https://pharmarep.webbingbcn.es/incoming/rancorous.php
Classification: Malicious
https://pharmarep.webbingbcn.es/incoming/rancorous.php is a malicious URL. Linked to Hancitor malware. Reported by 5 threat sources, last seen 2022-02-08.
Current activity
- Offline — no longer resolving. Last online 2026-05-24 14:29:37.
MITRE ATT&CK associations
Malware families: HANCITOR (S0499)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Log4j Malware Download | CCN-CERT | 2021-12-20 09:13:19 | 2022-02-08 03:36:09 | malicious-activity | |
| Hancitor | ThreatFox Abuse.ch | 2021-12-16 00:06:43 | 2021-12-16 00:06:43 | malicious-activity | S0499 Hancitor |
| Unwanted Software | Google Safebrowsing | 2021-12-15 17:15:16 | 2021-12-15 17:15:16 | malicious-activity | |
| 2021-12-15 18:Xx:Xx | URLhaus Abuse.ch | 2021-12-15 16:51:09 | 2021-12-15 16:51:09 | malicious-activity | |
| 2021-12-15 18:Xx:Xx | Abuse.ch | 2021-12-15 16:51:09 | 2021-12-15 16:51:09 | malicious-activity | |
| None | Abuse.ch | 2021-12-15 16:51:09 | 2021-12-15 16:51:09 | malicious-activity |
Tags
log4j cve-2021-44228 malware_download doc hancitor html chanitorURL information
- Hostname
- pharmarep.webbingbcn.es
- Domain
- webbingbcn.es
- TLD
- es
- SHA-256
a2e379dbd12cab7c0672c5c29a6c8dc2b3e385a2e593915a6dff14f5edac683e- First indexed
- 2021-12-15 17:15:16
- Last updated
- 2026-05-24 14:29:39
- Last online
- 2026-05-24 14:29:37