Domain > kr.freel2j.wo.tc

More information on this domain is in AlienVault OTX

Date	IP Address
2014-01-26	121.114.235.160 (ClassC)
2015-05-17	211.233.75.83 (ClassC)
2019-08-15	151.80.13.35 (ClassC)
2024-06-20	211.110.11.144 (ClassC)
2024-08-31	211.110.11.146 (ClassC)
2025-01-24	15.235.215.27 (ClassC)
2025-04-07	15.235.216.200 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Thu, 15 Aug 2019 02:58:37 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16X-Powered-By: PHP/5.4.16Content-Length: 5004Content-Type: text/html; charsetUTF-8

HTML>HEAD>	TITLE>Free subdomain powered by DNSEver.com/TITLE>	META http-equivcontent-type contenttext/html; charsetutf-8>    link relStyleSheet HREFcss/css.css typetext/css titlestyle>    link relStyleSheet HREFcss/partner.css typetext/css titlestyle>/HEAD>BODY MARGINWIDTH0 MARGINHEIGHT0 TOPMARGIN0 LEFTMARGIN0 BACKGROUNDimg/bg.gif>TABLE border0 width100% cellpadding6 cellspacing0>TR>	TD aligncenter>		TABLE border0 width700 cellpadding6 cellspacing0>		TR>		TD>			TABLE border0 width100% cellpadding1 cellspacing0>			TR>			TD bgcolor#FFFFFF>				TABLE border0 width100% cellpadding0 cellspacing0 valigntop>				!-- HEAD ROW {{{ -->				TR>TD>					TABLE border0 width100% cellpadding0 cellspacing0 valigntop>					TR>					!-- LOGO BOX {{{ -->					TD aligncenter width195 height120 bgcolor#376FB6>A hrefhttp://www.dnsever.com>IMG srcimg/logo.gif border0 targetdnsever>/A>/TD>					!-- }}} -->					!-- BANNER BOX {{{ -->						TD aligncenter valignmiddle bgcolor#E9F6FF>							Web-based DNS Service - a hrefhttp://www.dnsever.com>font color#f11111>DNS/font>font color#1111f1>Ever/font>/a>						/TD>					!-- }}} -->					/TR>					/TABLE>				/TD>/TR>				!-- HEAD ROW }}} -->				!-- BODY ROW {{{ -->				TR>					TD valigntop aligncenter>						FORM nameform methodpost actionstart.html>						INPUT typehidden nameexternal valueegloos/>						INPUT typehidden iddomain namedomain value/>						INPUT typehidden idotp nameotp value/>						INPUT typehidden idip nameip value/>						INPUT typehidden idselected_menu nameselected_menu value/>						INPUT typehidden idcommand namecommand value/>						INPUT typehidden nameskey value>						INPUT typehidden nameurl value>						TABLE border0 width100% cellpadding20 cellspacing0 aligncenter>						TR>						TD>						TABLE border0 width80% cellpadding2 cellspacing0 aligncenter>							TR>								TD aligncenter>									TABLE CELLSPACING0 CELLPADDING0 BORDER0>	TR>		TD>IMG SRCimg/ttop.gif>/TD>	/TR>	TR>		TD backgroundimg/tbg-repeat.gif stylebackground-repeat: repeat-y; classtt rowspan2>			Welcome to B>span classsubDomain>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
4be9f22829677e62d2ce762a14464068	[W32.GeminiC.Worm] [Packed.Win32.TDSS!O] [Trojan.Downloader] [W32/Heuristic-210!Eldorado] [Suspicious_F.E] [Win32/Oflwr.A!crypt] [Trojan.Win32.Badur.gixt] [Packed/FSG] [Mal/Behav-160] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [PE:Trojan.Friet!1.9DB0] [W32/Qhost_Banker.OM!tr] [Luhe.Packed.A] [Trojan.Win32.Badur.aPti]
81017468aeec9374b7c1b5b17b983887	[HW32.CDB.4fa0] [Trojan.Win32.Krap.1!O] [Suspicious.BredoLab] [Cryp_Xin1] [Trojan-Banker.Win32.Qhost.aby] [Packed/PECompact] [Trojan.Click3.5589] [Heuristic.LooksLike.Win32.SuspiciousPE.C] [Mal/Behav-160] [TrojanProxy:Win32/Potukorp.A] [W32/OnLineGames.AJN!tr] [PSW.Banker6.BFPV]

Domain > kr.freel2j.wo.tc

Is this malicious?

Files that talk to kr.freel2j.wo.tc

DNS Resolutions

Port 80