Domain > www.tiamanbeauty.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2019-11-30	108.179.243.19 (ClassC)
2025-12-16	108.179.243.12 (ClassC)

HTTP/1.1 200 OKDate: Sun, 25 May 2025 02:07:51 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeLast-Modified: Fri, 26 Jan 2024 17:10:42 GMTAccept-Ranges: bytesContent-Length: 2810Cache-Control: no-

#!/usr/bin/php?php        if ( (isset($_GETtestifworking)) && ($_GETtestifworking  1) ) {                echo It works;                exit;        }	//TODO: Replace portfolio ID with your Portfolio ID	$portfolioId	 5POJ5651L;	$forwardDomain	 http://www.explorefreeresults.com;	//	//	// DO NOT CHANGE BELOW THIS LINE	//	//	error_reporting(0);	$domain			 urlencode(isStringSet( safeReturn( $_SERVER, SERVER_NAME ) )?safeReturn( $_SERVER, SERVER_NAME ):safeReturn( $_SERVER, HTTP_HOST ));	$domain_split  explode(.,$_SERVERHTTP_HOST);	if (( count($domain_split) > 2) && ( !preg_match(/^www./, $_SERVERHTTP_HOST) ) || $_SERVERSERVER_PORT  443 ) {	        header(Location: /404.html);		exit;	}	$user_agent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$ipAddress		 urlencode(safeReturn( $_SERVER,REMOTE_ADDR));	$userAgent		 urlencode(safeReturn( $_SERVER,HTTP_USER_AGENT));	$xIP			 urlencode(safeReturn( $_SERVER,HTTP_X_FORWARDED_FOR ));	$originalURL 	 urlencode(http://.$_SERVERHTTP_HOST.$_SERVERREQUEST_URI);	$languageHeader  urlencode($_SERVERHTTP_ACCEPT_LANGUAGE);	$referrer 		 urlencode($_SERVERHTTP_REFERER);	$url  $forwardDomain./sk-park.php?dn.$domain.&ua.$userAgent.&requrl.$originalURL.&al.$languageHeader.&reqref.$referrer.&pid.$portfolioId.&ip.$ipAddress.&xfip.$xIP;	try {		echo getContentUsingCurl($url);	}	catch(Exception $e){          header(Location: .$forwardDomain./?dn.$domain.&pid.$portfolioId.&spfwd1);	}	function safeReturn($array, $index)	{		return isset($array$index)? $array$index : null;	}	function isStringSet($string)	{		return (! is_null($string) && $string ! );	}	function getContentUsingCurl( $url )	{		if(!function_exists(curl_init))		{			throw new Exception ( No curl support );		}		$curlResource curl_init ();		if (!$curlResource)		{			throw new Exception ( Not able to initialise curl resource );		}		$options  array (			CURLOPT_CONNECTTIMEOUT > 3,			CURLOPT_RETURNTRANSFER > true,			CURLOPT_FOLLOWLOCATION > true,			CURLOPT_MAXREDIRS > 3,			CURLOPT_TIMEOUT > 6,			CURLOPT_URL > $url		);		curl_setopt_array ( $cu

Subdomains

Date	Domain	IP
webdisk.tiamanbeauty.com	2025-12-09	108.179.243.12
cpanel.tiamanbeauty.com	2025-05-29	108.179.243.12
mail.tiamanbeauty.com	2025-05-24	108.179.243.12
webmail.tiamanbeauty.com	2025-06-23	108.179.243.12
autodiscover.tiamanbeauty.com	2025-05-24	108.179.243.12
cpcalendars.tiamanbeauty.com	2025-06-29	108.179.243.12
cpcontacts.tiamanbeauty.com	2025-05-21	108.179.243.12
www.tiamanbeauty.com	2025-12-16	108.179.243.12

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.tiamanbeauty.com

Is this malicious?

DNS Resolutions

Port 80

Subdomains