Domain > ep.cygnuspub.com

More information on this domain is in AlienVault OTX

Property	Value
Email	DNS@CYGNUSPUB.COM
NameServer	NS-1742.AWSDNS-25.CO.UK
Created	1997-12-03 00:00:00
Changed	2014-11-03 00:00:00
Expires	2015-12-02 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2025-05-12	65.220.90.19 (ClassC)
2026-02-20	65.220.90.18 (ClassC)

HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlServer: Microsoft-IIS/10.0Set-Cookie: ASPSESSIONIDSQDBQBAQIMJHPMGCLPCJOPJIFDFJBBPF; path/X-Powered-By: ASP.NETContent-Security-Policy: objec

script>win  window.locationdomain  win.host//alert(domain)if (domain.indexOf(centrispoint) ! -1) //tp.tp-centrispoint.com	window.location  http://www.centrispoint.comelse if (domain.indexOf(fmmailer) ! -1) //tp.fmmailer.com	window.location  http://www.fiercemarkets.com	else if (domain.indexOf(the1trainingnetwork) ! -1) //tp.the1trainingnetwork.com	window.location  http://www.safetytrainingnetwork.comelse if (domain.indexOf(managingauto) ! -1) //pq.managingauto.com	window.location  http://www.managingautomation.comelse if (domain.indexOf(managinghr) ! -1) //tp.managinghr.net	window.location  http://www.meritdirect.comelse if (domain.indexOf(plansponsoradvisor) ! -1) //pq.plansponsoradvisor.net	window.location  http://www.plansponsor.comelse if (domain.indexOf(crain) ! -1 || domain.indexOf(automotivenewsglobal) ! -1) //pq.crainschicago.net,pq.crainscleveland.org,pq.automotivenewsglobal.com	window.location  http://www.crains.comelse if (domain.indexOf(designfeedback) ! -1) //pq.designfeedback.net	window.location  http://www.phillipsarch.comelse if (domain.indexOf(fmapub) ! -1) //pq.fmapubdirect.com	window.location  http://www.fma-communications.comelse if (domain.indexOf(rrpcoffers) ! -1) //pq.rrpcoffers.com	window.location  http://www.randallpub.comelse if (domain.indexOf(babcox) ! -1) //babcoxdirect.net,babcoxdirect.com	window.location  http://www.babcox.comelse if (domain.indexOf(scrantong) ! -1) //scrantongcomm.com,scrantongc.com	window.location  http://www.scrantongillette.comelse if (domain.indexOf(techproseries) ! -1) //TechProSeries	window.location  tpsHome.asp	else if (domain.indexOf(techproseries) ! -1) //TechProSeries	window.location  tpsHome.asp		else if (domain.indexOf(techprosseries) ! -1) //TechProSeries	window.location  tpsHome.asp	else if (domain.indexOf(techweb4prosseries) ! -1) //TechProSeries	window.location  tpsHome.asp	else if (domain.indexOf(techwebs4prosseries) ! -1) //TechProSeries	window.location  tpsHome.asp	else if (domain.indexOf(techwebforprosseries) ! -1) //TechProSeries	window.locatio

Port 443

HTTP/1.1 200 OKCache-Control: privateContent-Type: text/htmlServer: Microsoft-IIS/10.0Set-Cookie: ASPSESSIONIDSQDBQBAQJMJHPMGCJLFLPIAOKOCKJFPB; path/X-Powered-By: ASP.NETContent-Security-Policy: objec

Subdomains

Date	Domain	IP
mail.cygnuspub.com	2014-04-25	208.86.102.200
ep.cygnuspub.com	2025-05-12	65.220.90.19
mail.ep.cygnuspub.com	2026-02-10	65.220.97.197
autodiscover.cygnuspub.com	2024-09-15	52.96.166.56

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]

Domain > ep.cygnuspub.com

Is this malicious?

Files that talk to ep.cygnuspub.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains