The scan of cygwin.com on 20 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with cygwin.com?

29 analysed samples communicate with this URL, including Porcupine, Genpack, Hoax, Container.

How was cygwin.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

cygwin.com - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned cygwin.com and returned a unknown verdict (score 0). The page resolved to 38.145.34.32 on Red Hat, Inc. in US. The domain was registered 9750 days ago through Nom-iq Ltd. dba COM LAUDE. 6 domains and 1 IP were contacted. 29 malware samples communicate with this URL (Porcupine, Genpack, Hoax, Container). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 0) · Confidence 0%
Scanned URL: http://cygwin.com/problems.html
Domain: cygwin.com · IP: 38.145.34.32 · AS174 · US
Server: nginx
Page title: Reporting Cygwin Problems
HTTP status: 200 · text/html; charset=UTF-8
Registrar: Nom-iq Ltd. dba COM LAUDE · domain age 9750 days · created 1999-12-09
Scan tier: fast · observed 2026-08-20 07:02:07 UTC

Redirect chain

http://cygwin.com/problems.html
https://cygwin.com/problems.html

Malware communicating with this URL (29)

These samples were observed contacting or being served from cygwin.com. Each links to its full analysis.

Porcupine - referenced · 363a622be722fd2576bf45338e0e95a3 · first seen 2026-08-20
Genpack - referenced · ce310f5bb193dbde6c7eef25f0d74e08 · first seen 2026-08-20
Genpack - referenced · 7fcf1dc3e823c3319fe8651187a19ff9 · first seen 2026-08-19
Hoax - referenced · e4f76bc4ad3e31479e1b529222b98e1f · first seen 2026-08-19
44bf1bc2296636f1d5d13f079b232db69cc98ec3e08dbf038b4abfdbe5c05984 - referenced · 44bf1bc2296636f1d5d13f079b232db6 · first seen 2026-08-19
Genpack - referenced · 6ac17f5f958f19e717a5411723c37ce9 · first seen 2026-08-19
Genpack - referenced · 53d2536c7c08d7be8235442b4ee119ac · first seen 2026-08-19
Container - referenced · 103104a52e5293ce418944725df19e2b · first seen 2026-08-17
Genpack - referenced · 55645c363092d003a978246b75a134cb · first seen 2026-08-17
Genpack - referenced · d6189085fd58281d1e911d42360f3c7a · first seen 2026-08-17
Container - referenced · 2a5650c5cdf06928aa787210453f7d13 · first seen 2026-08-17
Hoax - referenced · 22dbfa6c9c814e692400a4250dc37a89 · first seen 2026-08-16
Ausiv - referenced · e0e52afb26074e437668e43217a043ed · first seen 2026-08-16
HUILoader - referenced · 07ce232c5ca744280c829ebaa1bbf04f · first seen 2026-08-16
Autorun - referenced · f37ce67d88d899e6385d77dd2ef1ddc0 · first seen 2026-08-15

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Detected technologies

Nginx

Contacted infrastructure

38.145.34.32 - AS174 Red Hat, Inc. (United States)

Observed indicators

cygwin.com
x.cygwin.com
sourceware.org
www.linuxfoundation.org
www.catb.org
www.chiark.greenend.org.uk
38.145.34.32
https://cygwin.com/problems.html
https://cygwin.com/style.css
https://cygwin.com/index.html
https://cygwin.com/install.html
https://cygwin.com/packages/
https://cygwin.com/licensing.html
http://x.cygwin.com/
https://cygwin.com/who.html
https://cygwin.com/lists.html
https://cygwin.com/news.html
https://cygwin.com/irc.html
https://cygwin.com/goldstars/
https://cygwin.com/mirrors.html

Other scans of cygwin.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

24 Aug 2026 - unknown · https://cygwin.com/
23 Aug 2026 - unknown · https://cygwin.com/
23 Aug 2026 - unknown · https://cygwin.com/
23 Aug 2026 - unknown · https://cygwin.com/
22 Aug 2026 - unknown · http://cygwin.com/cgi-bin2/package-grep.cgi?text=1&grep=
22 Aug 2026 - unknown · https://cygwin.com/
22 Aug 2026 - unknown · https://cygwin.com/
22 Aug 2026 - unknown · http://mintty.github.io/
22 Aug 2026 - suspicious · https://www.mingw-w64.org/
22 Aug 2026 - unknown · https://cygwin.com/

Questions about cygwin.com

Is cygwin.com safe?: The scan of cygwin.com on 20 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with cygwin.com?: 29 analysed samples communicate with this URL, including Porcupine, Genpack, Hoax, Container.
How was cygwin.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of cygwin.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan