r3.o.lencr.org
Classification: Neutral
r3.o.lencr.org is a neutral hostname: not currently flagged by Maltiverse. Previously reported by Hybrid-Analysis, last seen 2022-01-25.
Current activity
- Offline — no longer resolving. Last online 2025-05-24 10:28:42.
MITRE ATT&CK associations
Malware families: NJRAT (S0385) QAKBOT (S0650) POISONIVY (S0012) TRICKBOT (S0266) POWERSTATS (S0223)
Intrusion sets: TURLA (G0010)
Blacklist sightings showing the 100 most recent of 370
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-07-18 20:31:27 | 2025-05-24 10:28:43 | benign | |
| Safe Site | Cisco Umbrella | 2022-07-14 23:25:17 | 2022-07-16 01:15:27 | benign | |
| Malware | Hybrid-Analysis | 2021-05-31 23:00:13 | 2022-01-25 12:45:19 | ||
| Phishing site | Hybrid-Analysis | 2020-12-03 05:30:17 | 2022-01-25 11:46:01 | ||
| Malicious site | Hybrid-Analysis | 2020-12-02 17:30:52 | 2022-01-25 11:30:44 | ||
| Malware site | Hybrid-Analysis | 2020-12-04 20:30:08 | 2022-01-25 10:46:03 | ||
| Phishing.JS | Hybrid-Analysis | 2021-06-15 13:45:09 | 2022-01-25 08:15:30 | ||
| Trojan.Phish | Hybrid-Analysis | 2022-01-19 17:15:09 | 2022-01-24 20:15:16 | ||
| Downloader.mw | Hybrid-Analysis | 2022-01-18 14:16:04 | 2022-01-24 19:00:32 | ||
| Agent.CCA4 | Hybrid-Analysis | 2022-01-18 14:15:50 | 2022-01-24 18:30:13 | ||
| Crack | Hybrid-Analysis | 2020-12-27 22:30:24 | 2022-01-24 16:31:07 | ||
| Unsafe | Hybrid-Analysis | 2021-03-15 17:00:40 | 2022-01-24 13:16:04 | ||
| Trojan.Siggen16 | Hybrid-Analysis | 2022-01-24 03:16:07 | 2022-01-24 03:16:07 | ||
| NetTool.FRP | Hybrid-Analysis | 2022-01-21 20:00:28 | 2022-01-21 20:00:28 | ||
| Trojan.HTML.Phishing | Hybrid-Analysis | 2021-11-30 15:30:23 | 2022-01-21 14:00:43 | ||
| Trojan.Injector | Hybrid-Analysis | 2021-06-24 23:15:34 | 2022-01-20 11:15:22 | ||
| Heur.BZC.YAX.Nioc.1 | Hybrid-Analysis | 2020-12-18 14:15:22 | 2022-01-19 15:45:08 | ||
| SuspectCrc | Hybrid-Analysis | 2022-01-19 15:30:25 | 2022-01-19 15:30:25 | ||
| Outbreak | Hybrid-Analysis | 2022-01-19 13:15:32 | 2022-01-19 13:15:32 | ||
| JS.Heur.Phishing.5.417A4EF6 | Hybrid-Analysis | 2021-11-19 19:15:22 | 2022-01-19 08:00:08 | ||
| Adware | Hybrid-Analysis | 2021-03-28 13:30:31 | 2022-01-19 03:15:58 | ||
| Trojan.Generic | Hybrid-Analysis | 2020-12-07 16:45:25 | 2022-01-18 04:00:18 | ||
| Gen:Variant.Tedy | Hybrid-Analysis | 2022-01-17 20:17:48 | 2022-01-17 20:17:48 | ||
| IL:Trojan.MSILZilla | Hybrid-Analysis | 2021-11-22 04:45:24 | 2022-01-17 17:16:16 | ||
| Phish.HQ.gen | Hybrid-Analysis | 2022-01-17 14:45:53 | 2022-01-17 14:45:53 | ||
| Crypt.XPACK | Hybrid-Analysis | 2021-03-04 18:15:52 | 2022-01-16 02:00:38 | ||
