d5a90d· first seen 2026-08-20 - daeb7a360f80380b9425e18b1cc75956772d9c5b640908b771bc44c2e1d8488c - referenced ·
daeb7a360f80380b9425e18b1cc75956· first seen 2026-08-20 - 7f9955283d8a63dc7f55f704dadc52f324a702e39f756cde29bb4d2784795b4f - referenced ·
7f9955283d8a63dc7f55f704dadc52f3· first seen 2026-08-20 - 6b19127b4ec7d8a63b3f8e2be8e6943982bd10a3fcc6e7d04b787ca436b44deb - referenced ·
6b19127b4ec7d8a63b3f8e2be8e69439· first seen 2026-08-20 - 642833fcbed16192196402a1f385bcafb6fa782a6b8a364724574412233384fd - referenced ·
642833fcbed16192196402a1f385bcaf· first seen 2026-08-20 - eda4392967210d748975517c75f97481e23ee37733e93bb87ffd586d1caf7074 - referenced ·
eda4392967210d748975517c75f97481· first seen 2026-08-20 - 37803f4d2bd70dee14aaa4d8ad87a93e02bd590d7aae097401594554864cd185 - referenced ·
37803f4d2bd70dee14aaa4d8ad87a93e· first seen 2026-08-20 - 8f645f9a4faf4940c90d6a4230d1132b2bf61741f566ae43d42a744ac837f0a0 - referenced ·
8f645f9a4faf4940c90d6a4230d1132b· first seen 2026-08-20 - b15afb7b0656a5516bd35ef322005ff4b6fcbf085dee9743c9bd1cfb3ff2dec3 - referenced ·
b15afb7b0656a5516bd35ef322005ff4· first seen 2026-08-20 - 0691098f3a822470a776413b51823c7d6156cb5d2dbe5aaab394b1236913ee87 - referenced ·
0691098f3a822470a776413b51823c7d· first seen 2026-08-20 - 4235e231232c0707fc91c26792765a7e74749af5ddc0bb7e1ee18ef552bcf525 - referenced ·
4235e231232c0707fc91c26792765a7e· first seen 2026-08-19 - 1b1763d494eaee6600fb1f5d3e0648886c97cfc6fd1db02acee45fea0b8317aa - referenced ·
1b1763d494eaee6600fb1f5d3e064888· first seen 2026-08-19
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- h.name
- https://h.name/
Other scans of h.name (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 15 Aug 2026 - unknown
- 13 Aug 2026 - unknown
Questions about h.name
- Is h.name safe?
- The scan of h.name on 20 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with h.name?
- 64 analysed samples communicate with this URL.
- How was h.name checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of h.name
Scanned on MalwareAnalyzer by Cyble · Open interactive scan