r.za - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned r.za and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 65 malware samples communicate with this URL (Zusy). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://r.za/ - Domain: r.za
- Scan tier: fast · observed 2026-08-21 09:17:27 UTC
Malware communicating with this URL (65)
These samples were observed contacting or being served from r.za. Each links to its full analysis.
- Zusy - referenced ·
8c8db0421c985ef4cfbf6152e8b5277a· first seen 2026-08-21 - e4ebee9d3c74f17cf8691f68982f06a54767e71049018199c425cc0449432580 - referenced ·
e4ebee9d3c74f17cf8691f68982f06a5· first seen 2026-08-21 - f72fbdd9ba306e8ae90d7c7fc1583ed0d45030a6161b3629386e1437a1f529af - referenced ·
f72fbdd9ba306e8ae90d7c7fc1583ed0· first seen 2026-08-21 - e638ffa3fc54d3b9850c9580ce2f4082421d0e0e423fad37b87af7b68392153e - referenced ·
e638ffa3fc54d3b9850c9580ce2f4082· first seen 2026-08-21 - cd68698836a7344ab60b15e7fa45142c270d243ea1b75b4075b1a9e8c793a1d2 - referenced ·
cd68698836a7344ab60b15e7fa45142c· first seen 2026-08-20 - 05393eaacd5d4076e20ea96b2396631282174f10cd5235ee2a9cbe6fd40137e4 - referenced ·
05393eaacd5d4076e20ea96b23966312· first seen 2026-08-20 - ebdf980ac30b78bdff8a732b8718acb2dc7c857e0963468260047b111d909a84 - referenced ·
ebdf980ac30b78bdff8a732b8718acb2· first seen 2026-08-20 - dac76dd3a9d243ec67019f9c468b09a616978d44621062e0b4d502d7c2fd9589 - referenced ·
dac76dd3a9d243ec67019f9c468b09a6· first seen 2026-08-20 - 7a794f9e1a302640384a049bddc9d1f1e97828ea54f91213ed64083dfc118625 - referenced ·
7a794f9e1a302640384a049bddc9d1f1· first seen 2026-08-20 - a4f2e2fb75809375d720d75312d753c5efa9b244e1a372145c16b795b380de02 - referenced ·
a4f2e2fb75809375d720d75312d753c5· first seen 2026-08-20 - 7f4c9279e62a5de10979a4f660f1dc7148cd47139a15b104bd911e8227d1d2bf - referenced ·
7f4c9279e62a5de10979a4f660f1dc71· first seen 2026-08-20 - 175ae65031f576967a2d6dabbd85ba8402de7c4b16039cbcc1d5a32cb9db5aab - referenced ·
175ae65031f576967a2d6dabbd85ba84· first seen 2026-08-20 - 4fc0eb1c794e8b3f77dff8c125aef397dcc4aae44b69949754ebd0f10f0d00a8 - referenced ·
4fc0eb1c794e8b3f77dff8c125aef397· first seen 2026-08-20 - df13f8c70ad6095bdcdbb17ea9a4aec3ff6f198f14046816d55e7998e8616f7c - referenced ·
df13f8c70ad6095bdcdbb17ea9a4aec3· first seen 2026-08-20 - 7127907ce31aa75d8cfc81181ec46fb3d78036addde8025b959158979182f1f7 - referenced ·
7127907ce31aa75d8cfc81181ec46fb3· first seen 2026-08-20
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- r.za
- https://r.za/
Questions about r.za
- Is r.za safe?
- The scan of r.za on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with r.za?
- 65 analysed samples communicate with this URL, including Zusy.
- How was r.za checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of r.za
Scanned on MalwareAnalyzer by Cyble · Open interactive scan