Domain > dreamwiz.com

More information on this domain is in AlienVault OTX

Files that talk to dreamwiz.com

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
69105950b2bb95843dea5937bea0e8f0	[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
e21b3469b4fc1efddf76d8c89f1ebb2a	[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
210b6e761b4cb7d71e862606c0f28846	[Artemis!210B6E761B4C] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.prs] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr] [SHeur4.BNRB]
4211b2d7121c11d5f032e6620030a384	[HW32.CDB.Cd7e] [Packed.Win32.Katusha.3!O] [Hlux.ZY] [VirTool:Win32/Obfuscator.WT]
db5b440f6419090cd9567f3b33fd3ced	[Malware.Packer.HGX1] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
3220ab9b63a767c299000ea9d9e3a056	[HW32.CDB.1b0b] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!u8SUOkHyYnA] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.RbUfAWB] [Backdoor.Win32.Hlux.dpoo] [Trojan.Win32.Hlux.cxxuzn] [TrojWare.Win32.Kryptik.CAUP] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Backdoor.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Lgjg] [Trojan.Crypt_s] [W32/Kryptik.CAXO!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]
3a44da011fc699a6afc6cc7d07131dd6	[HW32.CDB.14e7] [Trojan.Win32.Kryptik.cxajdj] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CAHC] [Trojan.Packed.26527] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKZ]
e9a5bc168334d1c8371468d3e033ad32
64d63f2465d931818539beff1ca66a34	[Crypt2.AATE] [TR/Rogue.1134088]
6bd3a60b66efb707e894f2717cccf17b
57be65340d0a4336f525d108862ccf50
315325f544912a68464bf38e3edf6371	[HW32.CDB.9e5e] [Backdoor/W32.Hlux.829456.H] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux!aauIqdu764w] [Trojan.FakeAV] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dqyy] [Win32.Backdoor.Hlux.Lhdb] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aZvR] [Win32/Trojan.337]
3be8faf7b111dadde0d8e17b428125b0	[Backdoor/W32.Androm.39936.C] [Trojan.Androm.vsg.cw4] [Trojan.Inject] [Trojan/Kryptik.bdbi] [Trojan.Win32.Androm.btkkib] [WS.Reputation.1] [TROJ_CUTWAIL.PQP] [Backdoor.Win32.Androm.vsg] [Backdoor.Androm!mmztmFLZ69E] [UnclassifiedMalware] [BackDoor.Bulknet.958] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail] [Client-SMTP.39936] [W32/Backdoor.DIPS-1259] [Backdoor.Androm] [Virus.Win32.Cryptor] [W32/Androm.VSG!tr.bdr] [Win32/Cryptor] [W32/Palevo.GEZ.worm]
d38a3646d932d062528aea48d2122315
b4f310f5cc7b9cd68d919d50a8415974	[HW32.Laneul.zqwg] [Trojan/W32.Jorik.40448.U] [TrojanDownloader.Cutwail] [Trojan] [Trojan.Win32.Jorik.byfbdv] [W32.Pilleuz] [Win32/Cutwail.RfLHODC] [TROJ_SPNR.0BGS13] [Trojan.Win32.Jorik.Cutwail.prm] [Trojan.Cutwail!Vn3uTMMB5CM] [UnclassifiedMalware] [BackDoor.Bulknet.958] [TR/Graftor.103216] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Client-SMTP.40448.A] [Dropper/Win32.Vidro] [BScope.Trojan.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr] [SHeur4.BNRB] [Trj/CI.A] [TrojanDownloader*Win32/Cutwail.BS]
622bf7ba2317ae03b0682a650bac03d8	[TrojanDownloader.Cutwail] [Cutwail-FBPN!622BF7BA2317] [W32.Pilleuz] [Pushdo.I] [TROJ_SPNR.1ADR13] [Backdoor.Win32.Pushdo.pyz] [Backdoor.Pushdo!kokJ8DxObyw] [Heur.Suspicious] [BackDoor.Bulknet.893] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.U.Pushdo.41472] [Backdoor/Win32.Pushdo] [W32/Backdoor.PJEO-2224] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PYZ!tr.bdr] [SHeur4.BGUF] [Trj/OCJ.D]
1623be5a046aa215162665c5067332e0	[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
dde053529fc90359815908c8ee1def65	[FakeSecTool-FCX!DDE053529FC9] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]

Whois

Property	Value
Email	dwdomain@dreamwiz.com
NameServer	EX-NS2.DREAMWIZ.COM
Created	1999-06-01 00:00:00
Changed	2014-12-01 00:00:00
Expires	2020-06-01 00:00:00
Registrar	DOTNAME KOREA CORP

DNS Resolutions

Date	IP Address
2012-12-17	175.45.163.82 (ClassC)
2012-12-26	61.111.245.50 (ClassC)
2013-01-05	61.111.247.160 (ClassC)
2013-01-13	61.111.244.75 (ClassC)
2013-06-19	61.111.244.139 (ClassC)
2013-06-19	61.111.244.129 (ClassC)
2013-07-21	61.111.245.136 (ClassC)
2013-09-01	61.111.244.129 (ClassC)
2013-11-02	61.111.244.139 (ClassC)
2013-11-14	61.111.244.71 (ClassC)
2014-06-23	61.111.244.161 (ClassC)
2014-10-31	183.111.184.198 (ClassC)
2014-10-31	183.111.184.199 (ClassC)
2014-10-31	183.111.184.200 (ClassC)
2015-01-06	183.111.184.235 (ClassC)
2021-11-20	173.194.77.26 (ClassC)
2021-12-20	74.125.20.26 (ClassC)
2025-05-10	183.110.214.4 (ClassC)
2026-02-21	183.110.214.137 (ClassC)

HTTP/1.1 200 OKDate: Wed, 30 Dec 2020 11:36:53 GMTServer: ApacheCache-Control: no-cache, must-revalidateP3P: CPALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA P

!DOCTYPE html>html>head>title>드림위즈/title>meta charsetutf-8>link relshortcut icon typeimage/x-icon hrefdreamwiz.ico />script srchttps://code.jquery.com/jquery-2.2.1.min.js>/script>script src/_resource/js/script.js>/script>link href//fonts.googleapis.com/css?familyMontserrat relstylesheet typetext/css>link href/_resource/css/css.css relstylesheet typetext/css>/head>body>div classd_wrap>form methodget nameFrm action//search.dreamwiz.com idsearchFrm>input typehidden namecddtc idcddtc value>div classsearch_wrap>	ul classlogo>a href/>img src/_resource/images/logo.png>/a>/ul>    ul classinpbox>        input namesword idsword typetext placeholder궁금한 내용을 드림위즈에게 물어보세요>        img src/_resource/images/btn_search.png onclickif (document.getElementById(sword).value  ) return false; document.getElementById(searchFrm).submit(); return false;;return true;>    /ul>/div>/form>div classkeyword_wrap>	div classlist>        div classtit>실시간검색어/div>        div classword onClickkeywrod_tg()>			ul>span>1/span>구구단/ul>			ul>span>2/span>이재용/ul>			ul>span>3/span>금오산 약사암/ul>			ul>span>4/span>조송화/ul>			ul>span>5/span>박범계/ul>			ul>span>6/span>영천 돌할매/ul>			ul>span>7/span>설민석/ul>			ul>span>8/span>이채은/ul>			ul>span>9/span>2020 mbc 연기대상/ul>			ul>span>10/span>동아대학교/ul>			ul>span>11/span>12월 31일 주식/ul>			ul>span>12/span>스위트홈/ul>			ul>span>13/span>왓챠/ul>			ul>span>14/span>코로나/ul>			ul>span>15/span>구형/ul>			ul>span>16/span>금융투자교육원/ul>			ul>span>17/span>모슬포 대방어 택배/ul>			ul>span>18/span>국민취업지원제도/ul>			ul>span>19/span>스터디포스 트레이닝센터/ul>			ul>span>20/span>알렉산더왕/ul>        /div>	/div>    div classlist_all>        div classtit>실시간검색어/div>        div classbtn onClickkeywrod_tg()>img src/_resource/images/btn_close.png>/div>        div classword>			ul onClickwindow.open(http://search.dreamwiz.com/?sword구구단)>span

Port 443

HTTP/1.1 200 OKDate: Wed, 30 Dec 2020 11:36:54 GMTServer: ApacheCache-Control: no-cache, must-revalidateP3P: CPALL CURa ADMa DEVa TAIa OUR BUS IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA P

Subdomains

Date	Domain	IP
EX-NS2.DREAMWIZ.COM	2026-01-02	183.110.216.251
openapi3.dreamwiz.com	2025-05-11	183.110.214.149
ex-ns3.dreamwiz.com	2025-05-05	183.110.216.251
mx-ra.dreamwiz.com	2014-06-18	61.111.244.139
mx-rb.dreamwiz.com	2014-06-16	61.111.244.129
www.dreamwiz.com	2025-05-12	183.110.214.4
my.dreamwiz.com	2013-09-21	61.111.244.71
cl.biz.dreamwiz.com	2025-05-12	112.175.227.93

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]