Domain > www.friendsinwar.com

More information on this domain is in AlienVault OTX

Files that talk to www.friendsinwar.com

MD5	A/V
a74bfac420f2238bb41bf89c07333dbd
f2f7ca6ceb6be857eb5b6d8d58efff48
c7b88e702000bf5184cf54f160e9b4a2	[Backdoor.Win32.A.Hupigon.9255037]
58c20fb6a995ac371bd7a2cf5cf0abf6
804f93b6415c009485ba8aa326840f20	[WS.Reputation.1] [Virus.Win32.Part.a]
6858b0f6c007546abe24d669049fec8d	[WS.Reputation.1] [Virus.Win32.Part.a]
f60021a19a647d077adac3a398a6fc1c
e8c9ca0ecedb94316e8fec67e6da3465
1993de74c00b68ede41d580f2c668844	[WS.Reputation.1] [UnclassifiedMalware] [Virus.Win32.Part.a] [Trojan.Win32.FreeKeylogger.B]

Whois

Property	Value
Email	tunedcars2003@hotmail.com
NameServer	NS4.LEASEWEB.NET
Created	2009-05-04 00:00:00
Changed	2016-05-05 00:00:00
Expires	2017-05-04 00:00:00
Registrar	KEY-SYSTEMS GMBH

DNS Resolutions

Date	IP Address
2019-09-20	95.211.78.8 (ClassC)
2024-07-08	69.16.230.42 (ClassC)
2024-07-27	172.232.25.148 (ClassC)
2024-11-27	172.232.31.180 (ClassC)
2024-12-17	172.232.4.213 (ClassC)
2025-07-14	69.16.230.165 (ClassC)
2025-09-05	172.237.146.8 (ClassC)
2025-10-04	172.233.219.49 (ClassC)
2026-02-02	172.233.219.123 (ClassC)
2026-02-23	172.237.146.25 (ClassC)

HTTP/1.1 200 OKDate: Fri, 20 Sep 2019 15:44:40 GMTServer: Apache/2Upgrade: h2,h2cConnection: UpgradeX-Powered-By: PHP/5.6.36Set-Cookie: PHPSESSIDrd4arqih1lf280gkoj7srohnl2; path/Expires: Thu, 19 Nov 1

html>head>meta http-equivContent-Language contenten>meta http-equivContent-Type contenttext/html; charsetutf-8>meta nameviewport contentwidthdevice-width, initial-scale1>script srcinclude/jquery.min.js>/script>script srcinclude/popper.min.js>/script>script srcbootstrap-4.1.3/js/bootstrap.min.js>/script>link relstylesheet hrefbootstrap-4.1.3/css/bootstrap.min.css>link async hreftemplate/basic.css relstylesheet typetext/css />script async srchttp://friendsinwar.com/popup.js>/script>/head>body>amp-auto-ads typeadsense              data-ad-clientca-pub-0025056737753967>/amp-auto-ads>div idfb-root>/div>script>(function(d, s, id) {  var js, fjs  d.getElementsByTagName(s)0;  if (d.getElementById(id)) return;  js  d.createElement(s); js.id  id;  js.src  https://connect.facebook.net/en_GB/sdk.js#xfbml1&versionv3.2&appId1659685774252044&autoLogAppEvents1;  fjs.parentNode.insertBefore(js, fjs);}(document, script, facebook-jssdk));/script>div classcontainer>	div classcard>		div classcard-body>			table width100%>				tr>					td width10%>/td>					td width80%>						center>							h4 classalert-heading>Friends in War - Wallpapers/h4>							p>Free Beautiful High Quality Wallpapers/p>						/center>					/td>					td width10%>						div classfb-like data-hrefhttps://www.facebook.com/Friends.in.War data-width100 data-layoutbox_count data-actionlike data-sizelarge data-show-facesfalse data-sharetrue>/div>					/td>				/tr>			/table>		/div>	/div>nav classnavbar navbar-expand-md sticky-top navbar-dark>	button classnavbar-toggler btn btn-info btn-block btn-nav typebutton data-togglecollapse data-target#collapsibleNavbar>		a classnavbar-brand href#>Main Menu/a>		span classnavbar-toggler-icon>/span>	/button>	div classcollapse navbar-collapse idcollapsibleNavbar>		ul classnavbar-nav>			li classpage-item>a classbtn btn-info btn-block btn-nav hrefindex.php>Home/a>/li>			li classpage-item>a classbtn btn-info btn-block btn-nav hrefcat_list.php>Categories/a>/li>			li classpage-item>a classbtn btn-info btn-block btn-nav hrefblog/ target_blank>Computer

Subdomains

Date	Domain	IP
games.friendsinwar.com	2024-06-27	69.16.230.42
free-dos-games.friendsinwar.com	2025-08-08	69.16.230.165
free-apps.friendsinwar.com	2014-03-09	95.211.78.8
www.friendsinwar.com	2019-09-20	95.211.78.8

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.friendsinwar.com

Is this malicious?

Files that talk to www.friendsinwar.com

Whois

DNS Resolutions

Port 80

Subdomains