Gridinsoft
13/100, Suspicious, domain age counted against it. Score will move.
Source: Gridinsoft · checked 2026-10-28
Safe
Is Underground 2 Revived safe?
Nobody honest can stamp nfsu2.xyz safe or unsafe from a single score. On the days we checked, Gridinsoft showed 13/100, ScamAdviser showed a trust score of 7, and a Cloudflare Radar scan on 27 October 2026 returned no security classification and no violations. The domain was days old, which those tools punish. The site is also a community recompile of a commercial game, which is a legal risk for the operator, separate from malware. This page does not say virus-free.
ScamAdviser
Trust score 7, “might be a scam”, SSL present, domain very new.
Source: ScamAdviser · checked 2026-10-28
Cloudflare Radar
27 Oct 2026 scan: no classification, no violations, 0 cookies in that scan.
Source: Cloudflare Radar · checked 2026-10-28
What you run
A WebGPU recompile in the tab. That is more privilege than a static article.
Source: README · checked 2026-10-28
Evidence note: figures attributed only to one publication or to the project's own documentation are single-source reports. The project site, README and playing notes count as one source group. Sources and checked dates are shown with each fact.
What I checked
I put the three scanner pages next to the project HTML notes from 28 October. The HTML carried a google-adsense-account meta and did not show a privacy or terms link. I did not see a drive-by download in the write-ups. A Reddit ScamChecker thread only contained an automatic WebSafely report, 88/100 high risk, and no human comments. I am not promoting that bot score into a verdict.
Separate the risks
Malware risk is what the scanners guess from domain age, reputation feeds, and page signals. Copyright risk is what Anti-Hype, Caradisiac, and Komputerswiat discuss: a playable copy of an EA game without a posted license. Account risk is low on the public site because there is no EA login, but the leftover Online password box should get a throwaway string. Save risk is local: clearing the browser, or a bad cloud choice, can drop a career. Issue 33 is the public example.
Habits that do not depend on a score
Read the host. Stay on nfsu2.xyz. Do not install an APK from a catalog to “get the safe version.” Download a zip backup of your profile before a long session. If a page asks for a card number, it is not this project. The project’s own funding note in press coverage is Ko-fi, not a checkout inside the race.
What we could not find
No independent lab report with a file hash of game.wasm was in the sources we used. Cloudflare’s scan size notes (about 7.7 MB and 35 MB in the summary we saved) are that scan’s observation, one source. Absence of a malware write-up is not a certificate.
Claims that do not hold
A low scanner score proves a trojan. It proves the tool’s age and reputation rules fired. Read the other two reports before you repeat the number.
A high score would make the recompile licensed. Licensing and malware are different questions. Press coverage treats the legal one as open.
Questions
Is nfsu2.xyz a scam?
ScamAdviser’s wording was “might be a scam” while the domain was new. Players in videos are in the game, not on a payment page. Use the link page to avoid look-alikes, which are the more ordinary scam shape.
Does the site set cookies?
The Cloudflare scan we cite reported 0 cookies. The HTML audit found an AdSense account meta. We did not watch a banner load on the first screen. That can change.
Should I turn off my antivirus?
No source connected to the project asks for that. Treat any page that does as hostile.
Is the Android APK safer?
It is a different program. Safety does not transfer. See the APK page.
Can you guarantee the next update?
No. Re-check the scanners. Their scores move, and so does the site.
Related pages
Sources
Last checked: 2026-10-28. Where only one source states a number, the sentence says so.