Domain > frfv-org.co.cc

More information on this domain is in AlienVault OTX

Files that talk to frfv-org.co.cc

MD5	A/V
309167f6f45c90561e23aa47ff67e765	[W32/Trojan.BUJE-0306] [Win32/Comame.CS] [Trojan.Comame.B5] [Trojan.Swisyn-72] [Trojan.MulDrop3.24256] [W32/VB.AQM!tr] [W32/Trojan2.NTKU] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.cbhx] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [Mal/Comame-D] [W32.SillyFDC] [TROJ_CO.1ABB76EA] [Trojan.Swisyn]
eb3d5acfe6dcd296f78cb20a61f52726	[Virtu-BWin32Virtu-B] [W32/Trojan.CEUC-8131] [Win32/Comame.CS] [Trojan.Comame.B5] [Trojan.MulDrop3.24256] [W32/VB.AQM!tr] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.cbhx] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [Mal/Comame-D] [W32.SillyFDC] [TROJ_CO.1ABB76EA] [Trojan.Swisyn]
0fa94b506c231349ce71151966759d86	[W32/Trojan.BUJE-0306] [Win32/Comame.CS] [Trojan.Comame.B5] [Trojan.Swisyn-72] [Trojan.MulDrop3.24256] [W32/VB.AQM!tr] [W32/Trojan2.NTKU] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.cbhx] [Worm.Win32.Autorun.txi] [Mal/Comame-D] [W32.SillyFDC] [TROJ_CO.1ABB76EA] [Trojan.Swisyn]
c38e968e590e246c2978f39048b85e22	[VB.ki] [Trojan*Win32/Comame]
f5e17a85a5aefc57ae4abddbf5daa734	[VitroWin32Vitro] [W32/Trojan.UTEG-6495] [Win32/Comame.CT] [Trojan.Swisyn.CCGN.nw4] [BC.Heuristic.Trojan.SusPacked.BF-6.B] [Trojan.MulDrop3.24963] [W32/VB.AQM!tr] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.ccgn] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [Mal/VB-AHB] [W32.SillyFDC] [TSPY_CO.2FE9BA42] [Trojan.Swisyn]
09f4faf479fee72a77fc9e8ae918da73	[W32/Trojan.BUJE-0306] [Win32/Comame.CS] [Trojan.Comame.B5] [Trojan.Swisyn-72] [Trojan.MulDrop3.24256] [W32/VB.AQM!tr] [W32/Trojan2.NTKU] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.cbhx] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [Mal/VB-AHB] [W32.SillyFDC] [TROJ_CO.1ABB76EA] [Trojan.Swisyn]
c09d00581b0ad468ed7781fbcd8526a6	[Trojan.Win32.Swisyn!O] [Trojan.Comame.B5] [Trojan.Swisyn.Win32.24171] [Trojan.Win32.MulDrop3.cmtisw] [W32/Trojan2.NTKU] [W32.SillyFDC] [Comame.M] [Win32/Comame.CS] [TROJ_COMAME_BL132984.TOMC] [Trojan.Swisyn-72] [Trojan.Win32.Swisyn.cbhx] [Mal/VB-AHB] [Worm.Win32.VB.AQM] [Trojan.MulDrop3.24256] [BehavesLike.Win32.Autorun.dm] [W32/Trojan.BUJE-0306] [Trojan/Win32.Swisyn] [Trojan:Win32/Comame!gmb] [Trojan.Swisyn] [Win32/AutoRun.VB.AQM] [PE:Malware.FakeXLS@CV!1.9C3D] [Trojan.Win32.Comame] [W32/VB.AQM!tr] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [TROJ_CO.1ABB76EA]
6971a68eb96d831b417c38222fc24b72	[W32/Trojan.LIEN-1228] [Win32/Comame.CT] [Trojan.Swisyn.CCGN.nw3] [Trojan.MulDrop3.24963] [W32/VB.AQM!tr] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.ccgn] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [Mal/VB-AHB] [W32.SillyFDC] [TSPY_CO.2FE9BA42] [Trojan.Swisyn]
21785ebca3953c9f3c640a9b01038c5b	[W32/Trojan.VYFD-9360] [Win32/Comame.CT] [Trojan.Swisyn.CCGN.nw3] [Win.Trojan.Swisyn-1038] [Trojan.MulDrop3.24963] [W32/Swisyn.CCGN!tr] [W32/Trojan2.OHQE] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.ccgn] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [Mal/VB-AHB] [W32.SillyFDC] [TSPY_CO.2FE9BA42] [Trojan.Swisyn]
2727b4aeed26904d35815ef4e33daac4	[W32/Trojan.BUJE-0306] [Win32/Comame.CS] [Trojan.Comame.B5] [Trojan.Swisyn-72] [Trojan.MulDrop3.24256] [W32/VB.AQM!tr] [W32/Trojan2.NTKU] [Trojan.Win32.Comame] [Trojan.Win32.Swisyn.cbhx] [Trojan*Win32/Comame!gmb] [Worm.Win32.Autorun.txi] [Mal/Comame-D] [W32.SillyFDC] [TROJ_CO.1ABB76EA] [Trojan.Swisyn]

