Domain > ap.cuponation.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2018-01-21	52.84.11.165 (ClassC)
2018-01-22	13.33.164.62 (ClassC)
2018-01-23	52.84.11.80 (ClassC)
2019-02-20	99.84.168.124 (ClassC)
2019-02-20	99.84.168.59 (ClassC)
2019-02-20	99.84.168.80 (ClassC)
2019-02-20	99.84.168.99 (ClassC)
2024-04-22	13.33.4.118 (ClassC)
2025-09-13	18.161.6.12 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 3495Connection: keep-aliveDate: Sat, 13 Sep 2025 12:29:01 GMTX-Cache: Miss from cloudfrontVia: 1.1 b6cdb2111444305bd4957a473b711ad6.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1X-Amz-Cf-Id: Z9YttyLeSLuiLdwxtxT2Tb7ygTqqLFk2fIC2tLtr-AUADBUzqHYfWA

!DOCTYPE html>html>  script>    // Monkey patch Eventlistener back to original from One Login Extension    if (!!EventTarget.prototype.ol_originalAddEventListener) {      EventTarget.prototype.addEventListener  EventTarget.prototype.ol_originalAddEventListener;    }  /script>  head>    meta charsetutf-8/>    title>Admin panel/title>    base href//>    meta nameviewport contentwidthdevice-width, initial-scale1/>    link relicon typeimage/x-icon hrefassets/images/favicon.ico/>    link hrefhttps://fonts.googleapis.com/icon?familyMaterial+Icons relstylesheet/>    script typetext/javascript srcassets/js/codemirror.js>/script>    script srchttps://accounts.google.com/gsi/client>/script>    script>      function clipboardCopy(elementFrom) {        var txtArea  document.createElement(textarea);        var inputText  document.getElementById(elementFrom);        txtArea.style.position  fixed;        txtArea.style.top  0;        txtArea.style.left  0;        txtArea.style.opacity  0;        txtArea.value  inputText.innerText;        document.body.appendChild(txtArea);        txtArea.select();        document.execCommand(copy);        document.body.removeChild(txtArea);        return false;      }    /script>  link relstylesheet hrefstyles.5250d21d7f090b7e2dc8.css>/head>  body cn-app class.mini-navbarnavbarHidden class.overflow-hiddenoverflowHidden>    script>      /* variables added to prevent errors for AppSync service */      var global  global || window;      var process  process || {        env: {},        version: ,      };    /script>    !-- for GA with GTM -->    noscript>      iframe        srchttps://www.googletagmanager.com/ns.html?idGTM-TB9PQT        height0        width0        styledisplay: none; visibility: hidden      >/iframe>    /noscript>    script>      (function (w, d, s, l, i) {        wl  wl || ;        wl.push({          gtm.start: new Date().getTime(),          event: gtm.js,        });        var f  d.getElementsByTagName(s)0,          j  d.createElement(s),          dl  l ! dataLayer ? &l + l : ;        j.async  true;        j.src  https://www.googletagmanager.com/gtm.js?id + i + dl;        f.parentNode.insertBefore(j, f);      })(window, document, script, dataLayer, GTM-TB9PQT);    /script>    !-- End for GA with GTM -->    div classm-t-xl vertical-container>      div classprogress progress-striped active>        div stylecolor: #fff; width: 100% aria-valuemax100 aria-valuemin0 aria-valuenow50 roleprogressbar classprogress-bar>          span>Loading../span>        /div>      /div>    /div>  script srcruntime-es2017.152c1cdb22f99605528f.js typemodule>/script>script srcruntime-es5.152c1cdb22f99605528f.js nomodule defer>/script>script srcpolyfills-es5.4e347d30ee52d9b7f485.js nomodule defer>/script>script srcpolyfills-es2017.a66320243f6356e69f89.js typemodule>/script>script srcscripts.f97528fdcefe182b446b.js defer>/script>script srcvendor-es2017.5542d1bdb8285e1ea16b.js typemodule>/script>script srcvendor-es5.5542d1bdb8285e1ea16b.js nomodule defer>/script>script srcmain-es2017.c419f8970b96f93bdccb.js typemodule>/script>script srcmain-es5.c419f8970b96f93bdccb.js nomodule defer>/script>/body>/html>

Subdomains

Date	Domain	IP
m.img.cuponation.com	2024-02-26	99.84.66.22
mimg.cuponation.com	2024-07-20	18.161.6.95
api.cuponation.com	2024-02-21	35.156.32.97
click.email.cuponation.com	2024-12-01	23.46.228.141
ap.cuponation.com	2025-09-13	18.161.6.12
imgs.cuponation.com	2024-12-07	3.163.174.20
ap-e2e-reports.cuponation.com	2025-01-07	3.163.189.16
black-friday-script.cuponation.com	2024-04-25	54.230.125.139
www.cuponation.com	2024-06-08	3.163.24.39

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ap.cuponation.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains