l.name - URL scan, 12 Aug 2026
MalwareAnalyzer by Cyble scanned l.name and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 12 malware samples communicate with this URL (Brocoiner). This is a point-in-time observation from 12 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://l.name/ - Domain: l.name
- Scan tier: fast · observed 2026-08-12 22:43:10 UTC
Malware communicating with this URL (12)
These samples were observed contacting or being served from l.name. Each links to its full analysis.
- Converter.bundle.min.js - referenced ·
502e00f5867b2308843d890f7f8255f9· first seen 2026-08-12 - 636f8b858f681acb7bfa6f583a96630a.js - referenced ·
e6edf834c5900d2354164a41917cd276· first seen 2026-08-12 - 5fba28baaecbea92ce506dd3bc8b9af6900b2ad50b3d3d8e027700232be119e1 - referenced ·
5fba28baaecbea92ce506dd3bc8b9af6· first seen 2026-08-12 - 08587c192fc43a523bbafc94246a7ee1a5202432b212b9baea8b18f2eae62cbf - referenced ·
08587c192fc43a523bbafc94246a7ee1· first seen 2026-08-12 - 74a08ff8a64c5573a1f6e5884d9b6c90cd5db5a830d04833c026e2a39fba9f77 - referenced ·
74a08ff8a64c5573a1f6e5884d9b6c90· first seen 2026-08-12 - 36e4993e8987e29554d4b17fef68936200d55396c6476e644d6499f49b7d139f - referenced ·
36e4993e8987e29554d4b17fef689362· first seen 2026-08-12 - b13518cd2f7fa6eb751c99a877b11899cb32f5992c7c14344333c5174841ff73 - referenced ·
b13518cd2f7fa6eb751c99a877b11899· first seen 2026-08-12 - 58c451dd5cbf181f635544fb0e2a648dfdf3305d4b7cc6457e26c68b6436c0d0 - referenced ·
58c451dd5cbf181f635544fb0e2a648d· first seen 2026-08-12 - c70b0da999a78c95c52a603284e86cab39dc8d78d8dd83c3fc057d5011566f2e - referenced ·
c70b0da999a78c95c52a603284e86cab· first seen 2026-08-12 - 5ebc875512530cd47daa8279d5d5bbfb43a6aff374f12162fb3cdd858504f0bf - referenced ·
5ebc875512530cd47daa8279d5d5bbfb· first seen 2026-08-11 - 5f6f867b239d6b7a2e15f15d26ff51376474b294bda9fa67ae8dd503b6657f2c - referenced ·
5f6f867b239d6b7a2e15f15d26ff5137· first seen 2026-08-11 - Brocoiner - referenced ·
66265f3a8fa4ef98de98874eb986fbed· first seen 2026-08-11
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- l.name
- https://l.name/
Other scans of l.name (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown
Questions about l.name
- Is l.name safe?
- The scan of l.name on 12 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with l.name?
- 12 analysed samples communicate with this URL, including Brocoiner.
- How was l.name checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of l.name
Scanned on MalwareAnalyzer by Cyble · Open interactive scan