Domain > www.webdev04.intranet.newcenturysoftware.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-27	162.241.16.20 (ClassC)

HTTP/1.1 200 OKDate: Mon, 11 Nov 2024 23:30:33 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeLast-Modified: Mon, 29 Jan 2024 20:30:27 GMTAccept-Ranges: bytesContent-Length: 2810host-header: d3AuY

#!/usr/bin/php?php        if ( (isset($_GETtestifworking)) && ($_GETtestifworking  1) ) {                echo It works;                exit;        }	//TODO: Replace portfolio ID with your Portfolio ID	$portfolioId	 5POJ5651L;	$forwardDomain	 http://www.explorefreeresults.com;	//	//	// DO NOT CHANGE BELOW THIS LINE	//	//	error_reporting(0);	$domain			 urlencode(isStringSet( safeReturn( $_SERVER, SERVER_NAME ) )?safeReturn( $_SERVER, SERVER_NAME ):safeReturn( $_SERVER, HTTP_HOST ));	$domain_split  explode(.,$_SERVERHTTP_HOST);	if (( count($domain_split) > 2) && ( !preg_match(/^www./, $_SERVERHTTP_HOST) ) || $_SERVERSERVER_PORT  443 ) {	        header(Location: /404.html);		exit;	}	$user_agent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$ipAddress		 urlencode(safeReturn( $_SERVER,REMOTE_ADDR));	$userAgent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$xIP			 urlencode(safeReturn( $_SERVER,HTTP_X_FORWARDED_FOR ));	$originalURL 	 urlencode(http://.$_SERVERHTTP_HOST.$_SERVERREQUEST_URI);	$languageHeader  urlencode($_SERVERHTTP_ACCEPT_LANGUAGE);	$referrer 		 urlencode($_SERVERHTTP_REFERER);	$url  $forwardDomain./sk-park.php?dn.$domain.&ua.$userAgent.&requrl.$originalURL.&al.$languageHeader.&reqref.$referrer.&pid.$portfolioId.&ip.$ipAddress.&xfip.$xIP;	try {		echo getContentUsingCurl($url);	}	catch(Exception $e){          header(Location: .$forwardDomain./?dn.$domain.&pid.$portfolioId.&spfwd1);	}	function safeReturn($array, $index)	{		return isset($array$index)? $array$index : null;	}	function isStringSet($string)	{		return (! is_null($string) && $string ! );	}	function getContentUsingCurl( $url )	{		if(!function_exists(curl_init))		{			throw new Exception ( No curl support );		}		$curlResource curl_init ();		if (!$curlResource)		{			throw new Exception ( Not able to initialise curl resource );		}		$options  array (			CURLOPT_CONNECTTIMEOUT > 3,			CURLOPT_RETURNTRANSFER > true,			CURLOPT_FOLLOWLOCATION > true,			CURLOPT_MAXREDIRS > 3,			CURLOPT_TIMEOUT > 6,			CURLOPT_URL > $url		);		curl_setopt_array ( $cu

Subdomains

Date	Domain	IP
direwolf2020.intranet.newcenturysoftware.com	2024-11-12	162.241.16.20
www.direwolf2020.intranet.newcenturysoftware.com	2024-11-13	162.241.16.20
webdev04.intranet.newcenturysoftware.com	2024-11-12	162.241.16.20
www.webdev04.intranet.newcenturysoftware.com	2024-12-27	162.241.16.20
hodor.intranet.newcenturysoftware.com	2024-11-11	162.241.16.20
www.hodor.intranet.newcenturysoftware.com	2024-11-11	162.241.16.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.webdev04.intranet.newcenturysoftware.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains