Domain > theunion.com

More information on this domain is in AlienVault OTX

Property	Value
NameServer	NS2.SWIFTNEWS.NET
Created	1995-08-17 00:00:00
Changed	2015-08-16 00:00:00
Expires	2016-08-16 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2026-01-16	192.104.182.109 (ClassC)

HTTP/1.1 301 Moved Permanentlydate: Sat, 26 Aug 2023 23:43:10 GMTcontent-type: text/html; charsetUTF-8x-loop: 1x-robots-tag: noarchivex-xrds-location: https://www.theunion.com/tncms/xrds/location: htt

!DOCTYPE html PUBLIC -//IETF//DTD HTML 2.0//EN>html>head>base hrefhttp://www.theunion.com/content/tncms/live/ />script typetext/javascript>(function(){var tnsrcwindow.location.hash.match(/&#tncms-source(^&+)/);var dl  window.dataLayer  window.dataLayer || ;dl.push({townnews:{product:{software:BLOX,version:1.70.8},crm:{group_id:370}},tncms:{asset:,page:{app:editorial,skin:flex-editorial,theme:flex,http_status:301},client:{is_bot:no,noscript:false,is_gdpr:no},system:{render_time:15}}});if (tnsrc && tnsrc1) {dl.push({tncms.campaign.internal_source: tnsrc1});}window.addEventListener(DOMContentLoaded, function(oEvent) {var oTest  document.createElement(div);oTest.innerHTML   ;oTest.className  adsbox;document.body.appendChild(oTest);var nTimeoutID  window.setTimeout(function() {if (oTest.offsetHeight  0) {dl.push({event: tncms.ad.blocked});}document.body.removeChild(oTest);window.clearTimeout(nTimeoutID);}, 100);});var nWidthMath.max(document.documentElement.clientWidth, window.innerWidth || 0),aBPs300,Extra small: Most smartphones.,768,Small: Tablet devices.,992,Medium: Laptops & landscape tablets.,1200,Large: Desktop computers.,i,c,aThisBP,aBP;for(i0,caBPs.length;ic;i++){aThisBPaBPsi;if(aBPundefined||aThisBP0nWidth){aBPaThisBP;}}if(aBP!undefined){dl.push({tncms.client.breakpoint:aBP1});}(function(w,d,s,l,i){wlwl||;wl.push({tncms.start:new Date().getTime(),event:tncms.start});var fd.getElementsByTagName(s)0,jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);})(window,document,script,dataLayer,GTM-PDQV3N);})();/script>title>301 Moved Permanently/title>/head>body>	script typetext/javascript src/shared-content/art/stats/common/tracker.js>/script>	script typetext/javascript>	!--	if (typeof(TNStats_Tracker) ! undefined && typeof(TNTracker)  undefined) { TNTracker  new TNStats_Tracker(theunion.com); TNTracker.trackPageView(); }	// -->	/script>	noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-PDQV3N&townnews.product

Port 443

HTTP/1.1 301 Moved Permanentlydate: Sat, 26 Aug 2023 23:56:43 GMTcontent-type: text/html; charsetUTF-8x-loop: 1referrer-policy: strict-origin-when-cross-originx-robots-tag: noarchivex-xrds-location: h

!DOCTYPE html PUBLIC -//IETF//DTD HTML 2.0//EN>html>head>base hrefhttps://www.theunion.com/content/tncms/live/ />script typetext/javascript>(function(){var tnsrcwindow.location.hash.match(/&#tncms-source(^&+)/);var dl  window.dataLayer  window.dataLayer || ;dl.push({townnews:{product:{software:BLOX,version:1.70.8},crm:{group_id:370}},tncms:{asset:,page:{app:editorial,skin:flex-editorial,theme:flex,http_status:301},client:{is_bot:no,noscript:false,is_gdpr:yes},system:{render_time:16}}});if (tnsrc && tnsrc1) {dl.push({tncms.campaign.internal_source: tnsrc1});}window.addEventListener(DOMContentLoaded, function(oEvent) {var oTest  document.createElement(div);oTest.innerHTML   ;oTest.className  adsbox;document.body.appendChild(oTest);var nTimeoutID  window.setTimeout(function() {if (oTest.offsetHeight  0) {dl.push({event: tncms.ad.blocked});}document.body.removeChild(oTest);window.clearTimeout(nTimeoutID);}, 100);});var nWidthMath.max(document.documentElement.clientWidth, window.innerWidth || 0),aBPs300,Extra small: Most smartphones.,768,Small: Tablet devices.,992,Medium: Laptops & landscape tablets.,1200,Large: Desktop computers.,i,c,aThisBP,aBP;for(i0,caBPs.length;ic;i++){aThisBPaBPsi;if(aBPundefined||aThisBP0nWidth){aBPaThisBP;}}if(aBP!undefined){dl.push({tncms.client.breakpoint:aBP1});}(function(w,d,s,l,i){wlwl||;wl.push({tncms.start:new Date().getTime(),event:tncms.start});var fd.getElementsByTagName(s)0,jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);})(window,document,script,dataLayer,GTM-PDQV3N);})();/script>title>301 Moved Permanently/title>/head>body>	script typetext/javascript src/shared-content/art/stats/common/tracker.js>/script>	script typetext/javascript>	!--	if (typeof(TNStats_Tracker) ! undefined && typeof(TNTracker)  undefined) { TNTracker  new TNStats_Tracker(theunion.com); TNTracker.trackPageView(); }	// -->	/script>	noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-PDQV3N&townnews.produ

Subdomains

Date	Domain	IP
dtilive.theunion.com	2025-11-22	64.94.90.94
smtp.theunion.com	2025-11-20	50.203.0.231
link.news.theunion.com	2026-01-11	96.47.24.150
www.theunion.com	2025-11-22	192.104.182.109

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

Domain > theunion.com

Is this malicious?

Files that talk to theunion.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains