Is hoohoo.ncsa.uiuc.edu safe?

The scan of hoohoo.ncsa.uiuc.edu on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with hoohoo.ncsa.uiuc.edu?

7 analysed samples communicate with this URL, including HUILoader, Maldoc, Amnesia.

How was hoohoo.ncsa.uiuc.edu checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

hoohoo.ncsa.uiuc.edu - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned hoohoo.ncsa.uiuc.edu and returned a unknown verdict (score 6). 1 domain and 0 IPs were contacted. 7 malware samples communicate with this URL (HUILoader, Maldoc, Amnesia). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 12%
Scanned URL: http://hoohoo.ncsa.uiuc.edu/docs/tutorials/imagemapping.html
Domain: hoohoo.ncsa.uiuc.edu
Scan tier: fast · observed 2026-08-21 03:42:30 UTC

Malware communicating with this URL (7)

These samples were observed contacting or being served from hoohoo.ncsa.uiuc.edu. Each links to its full analysis.

HUILoader - referenced · db4d6b5f5aab5abf5ab88c76f230b8a3 · first seen 2026-08-21
Maldoc - referenced · c47dad13f7e274417cb3092bccea2019 · first seen 2026-08-17
HUILoader - referenced · dc649d105556e08ac12280db0faf18a9 · first seen 2026-08-17
HUILoader - referenced · d396476b380102b89cabfb37587244f9 · first seen 2026-08-16
Amnesia - referenced · 6a058d9ab2b728f6b2605017ce6769f2 · first seen 2026-08-15
HUILoader - referenced · a2d559371c9a91880392df189d67917c · first seen 2026-08-14
HUILoader - referenced · d2b672eedc7857f03a9788512d474218 · first seen 2026-08-12

Why this verdict

Served over plaintext HTTP
Target did not respond (DNS/connection failure or timeout); verdict from URL structure only

Observed indicators

hoohoo.ncsa.uiuc.edu
http://hoohoo.ncsa.uiuc.edu/docs/tutorials/imagemapping.html

Other scans of hoohoo.ncsa.uiuc.edu (7)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown
21 Aug 2026 - unknown
17 Aug 2026 - unknown
16 Aug 2026 - unknown
15 Aug 2026 - unknown
14 Aug 2026 - unknown
12 Aug 2026 - unknown

Questions about hoohoo.ncsa.uiuc.edu

Is hoohoo.ncsa.uiuc.edu safe?: The scan of hoohoo.ncsa.uiuc.edu on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with hoohoo.ncsa.uiuc.edu?: 7 analysed samples communicate with this URL, including HUILoader, Maldoc, Amnesia.
How was hoohoo.ncsa.uiuc.edu checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of hoohoo.ncsa.uiuc.edu

Scanned on MalwareAnalyzer by Cyble · Open interactive scan