Domain > info.porchlightrental.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS64.WORLDNIC.COM
Created	2003-04-23 00:00:00
Changed	2013-05-01 00:00:00
Expires	2020-04-23 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2015-03-06	204.93.46.209 (ClassC)
2015-03-11	198.63.196.10 (ClassC)
2015-03-19	198.47.108.75 (ClassC)
2015-03-28	165.254.206.220 (ClassC)
2017-09-01	23.50.52.66 (ClassC)
2025-08-10	50.87.226.149 (ClassC)

HTTP/1.1 200 OKDate: Mon, 01 Jul 2024 18:38:33 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeLast-Modified: Mon, 29 Jan 2024 20:00:44 GMTAccept-Ranges: bytesContent-Length: 2810host-header: d3AuY

#!/usr/bin/php?php        if ( (isset($_GETtestifworking)) && ($_GETtestifworking  1) ) {                echo It works;                exit;        }	//TODO: Replace portfolio ID with your Portfolio ID	$portfolioId	 5POJ5651L;	$forwardDomain	 http://www.explorefreeresults.com;	//	//	// DO NOT CHANGE BELOW THIS LINE	//	//	error_reporting(0);	$domain			 urlencode(isStringSet( safeReturn( $_SERVER, SERVER_NAME ) )?safeReturn( $_SERVER, SERVER_NAME ):safeReturn( $_SERVER, HTTP_HOST ));	$domain_split  explode(.,$_SERVERHTTP_HOST);	if (( count($domain_split) > 2) && ( !preg_match(/^www./, $_SERVERHTTP_HOST) ) || $_SERVERSERVER_PORT  443 ) {	        header(Location: /404.html);		exit;	}	$user_agent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$ipAddress		 urlencode(safeReturn( $_SERVER,REMOTE_ADDR));	$userAgent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$xIP			 urlencode(safeReturn( $_SERVER,HTTP_X_FORWARDED_FOR ));	$originalURL 	 urlencode(http://.$_SERVERHTTP_HOST.$_SERVERREQUEST_URI);	$languageHeader  urlencode($_SERVERHTTP_ACCEPT_LANGUAGE);	$referrer 		 urlencode($_SERVERHTTP_REFERER);	$url  $forwardDomain./sk-park.php?dn.$domain.&ua.$userAgent.&requrl.$originalURL.&al.$languageHeader.&reqref.$referrer.&pid.$portfolioId.&ip.$ipAddress.&xfip.$xIP;	try {		echo getContentUsingCurl($url);	}	catch(Exception $e){          header(Location: .$forwardDomain./?dn.$domain.&pid.$portfolioId.&spfwd1);	}	function safeReturn($array, $index)	{		return isset($array$index)? $array$index : null;	}	function isStringSet($string)	{		return (! is_null($string) && $string ! );	}	function getContentUsingCurl( $url )	{		if(!function_exists(curl_init))		{			throw new Exception ( No curl support );		}		$curlResource curl_init ();		if (!$curlResource)		{			throw new Exception ( Not able to initialise curl resource );		}		$options  array (			CURLOPT_CONNECTTIMEOUT > 3,			CURLOPT_RETURNTRANSFER > true,			CURLOPT_FOLLOWLOCATION > true,			CURLOPT_MAXREDIRS > 3,			CURLOPT_TIMEOUT > 6,			CURLOPT_URL > $url		);		curl_setopt_array ( $cu

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > info.porchlightrental.com

Is this malicious?

Whois

DNS Resolutions

Port 80