pool.hashvault.pro - URL scan, 18 Aug 2026
MalwareAnalyzer by Cyble scanned pool.hashvault.pro and returned a unknown verdict (score 10). The page resolved to 139.180.209.157. 2 domains and 1 IP were contacted. 7 malware samples communicate with this URL (Tiny, Zbot, Fareit). This is a point-in-time observation from 18 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 10) · Confidence 13%
- Scanned URL:
https://pool.hashvault.pro/ - Domain: pool.hashvault.pro · IP: 139.180.209.157
- Page title: HashVault Mining Pool
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=IT, ST=HashVault, L=HashVault, O=HashVault, CN=HashVault · valid to Sep 2 15: · subject C=IT, ST=HashVault, L=HashVault, O=HashVault, CN=HashVault
- Scan tier: fast · observed 2026-08-18 19:37:46 UTC
Malware communicating with this URL (7)
These samples were observed contacting or being served from pool.hashvault.pro. Each links to its full analysis.
- Tiny - referenced ·
0c659dbe2bfb06475f738817f61e3c1f· first seen 2026-08-18 - Tiny - referenced ·
8f0a20acd319e305c8c29468529b43f6· first seen 2026-08-13 - Zbot - referenced ·
c8f5a1032f770a377b3435336d8ff461· first seen 2026-08-13 - Tiny - referenced ·
8e4f61f7a2f25fafd0dda53620956fb2· first seen 2026-08-12 - Tiny - referenced ·
f65a11c888d2ecbc422eb68f65e2830d· first seen 2026-08-12 - Fareit - referenced ·
77232accc7b545041145a8d1b1c7ebd4· first seen 2026-08-11 - Fareit - referenced ·
9039dda99673329b43a82cfff69a6c5b· first seen 2026-08-11
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Self-signed TLS certificate
Observed indicators
- pool.hashvault.pro
- hashvault.pro
- 139.180.209.157
- https://pool.hashvault.pro/
- https://hashvault.pro/
Other scans of pool.hashvault.pro (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown
- 12 Aug 2026 - unknown
- 11 Aug 2026 - unknown
Questions about pool.hashvault.pro
- Is pool.hashvault.pro safe?
- The scan of pool.hashvault.pro on 18 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with pool.hashvault.pro?
- 7 analysed samples communicate with this URL, including Tiny, Zbot, Fareit.
- How was pool.hashvault.pro checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of pool.hashvault.pro
Scanned on MalwareAnalyzer by Cyble · Open interactive scan