Domain > topadvises.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS2.BH-IN-2.WEBHOSTBOX.NET
Created	2016-08-27 00:00:00
Changed	2016-08-27 00:00:00
Expires	2018-08-27 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2018-06-27	103.21.59.15 (ClassC)
2018-12-13	104.31.66.186 (ClassC)
2018-12-13	104.31.67.186 (ClassC)
2025-01-31	108.167.147.194 (ClassC)

HTTP/1.1 200 OKDate: Thu, 18 Apr 2024 23:24:07 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeLast-Modified: Tue, 30 Jan 2024 18:40:33 GMTAccept-Ranges: bytesContent-Length: 2810Cache-Control: no-

#!/usr/bin/php?php        if ( (isset($_GETtestifworking)) && ($_GETtestifworking  1) ) {                echo It works;                exit;        }	//TODO: Replace portfolio ID with your Portfolio ID	$portfolioId	 5POJ5651L;	$forwardDomain	 http://www.explorefreeresults.com;	//	//	// DO NOT CHANGE BELOW THIS LINE	//	//	error_reporting(0);	$domain			 urlencode(isStringSet( safeReturn( $_SERVER, SERVER_NAME ) )?safeReturn( $_SERVER, SERVER_NAME ):safeReturn( $_SERVER, HTTP_HOST ));	$domain_split  explode(.,$_SERVERHTTP_HOST);	if (( count($domain_split) > 2) && ( !preg_match(/^www./, $_SERVERHTTP_HOST) ) || $_SERVERSERVER_PORT  443 ) {	        header(Location: /404.html);		exit;	}	$user_agent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$ipAddress		 urlencode(safeReturn( $_SERVER,REMOTE_ADDR));	$userAgent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$xIP			 urlencode(safeReturn( $_SERVER,HTTP_X_FORWARDED_FOR ));	$originalURL 	 urlencode(http://.$_SERVERHTTP_HOST.$_SERVERREQUEST_URI);	$languageHeader  urlencode($_SERVERHTTP_ACCEPT_LANGUAGE);	$referrer 		 urlencode($_SERVERHTTP_REFERER);	$url  $forwardDomain./sk-park.php?dn.$domain.&ua.$userAgent.&requrl.$originalURL.&al.$languageHeader.&reqref.$referrer.&pid.$portfolioId.&ip.$ipAddress.&xfip.$xIP;	try {		echo getContentUsingCurl($url);	}	catch(Exception $e){          header(Location: .$forwardDomain./?dn.$domain.&pid.$portfolioId.&spfwd1);	}	function safeReturn($array, $index)	{		return isset($array$index)? $array$index : null;	}	function isStringSet($string)	{		return (! is_null($string) && $string ! );	}	function getContentUsingCurl( $url )	{		if(!function_exists(curl_init))		{			throw new Exception ( No curl support );		}		$curlResource curl_init ();		if (!$curlResource)		{			throw new Exception ( Not able to initialise curl resource );		}		$options  array (			CURLOPT_CONNECTTIMEOUT > 3,			CURLOPT_RETURNTRANSFER > true,			CURLOPT_FOLLOWLOCATION > true,			CURLOPT_MAXREDIRS > 3,			CURLOPT_TIMEOUT > 6,			CURLOPT_URL > $url		);		curl_setopt_array ( $cu

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > topadvises.com

Is this malicious?

Whois

DNS Resolutions

Port 80