Domain > ysu.edu

More information on this domain is in AlienVault OTX

Files that talk to ysu.edu

MD5	A/V
18e659efd6bd23972f0a9a6a9ecae920	[HW32.CDB.9c4f] [Trojan.Win32.Kryptik.cxapgj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmyv] [Backdoor.Hlux!x5Q6ZTEiRSs] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Win32.SuspectCrc] [W32/Kryptik.BWUN!tr] [Crypt3.LQN] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]
5dca1a3eeadf10d9e803d7cdf7d259b6	[Trojan.Click.1519] [Win32/TrojanClicker.Delf.EW] [W32/Delf.EW!tr] [Clicker.BSB] [Trojan-Downloader.Win32.Small] [Trojan-Clicker.Win32.Delf.ew] [TrojanClicker*Win32/Dateet.A] [TrojanClicker.Delf]
129893be541a5853da63c69a90dc7fa6	[HW32.CDB.6488] [Packed.Win32.Katusha.3!O] [Trojan.Win32.Slym.cxvgrz] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dtmi] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13011] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.MalPacked] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBLX]
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]
45e45d9707887dc0cc0da495b7968acd	[FakeSecTool-FCX!45E45D970788] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]
a480649c0695ca403c2650c2f5ec4796	[HW32.CDB.6149] [Packed.Win32.Katusha.1!O] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.QbYCJQ] [Backdoor.Win32.Hlux.dqiv] [Backdoor.Hlux!zx6Z3QU4CJg] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [W32/Trojan.TGXU-8116] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.Backdoor.Hlux.Lmai] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBCJ]
3209b25b5988bb055d56e1b1e6382e40	[HW32.CDB.53d8] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twjg] [Mal/FakeAV-UF] [TrojWare.Win32.Kryptik.CASU] [Trojan.Packed.26544] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.ELDJ-0755] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GPK] [Trojan.Win32.InfoStealer.As]
4b93f892d9249b70508ee222e37ee1c6	[HW32.CDB.E823] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxbvtz] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.txbj] [Trojan.PWS.Tepfer!TcJrQOwJyhs] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CAUP] [Trojan.Crypt_s] [W32/Tepfer.CAUP!tr.pws] [Crypt_s.GMK]
6502921b8928a37df0f0f412d10a7486	[HW32.CDB.0650] [Malware.Packer.FFS] [Trojan/Win32.Symmi]
4a110bd7cb835d71df2345ad50c25b23	[HW32.CDB.9f50] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [UnclassifiedMalware] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ] [Win32/Trojan.0de]
56b02dc8b8072c1f787058a56eae64f0	[HW32.CDB.9b1c] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwhrmp] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djkd] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHE] [Trojan.Win32.Kryptik.BZIX] [Win32/Trojan.ef7]

Whois

Property	Value
Email	tacross@ysu.edu
Address	Youngstown State University One University Plaza Youngstown, OH 44555-3036
NameServer	NS2.YSU.EDU
Created	1989-01-27 00:00:00
Changed	2015-03-27 00:00:00
Expires	2015-07-31 00:00:00

DNS Resolutions

Date	IP Address
2013-12-22	150.134.10.163 (ClassC)
2014-04-29	150.134.10.10 (ClassC)
2014-05-29	150.134.10.10 (ClassC)
2015-04-13	150.134.10.17 (ClassC)
2025-04-09	52.87.65.167 (ClassC)
2025-10-17	52.45.50.198 (ClassC)
2026-01-19	44.196.136.135 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sat, 06 Jul 2019 12:19:51 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveExpires: Sun, 19 Nov 1978 05:00:00 GMTCache-Control:

!DOCTYPE html>html classno-js html front not-logged-in no-sidebars page-node page-node- page-node-5434 node-type-home langen xmlnshttp://www.w3.org/1999/xhtml xml:langen dirltr  xmlns:contenthttp://purl.org/rss/1.0/modules/content/  xmlns:dchttp://purl.org/dc/terms/  xmlns:foafhttp://xmlns.com/foaf/0.1/  xmlns:oghttp://ogp.me/ns#  xmlns:rdfshttp://www.w3.org/2000/01/rdf-schema#  xmlns:siochttp://rdfs.org/sioc/ns#  xmlns:siocthttp://rdfs.org/sioc/types#  xmlns:skoshttp://www.w3.org/2004/02/skos/core#  xmlns:xsdhttp://www.w3.org/2001/XMLSchema#>head>  style>.async-hide { opacity: 0 !important} /style>  script>  (function(a,s,y,n,c,h,i,d,e){s.className+ +y;  h.endifunction(){s.classNames.className.replace(RegExp( ?+y),)};  (anan||).hideh;setTimeout(function(){i();h.endnull},c);  })(window,document.documentElement,async-hide,dataLayer,4000,{GTM-P6PRBS:true});  /script>  meta http-equivContent-Type contenttext/html; charsetutf-8 />script typetext/javascript>window.NREUM||(NREUM{}),__nr_requirefunction(e,n,t){function r(t){if(!nt){var ont{exports:{}};et0.call(o.exports,function(n){var oet1n;return r(o||n)},o,o.exports)}return nt.exports}if(functiontypeof __nr_require)return __nr_require;for(var o0;ot.length;o++)r(to);return r}({1:function(e,n,t){function r(){}function o(e,n,t){return function(){return i(e,c.now().concat(u(arguments)),n?null:this,t),n?void 0:this}}var ie(handle),ae(3),ue(4),fe(ee).get(tracer),ce(loader),sNREUM;undefinedtypeof window.newrelic&&(newrelics);var psetPageViewName,setCustomAttribute,setErrorHandler,finished,addToTrace,inlineHit,addRelease,dapi-,ld+ixn-;a(p,function(e,n){sno(d+n,!0,api)}),s.addPageActiono(d+addPageAction,!0),s.setCurrentRouteNameo(d+routeName,!0),n.exportsnewrelic,s.interactionfunction(){return(new r).get()};var mr.prototype{createTracer:function(e,n){var t{},rthis,ofunctiontypeof n;return i(l+tracer,c.now(),e,t,r),function(){if(f.emit((o?:no-)+fn-start,c.now(),r,o,t),o)try{return n.apply(this,arguments)}catch(e){throw f.emit(fn-err,arguments,this,e,t),e}finally{f.emit(fn-end,

Subdomains

Date	Domain	IP
NS2.YSU.EDU	2026-01-13	150.134.50.4
cc.ysu.edu	2018-03-11	150.134.10.34
people.ysu.edu	2025-11-17	150.134.10.16
image.e.online.ysu.edu	2025-02-03	23.192.230.151
eupdate.ysu.edu	2026-01-05	52.223.46.177
maag.guides.ysu.edu	2026-01-13	3.86.37.148
www.ysu.edu	2024-07-27	52.87.65.167

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ysu.edu

Is this malicious?

Files that talk to ysu.edu

Whois

DNS Resolutions

Port 80

Port 443

Subdomains