yr.c.lencr.org - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned yr.c.lencr.org and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 330 malware samples communicate with this URL (Expiro, FuBu, Phishing, HUILoader). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://yr.c.lencr.org/ - Domain: yr.c.lencr.org
- Scan tier: fast · observed 2026-08-22 19:57:13 UTC
Malware communicating with this URL (330)
These samples were observed contacting or being served from yr.c.lencr.org. Each links to its full analysis.
- Expiro - contacted ·
7bae201622a2fd3469b18ec98e7c94aa· first seen 2026-08-22 - FuBu - contacted ·
e932fa450dd6037bd2d8be6f52e9a400· first seen 2026-08-22 - Phishing - contacted ·
779eab062904ad32c2043ed0ce490b41· first seen 2026-08-22 - HUILoader - contacted ·
296fa7d869009b88b0638c32a8255ac5· first seen 2026-08-22 - Phishing - contacted ·
86e0ddecd4c372659ae61f75710b66de· first seen 2026-08-22 - Zusy - contacted ·
a294660214672ae4eef5e6bf49fed7ba· first seen 2026-08-22 - HUILoader - contacted ·
d47941f7c50c118808f8066dff702c71· first seen 2026-08-22 - Fileinfector - contacted ·
0659e8e24db5df1adeca458d0afff03d· first seen 2026-08-22 - 22533fe18cdbcc17e46e537ebfccf244a68188248360695ffad66fec75b0761f - contacted ·
22533fe18cdbcc17e46e537ebfccf244· first seen 2026-08-22 - 2258e21e7b543c73d03d2770aeeef6188e11767859cb6a6ed09f2d9d894dcfbf - contacted ·
2258e21e7b543c73d03d2770aeeef618· first seen 2026-08-22 - Gobot - contacted ·
651ff76d9eaaa4438e6a434a75fdd374· first seen 2026-08-22 - 42e8847a284ba4fb05a54cf647328c8afeebd14fbb8bf932492a9b55b905c15c - contacted ·
42e8847a284ba4fb05a54cf647328c8a· first seen 2026-08-22 - Zusy - contacted ·
cc85018b41760e9078fb47f70da7a9cb· first seen 2026-08-22 - 6bbd57934f9e048d32600ca93c1e37d48239667f1416dd2567408b1ec72d0a66 - contacted ·
6bbd57934f9e048d32600ca93c1e37d4· first seen 2026-08-22 - Phishing - contacted ·
f1f6d1ab6aefe6e4c754b38a0550b124· first seen 2026-08-22
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- yr.c.lencr.org
- https://yr.c.lencr.org/
Other scans of yr.c.lencr.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown ·
http://yr.c.lencr.org/
Questions about yr.c.lencr.org
- Is yr.c.lencr.org safe?
- The scan of yr.c.lencr.org on 22 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with yr.c.lencr.org?
- 330 analysed samples communicate with this URL, including Expiro, FuBu, Phishing, HUILoader.
- How was yr.c.lencr.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of yr.c.lencr.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan