Domain > duzip.com

More information on this domain is in AlienVault OTX

Files that talk to duzip.com

MD5	A/V
471ec8cbd8ebec844f899d0d9ed2c403	[ADWARE/Hebogo.D]
a9cfc02550286222aa6b07424e159523
c7df9b580cbaa38e6de796aab4f5e5d1	[ADWARE/Hebogo.D]
98a9fe994ad2cd3ae0bb8253f1323fc2	[ADWARE/Hebogo.D]
4541c5795e786bd1e958efa605898ae5	[ADWARE/Hebogo.D]
e6d25122bccd26d371575cffb59f24a4	[ADWARE/Hebogo.D]
3c2283a4dd45c4286e3bfd3d16462ab5
1dc3cb8f363bde761d4cff6e874f7609	[ADWARE/Hebogo.D]
457cc25ac529f562f1f75b47d0bc4b01	[ADWARE/Hebogo.D]
7c22e2848cd20bfd47041e289785a6f3	[ADWARE/Hebogo.D]
101fc675f7e76ee1a064e582f0e1966d
918f0224186fe681162c045b004b20b4
5a338e02fa81eebd769dc44ceacdd8a4	[not-a-virus:HEUR:AdWare.Win32.Hebogo.heur] [ApplicUnwnt] [Trojan.DownLoader8.56501] [Adware/Hebogo.D] [Virus.Win32.Part.i]
a68af5b4681168f69cb36b7c30c44896	[Virus.Win32.Jeefo.A] [Win32.Jeefo.B] [W32/Jeefo.OYRV-0749] [W32/Jeefo.A] [Win32/Jeefo.A] [W32.Jeefo.A] [W32.Jeefo-3] [Win32.HLLP.Jeefo.36352] [Win32/Hidrag.A] [Virus.Win32.Hidrag] [Virus.Win32.Hidrag.a] [W32/Jeefo.e] [Virus*Win32/Jeefo.A] [Win32.Jeefo.a] [W32/Jeefo-A] [W32.Jeefo] [PE_JEEFO.E] [Virus.Jeefo]
c31c79ab9108f863f6c1ddafe868d6b8
32ec23663dcf1524cee89d74387f6c41	[ADWARE/Hebogo.D]
547bc2982a3a728b98ada88c51b21185	[ADWARE/Hebogo.D]
37c7a82fd9d93839940b6755084eb844	[ADWARE/Hebogo.D]
4e68c13ec80079b7161ad2bcbbef3603	[ADWARE/Hebogo.D]
6e2696354c08d2fd61a26b8f3cc03a89	[W32.HfsAdware.5066] [Trojan.Adware.Zusy.D283BD] [HV_HEBOGO_CA2333AA.TOMC] [not-a-virus:AdWare.Win32.Hebogo.vje] [Adware.Hebogo.8] [GrayWare[AdWare:not-a-virus]/Win32.Hebogo] [PUA.Hebogo]

Whois

Property	Value
Email	gldforce@hanmail.net
NameServer	NS.GABIA.NET
Created	2009-12-08 00:00:00
Changed	2014-12-15 00:00:00
Expires	2017-12-08 00:00:00
Registrar	GABIA, INC.

DNS Resolutions

Date	IP Address
2011-06-11	58.180.70.168 (ClassC)
2013-04-01	220.73.162.26 (ClassC)
2013-04-01	220.73.162.45 (ClassC)
2014-01-14	220.73.162.43 (ClassC)
2024-01-06	64.190.63.111 (ClassC)
2024-05-24	15.197.192.55 (ClassC)
2024-08-24	66.179.251.192 (ClassC)
2025-01-06	74.208.199.202 (ClassC)

HTTP/1.1 200 OKdate: Sat, 06 Jan 2024 13:03:38 GMTcontent-type: text/html; charsetUTF-8transfer-encoding: chunkedvary: Accept-Encodingx-powered-by: PHP/8.1.17expires: Mon, 26 Jul 1997 05:00:00 GMTcach

!DOCTYPE html>html langen  data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ_vQFAJLL8pXlU78TW+GZPwDRxa6LoZUeWX6e8qVYPAAnZq3TuRft78SLiCmoRz9XWoGQdMmwiGjDcX7LyjoJkRQ>head>meta charsetutf-8>title>duzip.com - This website is for sale! - duzip Resources and Information./title>meta nameviewport contentwidthdevice-width,initial-scale1.0,maximum-scale1.0,user-scalable0>meta namedescription contentThis website is for sale! duzip.com is your first and best source for information about duzip. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!>link        relicon        typeimage/png        href//img.sedoparking.com/templates/logos/sedo_logo.png/>/head>body>img width16 height16 srchttp://img.sedoparking.com/images/js_preloader.gif/>script typetext/javascript>    var request  new XMLHttpRequest();    request.open(GET, //duzip.com/search/tsc.php?200u003DNTA2NDIyNzE0u002621u003DNTIuNDAuMjM0LjEwNQu003Du003Du0026681u003DMTcwNDU0NjIxOGMwYWJkZGMwNGYwZjE5MjA2ZTNlN2RjY2I4Zjg5NWRhu0026crcu003Da09bd3fcae77b221328601d5c5bdd3545f0b11f1u0026cvu003D1);    request.send();            request.onreadystatechange  function() {            if (request.readyState  4) {                if (request.status  200) {                     window.location  //duzip.com/search/redirect.phpu003Ffu003Dhttpu00253Au00252Fu00252Ffindresultsonline.comu00252Fu00253Fdnu00253Dduzip.comu002526rgu00253D12300812u002526_slsenu00253D1u0026vu003DYzVhODUyNGU3NGZmOWQ4ODc3NTFhYWI1MjMxYmZiZDYJMQlkdXppcC5jb202NTk5NGZhYWNmOWE3My41MTQ0NTE4NQlkdXppcC5jb202NTk5NGZhYWNmYTFmMC4xNjk3NjU0NQkxNzA0NTQ2MjE4CWFkXzM3XzAu00253Du0026lu003DOAk2MmI4MGNlZWI1Y2RlZmViMmY2ZWNiNmMyMjMwYTM2OQkwCTEzCTAJYzZkNzg3Y2ZkZmY1OWE0MzNhYWE4ZGNkZTMzY2VhZjkJNTA2NDIyNzE0CWR1emlwCTAJMzcJNQk1OQkxNzA0NTQ2MjE4CTAuMDEwMTIJTgkwCTEJMAkxMjA1CTg5Mjc1MTY4CTUyLjQwLjIzNC4xMDUJMAu0025253Du0025253D                }            }        }    /script>/body>/ht

Port 443

HTTP/1.1 200 OKCache-Control: no-store, no-cache, must-revalidate, post-check0, pre-check0Content-Type: text/html; charsetUTF-8Date: Sat, 06 Jan 2024 13:03:39 GMTExpires: Mon, 26 Jul 1997 05:00:00 GMT

!DOCTYPE html>html langen  data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ_vQFAJLL8pXlU78TW+GZPwDRxa6LoZUeWX6e8qVYPAAnZq3TuRft78SLiCmoRz9XWoGQdMmwiGjDcX7LyjoJkRQ>head>meta charsetutf-8>title>duzip.com - This website is for sale! - duzip Resources and Information./title>meta nameviewport contentwidthdevice-width,initial-scale1.0,maximum-scale1.0,user-scalable0>meta namedescription contentThis website is for sale! duzip.com is your first and best source for information about duzip. Here you will also find topics relating to issues of general interest. We hope you find what you are looking for!>link        relicon        typeimage/png        href//img.sedoparking.com/templates/logos/sedo_logo.png/>/head>body>img width16 height16 srchttp://img.sedoparking.com/images/js_preloader.gif/>script typetext/javascript>    var request  new XMLHttpRequest();    request.open(GET, //duzip.com/search/tsc.php?200u003DNTA2NDIyNzE0u002621u003DNTIuNDAuMjM0LjEwNQu003Du003Du0026681u003DMTcwNDU0NjIxOTg3NDczYTU5ZjUxMzQ0OWY3OTZiNDY3YjBhMjliMjVhu0026crcu003D5b46e3f51e849ad990a36c1b0a25bdb2fbb7a093u0026cvu003D1);    request.send();            request.onreadystatechange  function() {            if (request.readyState  4) {                if (request.status  200) {                     window.location  //duzip.com/search/redirect.phpu003Ffu003Dhttpu00253Au00252Fu00252Ffindresultsonline.comu00252Fu00253Fdnu00253Dduzip.comu002526rgu00253D12300812u002526_slsenu00253D1u0026vu003DMGIyYzc1YjAyZWI4MDMwZTNhMzI4NDUwYjFmMGQ0NjkJMQlkdXppcC5jb202NTk5NGZhYmExNjQwNS4yOTA4MTQ1OAlkdXppcC5jb202NTk5NGZhYmExNjhmOS43NDg5NjA4MAkxNzA0NTQ2MjE5CWFkXzM3XzAu00253Du0026lu003DOAlmNjBiMzE5ZGQ4ODkwYzcwM2FkNzU0ZjE1M2RjMTdiMwkwCTEzCTAJYzZkNzg3Y2ZkZmY1OWE0MzNhYWE4ZGNkZTMzY2VhZjkJNTA2NDIyNzE0CWR1emlwCTAJMzcJNQk1OQkxNzA0NTQ2MjE5CTAuMDEwMTIJTgkwCTEJMAkxMjA1CTg5Mjc1MTY4CTUyLjQwLjIzNC4xMDUJMQu0025253Du0025253D                }            }        }    /script>/body>/ht

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > duzip.com

Is this malicious?

Files that talk to duzip.com

Whois

DNS Resolutions

Port 80

Port 443