Domain > ftp.renovarauditivo.com.br

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-01-17	107.154.158.212 (ClassC)
2025-05-02	107.154.172.212 (ClassC)

HTTP/1.1 200 OKDate: Fri, 02 May 2025 12:48:40 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeLast-Modified: Mon, 29 Jan 2024 20:27:31 GMTAccept-Ranges: bytesContent-Length: 2810Cache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Type: application/cgiSet-Cookie: visid_incap_17469852jH87HBkQ/aocLRWcCrHQye/FGgAAAAAQUIPAAAAAACVoFWkTlzMIHaYGajixcEK; expiresSat, 02 May 2026 07:45:31 GMT; HttpOnly; path/; Domain.renovarauditivo.com.brSet-Cookie: incap_ses_2110_1746985C+ibQt3wylLl4fmtBzpIHSi/FGgAAAAACUpBL0DdGFFBORJJEN1nvg; path/; Domain.renovarauditivo.com.brX-CDN: ImpervaX-Iinfo: 1016-26285209-26285241 NNNN CT(73 -1 0) RT(1746190119885 0) q(0 2 3 1) r(4 4) U2

#!/usr/bin/php?php        if ( (isset($_GETtestifworking)) && ($_GETtestifworking  1) ) {                echo It works;                exit;        }	//TODO: Replace portfolio ID with your Portfolio ID	$portfolioId	 5POJ5651L;	$forwardDomain	 http://www.explorefreeresults.com;	//	//	// DO NOT CHANGE BELOW THIS LINE	//	//	error_reporting(0);	$domain			 urlencode(isStringSet( safeReturn( $_SERVER, SERVER_NAME ) )?safeReturn( $_SERVER, SERVER_NAME ):safeReturn( $_SERVER, HTTP_HOST ));	$domain_split  explode(.,$_SERVERHTTP_HOST);	if (( count($domain_split) > 2) && ( !preg_match(/^www\./, $_SERVERHTTP_HOST) ) || $_SERVERSERVER_PORT  443 ) {	        header(Location: /404.html);		exit;	}	$user_agent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$ipAddress		 urlencode(safeReturn( $_SERVER,REMOTE_ADDR));	$userAgent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$xIP			 urlencode(safeReturn( $_SERVER,HTTP_X_FORWARDED_FOR ));	$originalURL 	 urlencode(http://.$_SERVERHTTP_HOST.$_SERVERREQUEST_URI);	$languageHeader  urlencode($_SERVERHTTP_ACCEPT_LANGUAGE);	$referrer 		 urlencode($_SERVERHTTP_REFERER);	$url  $forwardDomain./sk-park.php?dn.$domain.&ua.$userAgent.&requrl.$originalURL.&al.$languageHeader.&reqref.$referrer.&pid.$portfolioId.&ip.$ipAddress.&xfip.$xIP;	try {		echo getContentUsingCurl($url);	}	catch(Exception $e){          header(Location: .$forwardDomain./?dn.$domain.&pid.$portfolioId.&spfwd1);	}	function safeReturn($array, $index)	{		return isset($array$index)? $array$index : null;	}	function isStringSet($string)	{		return (! is_null($string) && $string ! );	}	function getContentUsingCurl( $url )	{		if(!function_exists(curl_init))		{			throw new Exception ( No curl support );		}		$curlResource curl_init ();		if (!$curlResource)		{			throw new Exception ( Not able to initialise curl resource );		}		$options  array (			CURLOPT_CONNECTTIMEOUT > 3,			CURLOPT_RETURNTRANSFER > true,			CURLOPT_FOLLOWLOCATION > true,			CURLOPT_MAXREDIRS > 3,			CURLOPT_TIMEOUT > 6,			CURLOPT_URL > $url		);		curl_setopt_array ( $curlResource, $options );		$resultContent  curl_exec($curlResource);		curl_close($curlResource);		if(!$resultContent)		{			throw new Exception ( Not able to fetch response . );		}		return $resultContent;	}	function getContentUsingFGet($url)	{		if(!function_exists(file_get_contents))		{			throw new Exception ( No file_get_contents() support );		}		$resultContent  file_get_contents($url);		if(!isStringSet($resultContent))		{			throw new Exception ( Not able to fetch response . );		}		return $resultContent;	}?>

Subdomains

Date	Domain	IP
cpanel.renovarauditivo.com.br	2025-04-11	107.154.172.212
webmail.renovarauditivo.com.br	2025-04-27	107.154.172.212
ftp.renovarauditivo.com.br	2025-05-02	107.154.172.212
www.renovarauditivo.com.br	2024-12-28	172.67.143.179

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ftp.renovarauditivo.com.br

Is this malicious?

DNS Resolutions

Port 80

Subdomains