Domain > www.gen365.co.kr

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to www.gen365.co.kr

Whois

Property	Value
Name	genstech
Email	miso@rootshell.co.kr
NameServer	ns3.anyhost.net
Created	2011-04-05 00:00:00
Changed	2011-04-05 00:00:00
Expires	2016-04-05 00:00:00
Registrar	Whois Corp.

DNS Resolutions

Date	IP Address
2013-10-17	116.193.89.44 (ClassC)
2021-01-12	112.175.85.149 (ClassC)
2024-12-27	115.68.95.106 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Mon, 17 Aug 2020 06:33:55 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingP3P: CPALL CURa ADMa DEVa TAIa OUR BUS IND PH

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />link href/css/basic.css relstylesheet typetext/css />script languagejavascript typetext/javascript src/js/design.js>/script>title>젠스텍/title>/head>body>div idheader_main>	script>fl_view(object classidclsid:D27CDB6E-AE6D-11cf-96B8-444553540000 codebasehttp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version9,0,28,0 width1000 height468>param namemovie value/swf/main.swf />param namequality valuehigh />param namewmode valuetransparent />embed src/swf/main.swf qualityhigh pluginspagehttp://www.adobe.com/shockwave/download/download.cgi?P1_Prod_VersionShockwaveFlash typeapplication/x-shockwave-flash width1000 height468>/embed>/object>)/script>/div>div styleposition:absolute; left:50%; z-index:98; top:264px>	div styleposition:relative; left:31px>img src/img/main/product.png border0 usemap#main_pd_btn classpng24>	map namemain_pd_btn>		area shaperect coords8,5,33,27 href# alt이전>		area shaperect coords423,4,454,27 href# alt다음>	/map>		/div>/div>div styleposition:absolute; left:50%; z-index:99; top:299px>	div styleposition:relative; left:55px>		table border0 cellspacing0 cellpadding0>			tr>				td width50>img src/img/main/pd_img01.gif classimg_box01>/td>				td width104 stylepadding:0 10px>					ul idmain_list01>						li classsubject>연료계통 수리/li>						li>연료펌프,인젝타, 액츄레이타(가버너),콘트롤유니트.../li>					/ul>				/td>				td width50>img src/img/main/pd_img02.gif classimg_box01>/td>				td width104 stylepadding:0 10px>					ul idmain_list01>						li classsubject>냉각계통 수리/li>						li>냉각수 펌프,라지에타 등으로 이루어진다./li>					/ul>				/td>			/tr>		/table>	/div>/div>div idbody>table width100% border0 cellspacing0 cellpadding0>	tr>		td width280 valigntop stylepadding:0 10px>!-- -->			table width482 border0 cellspaci

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
6840C190B902F6D1DCD7AA8C256483D3
A17B1DA4BE2A7D6BFAF529326C60093D
62e170f4e022a24e9cfab412a29c01e9	[Trojan-Dropper/W32.Small.234504] [Artemis!62E170F4E022] [Trojan.GamesThief.NR] [Riskware] [Trojan/Dropper.Small.axx] [Swisyn.CB] [Win32/Gamepass.PTP] [TROJ_SPNV.01JK13] [Trojan-Dropper.Win32.Small.axx] [Trojan.DR.Small!EwnYg1O5HSU] [UnclassifiedMalware] [Trojan.MulDrop.14344] [TR/Graftor.1080321] [Heuristic.BehavesLike.Win32.Suspicious-PKR.K] [Mal/Behav-027] [TrojanDropper.Small.cnv] [Win32.Troj.Small.(kcloud)] [TrojanDropper:Win32/Farfli.E] [TrojanDropper.Small] [Trj/CI.A] [Backdoor.Farfli!4925]

Domain > www.gen365.co.kr

Is this malicious?

Files that talk to www.gen365.co.kr

Whois

DNS Resolutions

Port 80