Domain > frii.com

More information on this domain is in AlienVault OTX

Files that talk to frii.com

MD5	A/V
833009a54c295a72ad64ab0941f482fe	[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
15d18c6131366d57c2dd18d866444746	[HW32.CDB.2393] [Packed.Win32.Katusha.3!O] [Trojan/Kryptik.djh] [Hlux.ZY] [Backdoor.Win32.Hlux.dtsu] [UnclassifiedMalware] [BackDoor.Slym.13011] [TR/Kryptik.oenzk] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [W32/Trojan.XKZV-6012] [Win32/Kryptik.CBNK] [Trojan.Crypt3] [W32/Hlux.DJH!tr.bdr] [Crypt3.OLP] [Backdoor.Win32.Hlux.Aq]
fe734b28009c7dd5389f64d72722bb21
d42c1a59b111316f7481770349e653db	[HW32.CDB.87f3] [Malware.Packer.OCD]
ebbf2139fa265c6896be78fe8bbd44f7
11769c481554f793ec20fe2b0189a751	[HW32.CDB.B5f3] [Packed.Win32.Katusha.3!O] [Trojan.Win32.Hlux.cxorid] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dsfl] [TrojWare.Win32.Kryptik.CBCJ] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.MalPacked] [Heur.Trojan.Hlux] [Trojan.Crypt] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBLX]

Whois

Property	Value
NameServer	NS2.FRII.NET
Created	1995-10-18 00:00:00
Changed	2015-03-27 00:00:00
Expires	2015-10-17 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2013-09-29	216.17.135.75 (ClassC)
2015-05-24	-
2018-11-20	216.17.136.180 (ClassC)
2019-12-03	216.17.195.3 (ClassC)
2020-05-14	216.17.183.135 (ClassC)
2021-11-08	216.17.187.65 (ClassC)
2024-05-08	199.45.237.240 (ClassC)
2026-03-02	204.144.128.57 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Sun, 13 Aug 2023 20:17:09 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cacheyes; ExpiresSun, 13-Aug-23 21:17:09 GMT; Domainfrii.com;

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    title>Captcha/title>    link relstylesheet          hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css          integritysha384-1q8mTJOASx8j1Au+a5WDVnPi2lkFfwwEAa8hDDdjZlpLegxhjVME1fgjWPGmkzs7          crossoriginanonymous>    link hrefdata:image/x-icon;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQEAYAAABPYyMiAAAABmJLR0T///////8JWPfcAAAACXBIWXMAAABIAAAASABGyWs+AAAAF0lEQVRIx2NgGAWjYBSMglEwCkbBSAcACBAAAeaR9cIAAAAASUVORK5CYII          relicon typeimage/x-icon/>    link hrefhttps://fonts.googleapis.com/css?familyNoto+Sans          relstylesheet>    script srchttps://ajax.googleapis.com/ajax/libs/jquery/3.6.3/jquery.min.js>/script>    script srchttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js>/script>    script srchttps://www.google.com/recaptcha/api.js?hlen            async defer>    /script>    style>        html, body {            height: 100%;        }        .wraper {            padding-bottom: 56px;            position: relative;            min-height: 100%;        }        .invisible_mode .wraper {            display: none;        }        .header {            height: 63px;            background-color: white;        }        .middle {            height: 186px;            background-color: rgba(55, 171, 99, 0.75);        }        .bottom {            background-color: #f2f2f2;            position: absolute;            bottom: 0px;            top: 249px;            width: 100%;        }        .captcha_absolute {            margin-top: -153px;        }        .captcha_div {            width: 485px;            margin: 0 auto;            box-shadow: 0 5px 8px 0 rgba(0, 0, 0, 0.18), 0 0 8px 0 rgba(0, 0, 0, 0.12);            background-color: white;            padding: 47px 48px 18px 48px;            position: relative;        }        .cap_head {            border-bottom: 1px solid #d8d8d8;            padding-bottom: 17px;            margin: 0 10px 20px 10px;        }        .logo_shield {            display: inline-block;

Port 443

HTTP/1.1 200 OKDate: Sun, 13 Aug 2023 20:17:09 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cacheyes; ExpiresSun, 13-Aug-23 21:17:09 GMT; Domainfrii.com;

Subdomains

Date	Domain	IP
forwarding.frii.com	2014-03-24	216.17.128.10
www.frii.com	2025-10-31	204.144.128.57

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]