Help RSS API Feed Maltego Contact                        

Domain > ggteam2024.gnway.cc

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ggteam2024.gnway.cc
MD5A/V
2856cfce8248daaa88cda8c79d8394f4[Backdoor.Zegost] [Backdoor.Win32.Zegost.msxts] [Trojan.Win32.Delf] [W32/Threat-SysVenFak-based!Maxi] [W32/Threat-SysVenFak-based!Maxi] [W32/Delf.QKO!tr] [Luhe.Packed.AP] [Win32/Delf.QKO] [Trojan.Cap148315.jjkh]
302223cb4d0052ea95ca1619584773c0[Trojan.DownLoader11.27420] [Luhe.Packed.AP] [Win32/Delf.QKO] [Backdoor.Farfli.Win32.727] [Trojan.Win32.Delf] [Trojan.Skeeyah.ra] [W32/Threat-SysVenFak-based!Maxi] [W32/Injector.NTS!tr] [Trojan.VB] [Trojan.VB.corj.qrio] [Trojan*Win32/Skeeyah.A!rfn] [W32/Threat-SysVenFak-based!Maxi]
7c9d985ba5a698e44f80f0bfde3658cc[Trojan.VB.corj.qrio] [Win32/Delf.QKO] [Luhe.Packed.AP] [W32/Injector.NTS!tr] [W32/Threat-SysVenFak-based!Maxi] [W32/Threat-SysVenFak-based!Maxi] [Trojan.Win32.Delf] [Backdoor.Farfli.Win32.727] [Trojan.VB] [Trojan.DownLoader11.27420]
240343da319f3cb56e5ad7587d3468a5[Trojan.VB.corj.qrio] [Win32/Delf.QKO] [Luhe.Packed.AP] [W32/Injector.NTS!tr] [Trojan*Win32/Dynamer!ac] [W32/Threat-SysVenFak-based!Maxi] [W32/Threat-SysVenFak-based!Maxi] [Trojan.Win32.Delf] [Backdoor.Farfli.Win32.727] [Trojan.VB] [Trojan.DownLoader11.27420]
8a82d0df3cdfbcae2a38b70c37fa6a53[Trojan.DownLoader11.27420] [Trojan.VB] [Backdoor.Farfli.Win32.727] [Trojan.Win32.Delf] [W32/Threat-SysVenFak-based!Maxi] [W32/Threat-SysVenFak-based!Maxi] [Trojan*Win32/Skeeyah.A!rfn] [W32/Delf.QKO!tr] [Luhe.Packed.AP] [Win32/Delf.QKO] [Trojan.VB.corj.qrio]
1c6fa0b1b72bfd46cf1a27fcae0873ab[Win32/Remex.ZAZQ!suspicious] [Trojan.DownLoader11.27420] [Trojan.VB] [Backdoor.Farfli.Win32.727] [Trojan.Win32.Delf] [W32/Threat-SysVenFak-based!Maxi] [W32/Threat-SysVenFak-based!Maxi] [Trojan*Win32/Skeeyah.A!rfn] [W32/Injector.NTS!tr] [Luhe.Packed.AP] [Win32/Delf.QKO] [Trojan.VB.corj.qrio]

Whois
PropertyValue
Email gnway@gnway.com
NameServer NS1.GNWAY.COM
Created 2013-03-30 00:18:47
Changed 2014-12-01 08:19:04
Registrar XIN NET TECHNOLOGY C

DNS Resolutions
DateIP Address
2014-08-14174.139.217.151 (ClassC)
2014-09-28103.224.248.227 (ClassC)
2015-05-07122.10.93.136 (ClassC)
2022-11-0711.23.33.44 (ClassC)
2025-12-0647.88.148.135 (ClassC)

Port 80
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information