r.ca - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned r.ca and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 70 malware samples communicate with this URL (Zusy). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://r.ca/ - Domain: r.ca
- Scan tier: fast · observed 2026-08-21 19:47:33 UTC
Malware communicating with this URL (70)
These samples were observed contacting or being served from r.ca. Each links to its full analysis.
- Zusy - referenced ·
235f816164c3f55ab0d7d21f3b35abfe· first seen 2026-08-21 - 1e78522b87fae6eb939c5d9aab5e631b43806872977e86faa11e9b7682912acd - referenced ·
1e78522b87fae6eb939c5d9aab5e631b· first seen 2026-08-21 - cf349fa89b1e8500756ed5ddaa82a4343794f2c739b79efb15f4a3ecf76547a0 - referenced ·
cf349fa89b1e8500756ed5ddaa82a434· first seen 2026-08-21 - ea208e3fcc39e350c2f42b64164eba51c9228b37703b208dff90adf77c5e3e77 - referenced ·
ea208e3fcc39e350c2f42b64164eba51· first seen 2026-08-21 - d22b8490fe2bf445adde15696929af82fc6fa23d2421565ce5c8b9b19e30366a - referenced ·
d22b8490fe2bf445adde15696929af82· first seen 2026-08-21 - da448a227112b0b7145525a4aeb774820086c23253780d9b17b6514d4f95527a - referenced ·
da448a227112b0b7145525a4aeb77482· first seen 2026-08-21 - 5ae103ff5d7ed7c0465a25ca29c1fd2fb3808c1d05b51b11c563eefcb6a037c9 - referenced ·
5ae103ff5d7ed7c0465a25ca29c1fd2f· first seen 2026-08-21 - e4ebee9d3c74f17cf8691f68982f06a54767e71049018199c425cc0449432580 - referenced ·
e4ebee9d3c74f17cf8691f68982f06a5· first seen 2026-08-21 - f72fbdd9ba306e8ae90d7c7fc1583ed0d45030a6161b3629386e1437a1f529af - referenced ·
f72fbdd9ba306e8ae90d7c7fc1583ed0· first seen 2026-08-21 - e638ffa3fc54d3b9850c9580ce2f4082421d0e0e423fad37b87af7b68392153e - referenced ·
e638ffa3fc54d3b9850c9580ce2f4082· first seen 2026-08-21 - cd68698836a7344ab60b15e7fa45142c270d243ea1b75b4075b1a9e8c793a1d2 - referenced ·
cd68698836a7344ab60b15e7fa45142c· first seen 2026-08-20 - 05393eaacd5d4076e20ea96b2396631282174f10cd5235ee2a9cbe6fd40137e4 - referenced ·
05393eaacd5d4076e20ea96b23966312· first seen 2026-08-20 - ebdf980ac30b78bdff8a732b8718acb2dc7c857e0963468260047b111d909a84 - referenced ·
ebdf980ac30b78bdff8a732b8718acb2· first seen 2026-08-20 - dac76dd3a9d243ec67019f9c468b09a616978d44621062e0b4d502d7c2fd9589 - referenced ·
dac76dd3a9d243ec67019f9c468b09a6· first seen 2026-08-20 - 7a794f9e1a302640384a049bddc9d1f1e97828ea54f91213ed64083dfc118625 - referenced ·
7a794f9e1a302640384a049bddc9d1f1· first seen 2026-08-20
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- r.ca
- https://r.ca/
Questions about r.ca
- Is r.ca safe?
- The scan of r.ca on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with r.ca?
- 70 analysed samples communicate with this URL, including Zusy.
- How was r.ca checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of r.ca
Scanned on MalwareAnalyzer by Cyble · Open interactive scan