| FileRepMalware | Hybrid-Analysis | 2021-06-11 14:15:18 | 2022-01-15 14:45:31 | ||
| Application.Keygen | Hybrid-Analysis | 2021-12-04 00:30:27 | 2022-01-15 13:16:28 | ||
| Phishing.6AFF | Hybrid-Analysis | 2022-01-14 20:15:11 | 2022-01-14 20:15:11 | ||
| Phish.EJ.gen | Hybrid-Analysis | 2021-09-29 19:15:23 | 2022-01-14 16:15:33 | ||
| TrojanDropper.FrauDrop | Hybrid-Analysis | 2022-01-14 15:00:49 | 2022-01-14 15:00:49 | ||
| Artemis | Hybrid-Analysis | 2021-01-20 11:30:16 | 2022-01-14 04:45:10 | ||
| W64.HfsAdware | Hybrid-Analysis | 2022-01-13 22:45:37 | 2022-01-13 22:45:37 | ||
| Phishing.1F29 | Hybrid-Analysis | 2022-01-13 22:00:32 | 2022-01-13 22:00:32 | ||
| Phishing.HTML | Hybrid-Analysis | 2021-02-08 12:15:23 | 2022-01-13 20:00:11 | ||
| CVE-2017-0199 | Hybrid-Analysis | 2020-12-07 16:30:52 | 2022-01-13 10:15:12 | ||
| VEX.Webshell | Hybrid-Analysis | 2022-01-13 04:45:08 | 2022-01-13 04:45:08 | ||
| VB:Trojan.Valyria | Hybrid-Analysis | 2021-03-02 09:17:11 | 2022-01-12 20:00:05 | S0223 POWERSTATS | |
| HackTool.Crack | Hybrid-Analysis | 2021-01-08 08:45:22 | 2022-01-12 17:46:01 | ||
| Malware.Generic | Hybrid-Analysis | 2020-12-25 18:30:17 | 2022-01-12 14:00:20 | ||
| Generic.ASMalwS | Hybrid-Analysis | 2021-10-16 20:15:31 | 2022-01-12 09:45:45 | ||
| Dropper.Trojan.Agent | Hybrid-Analysis | 2021-07-01 18:00:31 | 2022-01-12 02:45:29 | ||
| HEUR_PDFJS.A | Hybrid-Analysis | 2022-01-11 20:15:16 | 2022-01-11 20:15:16 | ||
| XLS:Nastya [Trj] | Hybrid-Analysis | 2021-11-08 11:00:13 | 2022-01-11 19:45:29 | ||
| Qakbot.STY | Hybrid-Analysis | 2022-01-11 16:15:50 | 2022-01-11 16:15:50 | ||
| Miner.bp | Hybrid-Analysis | 2021-02-06 05:15:26 | 2022-01-11 11:45:26 | ||
| Trojan.HTML.PHISH | Hybrid-Analysis | 2021-03-24 18:45:12 | 2022-01-11 03:30:10 | ||
| DangerousSig [Trj] | Hybrid-Analysis | 2022-01-08 21:30:32 | 2022-01-08 21:30:32 | ||
| Mobigame | Hybrid-Analysis | 2021-10-26 16:00:28 | 2022-01-05 17:15:25 | ||
| BehavesLike.HTML.Redirector | Hybrid-Analysis | 2021-02-04 11:45:22 | 2022-01-05 16:30:13 | ||
| Redirect.F697 | Hybrid-Analysis | 2022-01-03 14:17:17 | 2022-01-03 14:17:17 | ||
| Gen:Variant.Jaik | Hybrid-Analysis | 2021-06-14 01:00:22 | 2022-01-02 20:00:17 | ||
| Trojan.Puamson | Hybrid-Analysis | 2022-01-02 12:00:22 | 2022-01-02 12:00:22 | ||
| VB:Trojan.Launcher | Hybrid-Analysis | 2021-12-31 14:45:06 | 2021-12-31 14:45:06 | ||
| Gen:Variant.Bulz | Hybrid-Analysis | 2021-07-05 22:45:21 | 2021-12-31 03:15:58 | ||
| Backdoor.Mokes | Hybrid-Analysis | 2021-12-29 05:00:36 | 2021-12-29 05:00:36 | ||
