yr.c.lencr.org - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned yr.c.lencr.org and returned a unknown verdict (score 0). 1 domain and 0 IPs were contacted. 1058 malware samples communicate with this URL (Phishing, Upatre, Zusy, Ursu). This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 3%
- Scanned URL:
https://yr.c.lencr.org/ - Domain: yr.c.lencr.org
- Scan tier: fast · observed 2026-08-24 02:12:26 UTC
Malware communicating with this URL (1058)
These samples were observed contacting or being served from yr.c.lencr.org. Each links to its full analysis.
- Phishing - contacted ·
79c259f461a09b2f6e7beb444ad2f505· first seen 2026-08-24 - Upatre - contacted ·
5f026c2b627a9ea450aaa29f9ee80519· first seen 2026-08-24 - Zusy - contacted ·
484249b2aaa9133636261d8bc0369d9b· first seen 2026-08-24 - Zusy - contacted ·
884923985ef33c7b18be07983e388bd1· first seen 2026-08-24 - Ursu - contacted ·
fb4f8b9e5b279fda363e81c313878bcc· first seen 2026-08-24 - Delf - contacted ·
02b554cf9e3676241adaf10584844bfe· first seen 2026-08-24 - 78a8f75c55d33370e2e11823dacd6fbb0d70777c9566402703978285852214f3 - contacted ·
78a8f75c55d33370e2e11823dacd6fbb· first seen 2026-08-24 - Phishing - contacted ·
84ddd8ec40c991f2e0a5744dbf973105· first seen 2026-08-24 - d22b1ab8b6e7a4606023011eddcd8e84a864b88e2e0b21c0540c32f8b4a5389c - contacted ·
d22b1ab8b6e7a4606023011eddcd8e84· first seen 2026-08-24 - 9c49add66ce3c2cffe597afafc01040da218109c6a617a8d079cff99b0662118 - contacted ·
9c49add66ce3c2cffe597afafc01040d· first seen 2026-08-24 - Phishing - contacted ·
95f21ca65e09dc4eca7f079572582a29· first seen 2026-08-24 - Phishing - contacted ·
788112d95dd23d0a728d6e60a21059c9· first seen 2026-08-24 - Phishing - contacted ·
2bb551d5463eac6c368e351b674a0337· first seen 2026-08-24 - 0ff12737518854d65e5e314069e6d0de49f53fa787cbe5ee175c8945980c2c7f - contacted ·
0ff12737518854d65e5e314069e6d0de· first seen 2026-08-24 - Zusy - contacted ·
8348ce5cac8a107e0a219c1ca160014b· first seen 2026-08-24
Why this verdict
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- yr.c.lencr.org
- https://yr.c.lencr.org/
Other scans of yr.c.lencr.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
http://yr.c.lencr.org/ - 23 Aug 2026 - unknown
- 22 Aug 2026 - unknown ·
http://yr.c.lencr.org/
Questions about yr.c.lencr.org
- Is yr.c.lencr.org safe?
- The scan of yr.c.lencr.org on 24 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with yr.c.lencr.org?
- 1058 analysed samples communicate with this URL, including Phishing, Upatre, Zusy, Ursu.
- How was yr.c.lencr.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of yr.c.lencr.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan