Help RSS API Feed Maltego Contact                        

Domain > cs3.duba.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to cs3.duba.net
MD5A/V
12bf48aad67e6aa7ded1498c4858d865[Backdoor*Win32/Zegost.B]
f5ca13562fb1b3cec45358021a3b4a25
f975521a337dbd521fb6e63bd18b6f8e[Backdoor*Win32/Zegost.B]
91b6070301fabef0a11df97a731ba840[Win32/Tnega.XAVE!suspicious] [Win.Trojan.Vundo-38933] [Trojan.Baijin.311] [Trojan*W32/DelfInject.R] [Backdoor.Zegost!56D2] [Dropper.Binder.Win32.2608]
abec713acddf4ae5b9ddb593188d0b43[Backdoor*Win32/Zegost.B]
914ad1bd33207f40edb342d496abdc6f[Backdoor*Win32/Zegost.B]
77207de1291743910297c7c005580123
5900589b310931348632c29d0e1bcec6[Backdoor*Win32/Zegost.B]
99d8ef0fde1e23b1aa6000d36c3c7532
976c810fa1764d3fc7f0f3e70911a513[BackDoor-EQO] [Win.Trojan.Zegost-1749] [Backdoor*Win32/Zegost.B]
a0a29901cb45502e5b4fc1c917627905
432efb2996011b34d4dcd6c5d60f196e[Backdoor*Win32/Zegost.B]
7e73261632d29f3f24cd0d8ad41ea86c[BackDoor-EQO] [Win.Trojan.Zegost-1749] [Backdoor*Win32/Zegost.B]
9dc15e18ad9d12fd396087bb505dcfdd
0BCC74FC33A2AE842EAB50D924E6F6D6
5abad09c006f9014e5138147f03f6651[W32.Sality.PE] [Win32.Sality.3] [Virus/W32.Sality.D] [Packed.Win32.Obfuscated.10!O] [W32.Sality.U] [Win32.Sality.BL] [W32.Sality.AE] [Sality.ZHB] [Win32/Sality.AA] [PE_SALITY.RL] [Win32:SaliCode] [Virus.Win32.Sality.beygb] [Win32.Sality.N] [Win32.Sector.22] [W32/Sality.AT] [PE_SALITY.BMC] [Mal/Sality-D] [Win32.Sality.lx.368640] [Virus:Win32/Sality.AT] [Win32/Kashu.E] [Virus.Win32.Sality.bakc] [W32/Sality.AA] [Win32/Sality.NBA] [Virus.Win32.Sality] [Win32/Sality] [Virus.Win32.Sality.$Emu] [Win32/Trojan.1ef]
761ffdcc948c5797a8697a7f781dfe21

Whois
PropertyValue
Email zhaoyiding@cmcm.com
NameServer LV3NS2.FFDNS.NET
Created 2002-03-20 00:00:00
Changed 2014-11-24 00:00:00
Expires 2018-03-20 00:00:00
Registrar ENAME TECHNOLOGY CO.

DNS Resolutions
DateIP Address
2014-01-11114.112.68.186 (ClassC)
2024-12-25114.112.68.186 (ClassC)

Subdomains
DateDomainIP
infoc0.duba.net2014-03-12119.147.146.84
duba-011.duba.net2015-03-10222.132.18.81
cs1.duba.net2013-08-18125.39.136.78
infoc2.duba.net2014-03-12119.147.146.70
cs2.duba.net2013-08-18219.239.93.145
cs13.duba.net2013-12-18121.14.11.100
123.duba.net2014-10-278.37.231.19
cs3.duba.net2014-01-11114.112.68.186
dr.cs3.duba.net2014-07-13114.112.93.52
cs4.duba.net2013-08-18125.39.136.78
kwsdata.duba.net2014-07-11125.39.136.78
vipzone.c.duba.net2013-11-1061.188.191.96
i2c.duba.net2014-07-11125.39.136.78
union.infoc.duba.net2024-06-22139.9.36.178
download.duba.net2014-07-19218.60.107.32
bj.download.duba.net2024-02-17116.177.237.157
hd.duba.net2013-08-18122.228.218.146
uuid.duba.net2024-12-07114.112.68.186
udp.cloud.duba.net2024-12-07120.131.3.117
rq.kpcct.cloud.duba.net2024-12-25110.43.89.9
rq.drcct.cloud.duba.net2024-11-07110.43.89.7
optimize.duba.net2023-12-06175.6.49.1
static.i.duba.net2014-11-2661.240.135.34
config.i.duba.net2015-04-07222.163.198.56
hy-shengji.duba.net2014-05-19221.204.22.208
libmini.duba.net2014-05-12112.253.26.34
quick.duba.net2014-04-04101.28.252.194
sem.duba.net2023-12-24119.39.154.247
wan.duba.net2013-04-26222.243.110.166
duba-config-cdn.duba.net2024-08-21120.233.178.90
bo.duba.net2014-01-25119.147.146.155
ifr.duba.net2014-01-25127.0.0.1
softmgr.duba.net2014-12-14101.71.11.63
img.bbs.duba.net2014-04-21116.10.190.62
starfish.cs.duba.net2013-06-15114.112.68.195
f-signs.duba.net2014-01-25121.14.11.28
fsigns.duba.net2014-04-06101.28.252.194
ct.duba.net2014-03-12119.147.146.89
v.duba.net2024-01-07119.39.154.247
cv.duba.net2013-07-01119.147.146.10
www.duba.net2014-02-19114.112.68.197
cu010.www.duba.net2015-03-03222.163.198.139
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information