| InstallCore | Hybrid-Analysis | 2021-12-28 12:15:33 | 2021-12-28 12:15:33 | ||
| Phish.HHH | Hybrid-Analysis | 2021-06-02 20:45:18 | 2021-12-27 10:00:19 | ||
| BehavesLike.Win64.Generic | Hybrid-Analysis | 2021-12-25 03:00:24 | 2021-12-25 03:00:24 | ||
| VBS:Malware | Hybrid-Analysis | 2021-10-07 11:15:07 | 2021-12-24 14:45:41 | ||
| Unsafe.AI_Score_100% | Hybrid-Analysis | 2021-12-24 09:07:57 | 2021-12-24 09:07:57 | ||
| BehavesLike.Win64.Dropper | Hybrid-Analysis | 2021-12-24 01:45:17 | 2021-12-24 01:45:17 | ||
| Downloader.jd | Hybrid-Analysis | 2021-12-17 20:15:31 | 2021-12-23 17:00:39 | ||
| Acint | Hybrid-Analysis | 2021-12-22 11:00:36 | 2021-12-22 11:00:36 | ||
| Phish.BOS | Hybrid-Analysis | 2021-12-22 09:45:15 | 2021-12-22 09:45:15 | ||
| Probably Heur.HTMLUnescape | Hybrid-Analysis | 2021-02-01 13:30:16 | 2021-12-20 11:00:38 | ||
| Unsafe.AI_Score_99% | Hybrid-Analysis | 2021-06-11 16:45:44 | 2021-12-20 09:45:09 | ||
| BehavesLike.HTML.ExploitIFrame | Hybrid-Analysis | 2021-12-19 03:30:15 | 2021-12-19 03:30:15 | ||
| JS.Heur.Phishing.5.ED848B3F | Hybrid-Analysis | 2021-12-17 16:17:20 | 2021-12-17 16:17:20 | ||
| Trojan.Turla | Hybrid-Analysis | 2021-12-17 12:32:04 | 2021-12-17 12:32:04 | G0010 Turla | |
| Trojan.Agent | Hybrid-Analysis | 2021-01-06 13:45:32 | 2021-12-17 06:15:21 | ||
| Trojan.Vita | Hybrid-Analysis | 2021-04-15 22:45:07 | 2021-12-17 03:00:18 | ||
| Downloader.Chindo | Hybrid-Analysis | 2020-12-20 15:45:09 | 2021-12-17 03:00:13 | ||
| PUP.Generic | Hybrid-Analysis | 2021-10-19 23:15:25 | 2021-12-16 20:30:14 | ||
| Trojan.XLS.Agent | Hybrid-Analysis | 2021-12-16 18:15:07 | 2021-12-16 18:15:07 | ||
| BehavesLike.GenDownloader | Hybrid-Analysis | 2021-12-15 19:00:09 | 2021-12-15 19:00:09 | ||
| Phish.CN.gen | Hybrid-Analysis | 2021-12-15 18:15:48 | 2021-12-15 18:15:48 | ||
| fls.noname@0 | Hybrid-Analysis | 2021-12-15 13:16:45 | 2021-12-15 13:16:45 | ||
| HackTool.CheatEngine | Hybrid-Analysis | 2021-12-14 23:15:12 | 2021-12-14 23:15:12 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2021-06-09 00:45:12 | 2021-12-13 15:45:35 | ||
| Cryxos.5506 | Hybrid-Analysis | 2021-12-13 15:30:45 | 2021-12-13 15:30:45 | ||
| Suspected of Trojan.Downloader | Hybrid-Analysis | 2021-12-12 07:00:16 | 2021-12-12 07:00:16 | ||
| Agent.WOO | Hybrid-Analysis | 2021-12-10 11:45:05 | 2021-12-10 11:45:05 | ||
| Conduit | Hybrid-Analysis | 2021-12-09 22:15:25 | 2021-12-09 22:15:25 | ||
| SneakyBin.G.gen | Hybrid-Analysis | 2021-12-09 16:15:19 | 2021-12-09 20:15:15 | ||
| Win64.Generic | Hybrid-Analysis | 2021-12-08 12:00:20 | 2021-12-08 12:00:20 | ||
| PUA.Optional | Hybrid-Analysis | 2021-12-07 11:00:15 | 2021-12-07 11:00:15 | ||