Whois

Property	Value
NameServer	NS1.CC.CC
Created	1997-10-13 04:00:00
Changed	2015-05-01 03:46:12
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2024-08-30	175.126.123.219 (ClassC)
2025-05-12	35.91.2.62 (ClassC)
2025-07-22	44.245.154.4 (ClassC)
2025-08-08	204.246.191.53 (ClassC)
2025-08-19	99.84.66.121 (ClassC)
2025-09-08	99.84.66.57 (ClassC)
2025-09-12	18.161.6.32 (ClassC)
2025-09-16	18.161.6.25 (ClassC)
2025-09-22	99.84.66.76 (ClassC)
2025-10-11	18.161.6.121 (ClassC)
2025-10-17	3.175.34.128 (ClassC)
2025-12-02	3.175.34.90 (ClassC)
2025-12-07	3.175.34.28 (ClassC)
2026-01-18	3.175.34.89 (ClassC)

Port 443

HTTP/1.1 200 OKDate: Fri, 06 Sep 2019 04:25:59 GMTServer: ApacheContent-Length: 3678Content-Type: text/html; charsetUTF-8

script src//ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js>/script>script>function visit_browser_log(){        var formData  $(#save_log_form).serialize();         $.ajax({                type: POST,                url: /visit_browser_log/visit_browser_log.php,                data:formData,                success: function(res) {                }        });}$( document ).ready(function() {        visit_browser_log()});/script>!DOCTYPE html>html>head>meta charsetutf-8>meta nameviewport contentwidthdevice-width, initial-scale1>title>http://frfv-org.co.cc/title>meta namerobots contentnoindex>meta namegooglebot contentnoindex>form idservice_worker_form>input typehidden idtoken nametoken value>input typehidden iderr_mssg nameerr_mssg value>/form>    script srchttps://www.gstatic.com/firebasejs/4.6.2/firebase.js>/script>    script>        MsgElem  document.getElementById(msg);        TokenElem  document.getElementById(token);        NotisElem  document.getElementById(notis);        ErrElem  document.getElementById(err);        // Initialize Firebase        // TODO: Replace with your projects customized code snippet// Initialize Firebase  // TODO: Replace with your projects customized code snippetconst firebaseConfig  {  apiKey: AIzaSyCuZgUVjbnFpulVwMRTmhvAw01_pB_PUiM,  authDomain: co-cc-7fafb.firebaseapp.com,  databaseURL: https://co-cc-7fafb.firebaseio.com,  projectId: co-cc-7fafb,  storageBucket: co-cc-7fafb.appspot.com,  messagingSenderId: 153043800541,  appId: 1:153043800541:web:f93071f8382a30e0};  firebase.initializeApp(firebaseConfig);        const messaging  firebase.messaging();        messaging            .requestPermission()            .then(function () {                // MsgElem.innerHTML  Notification permission granted.                 console.log(Notification permission granted.);                                // get the token in the form of promise                return messaging.getToken()            })            .then(function(token) {                //TokenElem.innerHTML  token is :  + t

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > frfv-org.co.cc

Is this malicious?

Files that talk to frfv-org.co.cc

Whois

DNS Resolutions

Port 80

Port 443