t.name - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned t.name and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 35 malware samples communicate with this URL (Gootloader). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://t.name/ - Domain: t.name
- Scan tier: fast · observed 2026-08-20 01:28:20 UTC
Malware communicating with this URL (35)
These samples were observed contacting or being served from t.name. Each links to its full analysis.
- ce870e4f0402de2ba991659e33cc040402f37dbd684b4f54acbf4139941dbf50 - referenced ·
ce870e4f0402de2ba991659e33cc0404· first seen 2026-08-20 - 43bb3e10b43659a0d45331d299e564b02e6ba9d97c6b60811a1052504562bfe6 - referenced ·
43bb3e10b43659a0d45331d299e564b0· first seen 2026-08-19 - fbevents.js - referenced ·
5d8d4bb1186f740b55e9d632b68acc0b· first seen 2026-08-19 - fe47c899d05a1f5bafd6f9432e67c58fb6091399d6387b70a0fcb541895896b4 - referenced ·
fe47c899d05a1f5bafd6f9432e67c58f· first seen 2026-08-19 - Gootloader - referenced ·
a219dfaf4b5acc45855fdd5fc1e5278f· first seen 2026-08-19 - b8edf1ce886f6656fd093dbb42d44af0a8fd8521655aab519b904741b0b3e743 - referenced ·
b8edf1ce886f6656fd093dbb42d44af0· first seen 2026-08-19 - c85bf99298e182fa4fa6d6a08cdf0df78e1049944190440f0447f6516792a2e5 - referenced ·
c85bf99298e182fa4fa6d6a08cdf0df7· first seen 2026-08-18 - f23abb4dc6d5173a4629e15cd7ab135633916210005442cc5edcc8f35f08a0f0 - referenced ·
f23abb4dc6d5173a4629e15cd7ab1356· first seen 2026-08-17 - de625233e1b6326660160ec7d5022d3d8c6732ded24791d07e2b99314f067eb5 - referenced ·
de625233e1b6326660160ec7d5022d3d· first seen 2026-08-17 - counter.js - referenced ·
e31af1dcfb1bf07cb7970af147a42af4· first seen 2026-08-17 - d73acd346c649f4b93fe4a4248f8803d664d02f2f2ca8772a3bf2377f1d138ad - referenced ·
d73acd346c649f4b93fe4a4248f8803d· first seen 2026-08-16 - 11ba9e6c2091a692ffc734431fc130be39b3103c60eaa07c0548bab50de11687 - referenced ·
11ba9e6c2091a692ffc734431fc130be· first seen 2026-08-16 - 1f410512b5c6683a6e15f6363c9308edfe13b7ab2b7a39b66b748a2aabf1236d - referenced ·
1f410512b5c6683a6e15f6363c9308ed· first seen 2026-08-15 - f3a91608f3336e83a2227b52afff45f9ec390a3145032052a4cbbb5ca1a3de3c - referenced ·
f3a91608f3336e83a2227b52afff45f9· first seen 2026-08-15 - da4b31ce51bdfcb864659c6c45eeb1a9e76f875191b29e05b32f623fbd5a7f02 - referenced ·
da4b31ce51bdfcb864659c6c45eeb1a9· first seen 2026-08-15
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- t.name
- https://t.name/
Other scans of t.name (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 20 Aug 2026 - unknown
- 19 Aug 2026 - unknown
- 18 Aug 2026 - unknown
- 17 Aug 2026 - unknown
Questions about t.name
- Is t.name safe?
- The scan of t.name on 20 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with t.name?
- 35 analysed samples communicate with this URL, including Gootloader.
- How was t.name checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of t.name
Scanned on MalwareAnalyzer by Cyble · Open interactive scan