| Trojan.Skarlet.3 | Hybrid-Analysis | 2021-12-04 06:30:27 | 2021-12-07 04:00:18 | ||
| Riskware.RostDown.1 | Hybrid-Analysis | 2021-12-06 16:15:06 | 2021-12-06 16:15:06 | ||
| Agent.WYE | Hybrid-Analysis | 2021-12-06 12:30:16 | 2021-12-06 12:30:16 | ||
| Application.Bundler | Hybrid-Analysis | 2021-06-30 11:30:33 | 2021-12-05 21:00:38 | ||
| Generic.C4791996 | Hybrid-Analysis | 2021-12-05 06:17:21 | 2021-12-05 06:17:21 | ||
| Gen:Variant.Strictor | Hybrid-Analysis | 2021-12-04 09:00:16 | 2021-12-04 09:00:16 | ||
| Sabsik.FL.B | Hybrid-Analysis | 2021-10-06 10:45:50 | 2021-12-03 19:30:57 | ||
| Trojan.Downloader | Hybrid-Analysis | 2021-06-11 13:00:08 | 2021-12-02 14:45:09 | ||
| Trojan.Siggen15 | Hybrid-Analysis | 2021-12-02 12:15:36 | 2021-12-02 12:15:36 | ||
| SneakyBin.AB.gen | Hybrid-Analysis | 2021-12-01 10:15:13 | 2021-12-02 00:15:14 | ||
| TrojanPWS.Stealer | Hybrid-Analysis | 2021-11-30 13:45:29 | 2021-11-30 13:45:29 | ||
| XLM.Trojan.Kitana | Hybrid-Analysis | 2021-11-24 11:15:38 | 2021-11-30 10:45:16 | ||
| Backdoor.PHP.WebShell | Hybrid-Analysis | 2021-11-28 09:15:13 | 2021-11-28 09:15:13 |
IP addresses resolved by this hostname
- 67.69.197.170 (2021-03-02 07:45:48)
- 67.69.197.194 (2021-02-27 04:00:34)
- 67.69.197.196 (2021-02-18 21:30:28)
- 67.69.197.171 (2021-03-02 07:45:48)
- 184.150.154.83 (2022-12-31 01:15:39)
- 184.150.154.11 (2022-12-31 01:15:39)
- 184.150.58.137 (2021-01-02 22:30:19)
- 184.150.58.145 (2021-01-02 22:30:19)
- 67.69.197.181 (2021-03-03 01:45:22)
- 67.69.197.197 (2021-03-03 01:45:22)
- 67.69.197.143 (2021-05-31 23:36:06)
- 67.69.197.133 (2021-05-31 23:36:06)
- 23.15.4.26 (2021-02-15 02:45:56)
- 23.15.4.10 (2021-02-15 02:45:56)
- 23.58.127.97 (2025-03-01 07:06:47)
- 23.58.127.91 (2025-03-01 07:06:47)
- 184.150.49.107 (2025-04-19 10:50:32)
- 184.150.49.144 (2025-04-19 10:50:32)
- 2001:4958:300:4b0::b896:3a89 (2025-04-19 10:50:32)
- 2001:4958:300:4b0::b896:3a91 (2025-04-19 10:50:32)
- 2600:140a:a000::172b:f3a3 (2025-05-24 10:28:42)
- 2600:140a:a000::172b:f39b (2025-05-24 10:28:42)
- 95.101.137.167 (2025-05-24 10:28:42)
- 95.101.137.134 (2025-05-24 10:28:42)
Whois information
- AS name
- AS577 Bell Canada
- Domain
- lencr.org
- TLD
- org
- DNSSEC
- ['unsigned']
- Nameservers
- owen.ns.cloudflare.com, vera.ns.cloudflare.com
- Registrant
- Cloudflare, Inc.
- Address
- REDACTED
- City
- REDACTED
- State
- DATA REDACTED
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- Domain created
- 2020-06-29 21:59:03
- Domain expires
- 2027-06-29 21:59:03
- First indexed
- 2020-12-02 17:30:52
- Last updated
- 2026-10-10 23:44:53